Yayın tarihine göre

Eylül 2014: sömürülen ve yeni ciddi CVE kayıtları

70 kayıt · 4 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
28İzleyin	CVE-2014-6041Silahlaştırılmış	The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribute containing a \u00google · android browser · CWE-264 Kimlik doğrulamasız	Orta5,8	—	%18,2	2 Eyl 2014
24İzleyin	CVE-2014-5465Kavram kanıtı	Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attacwerdswords · download shortcode · CWE-22 Kimlik doğrulamasız Yol geçişi	Orta5,0	—	%13,5	3 Eyl 2014
20İzleyin	CVE-2012-4768Kavram kanıtı	Cross-site scripting (XSS) vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote attackers to inject arbitmikejolley · download monitor · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%10,4	4 Eyl 2014
31İzleyin	CVE-2014-2685İstismar yok	The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 beforezend · zend framework · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	—	%2,8	4 Eyl 2014
21İzleyin	CVE-2014-3529İstismar yok	The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML externalapache · poi Kimlik doğrulamasız XXE	Orta4,3	—	%12,7	4 Eyl 2014
37İzleyin	CVE-2014-5377Silahlaştırılmış	ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials viamanageengine · device expert · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta5,0	—	%57,4	4 Eyl 2014
24İzleyin	CVE-2014-5461İstismar yok	Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial lua · lua · CWE-119 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Orta5,0	—	%12,0	4 Eyl 2014
25İzleyin	CVE-2014-4862İstismar yok	The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of public, which allows remote attackers to obtanetmaster · cbw700 software · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta5,0	—	%17,1	5 Eyl 2014
25İzleyin	CVE-2014-4863Silahlaştırılmış	The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensarris · touchstone dg950a software · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta5,0	—	%15,7	5 Eyl 2014
65Bu hafta	CVE-2014-0556Silahlaştırılmış	Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.2adobe · flash player · CWE-119 Girişsiz RCE Bellek hatası	Kritik10,0	—	%84,5	9 Eyl 2014
44Planlayın	CVE-2014-0559İstismar yok	Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.2adobe · adobe air · CWE-119 Girişsiz RCE Bellek hatası	Kritik10,0	—	%13,3	9 Eyl 2014
42Planlayın	CVE-2014-2799İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,1	9 Eyl 2014
42Planlayın	CVE-2014-4059İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4065İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,1	9 Eyl 2014
26İzleyin	CVE-2014-4068İstismar yok	The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptimicrosoft · lync server · CWE-20 Kimlik doğrulamasız Hizmet dışı bırakma	Orta5,0	—	%19,6	9 Eyl 2014
20İzleyin	CVE-2014-4070İstismar yok	Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitrmicrosoft · lync server · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%10,9	9 Eyl 2014
26İzleyin	CVE-2014-4071İstismar yok	The Server in Microsoft Lync Server 2013 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon hang) viamicrosoft · lync server Kimlik doğrulamasız Hizmet dışı bırakma	Orta5,0	—	%18,9	9 Eyl 2014
29İzleyin	CVE-2014-4072İstismar yok	Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly use a hash table for request datamicrosoft · .net framework · CWE-399 Kimlik doğrulamasız Hizmet dışı bırakma	Orta5,0	—	%30,9	9 Eyl 2014
42Planlayın	CVE-2014-4079İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
45Planlayın	CVE-2014-4080İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%25,5	9 Eyl 2014
45Planlayın	CVE-2014-4081İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%25,5	9 Eyl 2014
42Planlayın	CVE-2014-4082İstismar yok	Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%16,3	9 Eyl 2014
42Planlayın	CVE-2014-4083İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
44Planlayın	CVE-2014-4084İstismar yok	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%23,4	9 Eyl 2014
42Planlayın	CVE-2014-4085İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4086İstismar yok	Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vmicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%16,3	9 Eyl 2014
42Planlayın	CVE-2014-4087İstismar yok	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4088İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
44Planlayın	CVE-2014-4089İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%22,7	9 Eyl 2014
42Planlayın	CVE-2014-4090İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4091İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4092İstismar yok	Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4093İstismar yok	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%16,3	9 Eyl 2014
44Planlayın	CVE-2014-4094İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%22,7	9 Eyl 2014
42Planlayın	CVE-2014-4095İstismar yok	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4096İstismar yok	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4097İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4098İstismar yok	Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4099İstismar yok	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4100İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
43Planlayın	CVE-2014-4101İstismar yok	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%19,5	9 Eyl 2014
42Planlayın	CVE-2014-4102İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4103İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4104İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,9	9 Eyl 2014
42Planlayın	CVE-2014-4105İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,1	9 Eyl 2014
42Planlayın	CVE-2014-4106İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,1	9 Eyl 2014
42Planlayın	CVE-2014-4107İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,1	9 Eyl 2014
42Planlayın	CVE-2014-4108İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,1	9 Eyl 2014
46Planlayın	CVE-2014-4109Kavram kanıtı	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%31,2	9 Eyl 2014
42Planlayın	CVE-2014-4110İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,1	9 Eyl 2014
42Planlayın	CVE-2014-4111İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,1	9 Eyl 2014
60Bu hafta	CVE-2014-2624Silahlaştırılmış	Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unkhp · network node manager i Girişsiz RCE	Kritik10,0	—	%65,4	10 Eyl 2014
33İzleyin	CVE-2014-2223Kavram kanıtı	Unrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and earlier allows remote authenticated users to exeplogger · plogger · CWE-94 Girişsiz RCE Dosya yükleme	Yüksek7,5	—	%10,0	11 Eyl 2014
49Planlayın	CVE-2014-5519Silahlaştırılmış	The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the edphpwiki project · phpwiki · CWE-94 Girişsiz RCE	Yüksek7,5	—	%64,9	11 Eyl 2014
47Planlayın	CVE-2014-5460Silahlaştırılmış	Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated usertribulant · tibulant slideshow gallery · CWE-20 RCE Dosya yükleme	Orta6,5	—	%70,8	11 Eyl 2014
30İzleyin	CVE-2014-6043Kavram kanıtı	ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allowzohocorp · manageengine eventlog analyzer · CWE-264	Orta6,5	—	%12,7	11 Eyl 2014
37İzleyin	CVE-2014-3609İstismar yok	HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a requestsquid-cache · squid · CWE-20 Kimlik doğrulamasız Hizmet dışı bırakma	Orta5,0	—	%56,2	11 Eyl 2014
31İzleyin	CVE-2013-4444İstismar yok	Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a apache · tomcat · CWE-94 Girişsiz RCE Dosya yükleme	Orta6,8	—	%13,9	12 Eyl 2014
34İzleyin	CVE-2014-6270İstismar yok	Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackersquid-cache · squid · CWE-119 Girişsiz RCE Bellek hatası	Orta6,8	—	%23,3	12 Eyl 2014
76Bu hafta	CVE-2014-4404Silahlaştırılmış	Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privilapple · iphone os · CWE-787 RCE Yerel yetki yükseltme Bellek hatası	Yüksek7,8	KEV	%48,9	18 Eyl 2014
42Planlayın	CVE-2006-1318İstismar yok	Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, Office 2004 for Mac, and Office X for Mac do not properly parse record lemicrosoft · office · CWE-94 Girişsiz RCE	Kritik9,3	—	%15,4	19 Eyl 2014
99Hemen	CVE-2014-6271Silahlaştırılmış	GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attacgnu · bash · CWE-78 Girişsiz RCE Komut enjeksiyonu	Kritik9,8	KEV	%99,9	24 Eyl 2014
99Hemen	CVE-2014-7169Silahlaştırılmış	GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variablgnu · bash · CWE-78 Girişsiz RCE Komut enjeksiyonu	Kritik9,8	KEV	%99,9	24 Eyl 2014
35İzleyin	CVE-2014-1568İstismar yok	Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 3mozilla · firefox · CWE-310 Kimlik doğrulamasız	Yüksek7,5	—	%16,7	25 Eyl 2014
44Planlayın	CVE-2014-6446Silahlaştırılmış	The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows remote attackers toinfusionsoft gravity forms project · infusionsoft gravity forms · CWE-94 Girişsiz RCE	Yüksek7,5	—	%46,1	26 Eyl 2014
59Planlayın	CVE-2014-6277Kavram kanıtı	GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attgnu · bash · CWE-78 Girişsiz RCE Komut enjeksiyonu	Kritik10,0	—	%64,3	27 Eyl 2014
59Planlayın	CVE-2014-7186Kavram kanıtı	The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bognu · bash · CWE-119 Kimlik doğrulamasız Bellek hatası	Kritik10,0	—	%64,3	28 Eyl 2014
58Planlayın	CVE-2014-7187Kavram kanıtı	Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of gnu · bash · CWE-119 Kimlik doğrulamasız Bellek hatası	Kritik10,0	—	%58,4	28 Eyl 2014
52Planlayın	CVE-2013-3632Silahlaştırılmış	The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitraropenmediavault · openmediavault · CWE-264 RCE	Yüksek8,8	—	%57,1	29 Eyl 2014
95Hemen	CVE-2014-6278Silahlaştırılmış	GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attgnu · bash · CWE-78 Girişsiz RCE Komut enjeksiyonu	Yüksek8,8	KEV	%99,6	30 Eyl 2014

CVE-2014-6041
28İzleyin
The Android WebView in Android before 4.4 allows remote attackers to bypass the Same Origin Policy via a crafted attribute containing a \u00
OrtaCVSS 5,8SilahlaştırılmışEPSS %18
- Kimlik doğrulamasız
google · android browser2 Eyl 2014
CVE-2014-5465
24İzleyin
Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attac
OrtaCVSS 5,0Kavram kanıtıEPSS %13
- Kimlik doğrulamasız
- Yol geçişi
werdswords · download shortcode3 Eyl 2014
CVE-2012-4768
20İzleyin
Cross-site scripting (XSS) vulnerability in the Download Monitor plugin before 3.3.5.9 for WordPress allows remote attackers to inject arbit
OrtaCVSS 4,3Kavram kanıtıEPSS %10
- Kimlik doğrulamasız
- XSS
mikejolley · download monitor4 Eyl 2014
CVE-2014-2685
31İzleyin
The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 before
YüksekCVSS 7,5İstismar yokEPSS %2
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
zend · zend framework4 Eyl 2014
CVE-2014-3529
21İzleyin
The OPC SAX setup in Apache POI before 3.10.1 allows remote attackers to read arbitrary files via an OpenXML file containing an XML external
OrtaCVSS 4,3İstismar yokEPSS %12
- Kimlik doğrulamasız
- XXE
apache · poi4 Eyl 2014
CVE-2014-5377
37İzleyin
ReadUsersFromMasterServlet in ManageEngine DeviceExpert before 5.9 build 5981 allows remote attackers to obtain user account credentials via
OrtaCVSS 5,0SilahlaştırılmışEPSS %57
- Kimlik doğrulamasız
- Bilgi sızıntısı
manageengine · device expert4 Eyl 2014
CVE-2014-5461
24İzleyin
Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial
OrtaCVSS 5,0İstismar yokEPSS %12
- Kimlik doğrulamasız
- Bellek hatası
- Hizmet dışı bırakma
lua · lua4 Eyl 2014
CVE-2014-4862
25İzleyin
The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of public, which allows remote attackers to obta
OrtaCVSS 5,0İstismar yokEPSS %17
- Kimlik doğrulamasız
- Bilgi sızıntısı
netmaster · cbw700 software5 Eyl 2014
CVE-2014-4863
25İzleyin
The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sens
OrtaCVSS 5,0SilahlaştırılmışEPSS %15
- Kimlik doğrulamasız
- Bilgi sızıntısı
arris · touchstone dg950a software5 Eyl 2014
CVE-2014-0556
65Bu hafta
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.2
KritikCVSS 10,0SilahlaştırılmışEPSS %84
- Girişsiz RCE
- Bellek hatası
adobe · flash player9 Eyl 2014
CVE-2014-0559
44Planlayın
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.2
KritikCVSS 10,0İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
adobe · adobe air9 Eyl 2014
CVE-2014-2799
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4059
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4065
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4068
26İzleyin
The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle excepti
OrtaCVSS 5,0İstismar yokEPSS %19
- Kimlik doğrulamasız
- Hizmet dışı bırakma
microsoft · lync server9 Eyl 2014
CVE-2014-4070
20İzleyin
Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitr
OrtaCVSS 4,3İstismar yokEPSS %10
- Kimlik doğrulamasız
- XSS
microsoft · lync server9 Eyl 2014
CVE-2014-4071
26İzleyin
The Server in Microsoft Lync Server 2013 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon hang) via
OrtaCVSS 5,0İstismar yokEPSS %18
- Kimlik doğrulamasız
- Hizmet dışı bırakma
microsoft · lync server9 Eyl 2014
CVE-2014-4072
29İzleyin
Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly use a hash table for request data
OrtaCVSS 5,0İstismar yokEPSS %30
- Kimlik doğrulamasız
- Hizmet dışı bırakma
microsoft · .net framework9 Eyl 2014
CVE-2014-4079
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4080
45Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %25
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4081
45Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %25
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4082
42Planlayın
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %16
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4083
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4084
44Planlayın
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %23
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4085
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4086
42Planlayın
Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v
KritikCVSS 9,3İstismar yokEPSS %16
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4087
42Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4088
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4089
44Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %22
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4090
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4091
42Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4092
42Planlayın
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4093
42Planlayın
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %16
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4094
44Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %22
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4095
42Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4096
42Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4097
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4098
42Planlayın
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4099
42Planlayın
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4100
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4101
43Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %19
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4102
42Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4103
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4104
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4105
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4106
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4107
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4108
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4109
46Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3Kavram kanıtıEPSS %31
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4110
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-4111
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer9 Eyl 2014
CVE-2014-2624
60Bu hafta
Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unk
KritikCVSS 10,0SilahlaştırılmışEPSS %65
- Girişsiz RCE
hp · network node manager i10 Eyl 2014
CVE-2014-2223
33İzleyin
Unrestricted file upload vulnerability in plog-admin/plog-upload.php in Plogger 1.0 RC1 and earlier allows remote authenticated users to exe
YüksekCVSS 7,5Kavram kanıtıEPSS %10
- Girişsiz RCE
- Dosya yükleme
plogger · plogger11 Eyl 2014
CVE-2014-5519
49Planlayın
The Ploticus module in PhpWiki 1.5.0 allows remote attackers to execute arbitrary code via shell metacharacters in a device option in the ed
YüksekCVSS 7,5SilahlaştırılmışEPSS %64
- Girişsiz RCE
phpwiki project · phpwiki11 Eyl 2014
CVE-2014-5460
47Planlayın
Unrestricted file upload vulnerability in the Tribulant Slideshow Gallery plugin before 1.4.7 for WordPress allows remote authenticated user
OrtaCVSS 6,5SilahlaştırılmışEPSS %70
- RCE
- Dosya yükleme
tribulant · tibulant slideshow gallery11 Eyl 2014
CVE-2014-6043
30İzleyin
ZOHO ManageEngine EventLog Analyzer 9.0 build 9002 and 8.2 build 8020 does not properly restrict access to the database browser, which allow
OrtaCVSS 6,5Kavram kanıtıEPSS %12
zohocorp · manageengine eventlog analyzer11 Eyl 2014
CVE-2014-3609
37İzleyin
HttpHdrRange.cc in Squid 3.x before 3.3.12 and 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via a request
OrtaCVSS 5,0İstismar yokEPSS %56
- Kimlik doğrulamasız
- Hizmet dışı bırakma
squid-cache · squid11 Eyl 2014
CVE-2013-4444
31İzleyin
Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a
OrtaCVSS 6,8İstismar yokEPSS %13
- Girişsiz RCE
- Dosya yükleme
apache · tomcat12 Eyl 2014
CVE-2014-6270
34İzleyin
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attacker
OrtaCVSS 6,8İstismar yokEPSS %23
- Girişsiz RCE
- Bellek hatası
squid-cache · squid12 Eyl 2014
CVE-2014-4404
76Bu hafta
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privil
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %48
- RCE
- Yerel yetki yükseltme
- Bellek hatası
apple · iphone os18 Eyl 2014
CVE-2006-1318
42Planlayın
Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, Office 2004 for Mac, and Office X for Mac do not properly parse record le
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · office19 Eyl 2014
CVE-2014-6271
99Hemen
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
- Komut enjeksiyonu
gnu · bash24 Eyl 2014
CVE-2014-7169
99Hemen
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variabl
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
- Komut enjeksiyonu
gnu · bash24 Eyl 2014
CVE-2014-1568
35İzleyin
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 3
YüksekCVSS 7,5İstismar yokEPSS %16
- Kimlik doğrulamasız
mozilla · firefox25 Eyl 2014
CVE-2014-6446
44Planlayın
The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows remote attackers to
YüksekCVSS 7,5SilahlaştırılmışEPSS %46
- Girişsiz RCE
infusionsoft gravity forms project · infusionsoft gravity forms26 Eyl 2014
CVE-2014-6277
59Planlayın
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote att
KritikCVSS 10,0Kavram kanıtıEPSS %64
- Girişsiz RCE
- Komut enjeksiyonu
gnu · bash27 Eyl 2014
CVE-2014-7186
59Planlayın
The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bo
KritikCVSS 10,0Kavram kanıtıEPSS %64
- Kimlik doğrulamasız
- Bellek hatası
gnu · bash28 Eyl 2014
CVE-2014-7187
58Planlayın
Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of
KritikCVSS 10,0Kavram kanıtıEPSS %58
- Kimlik doğrulamasız
- Bellek hatası
gnu · bash28 Eyl 2014
CVE-2013-3632
52Planlayın
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrar
YüksekCVSS 8,8SilahlaştırılmışEPSS %57
- RCE
openmediavault · openmediavault29 Eyl 2014
CVE-2014-6278
95Hemen
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote att
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
- Komut enjeksiyonu
gnu · bash30 Eyl 2014