İçeriğe atla
Noroxi

Yayın tarihine göre

Eylül 2015: sömürülen ve yeni ciddi CVE kayıtları

68 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2015-5722
    41Planlayın

    buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertio

    YüksekCVSS 7,8İstismar yokEPSS %33

    isc · bind4 Eyl 2015

  • CVE-2015-5986
    36İzleyin

    openpgpkey_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service

    YüksekCVSS 7,1İstismar yokEPSS %26

    isc · bind4 Eyl 2015

  • CVE-2015-5625
    24İzleyin

    Cross-site scripting (XSS) vulnerability in OpenDocMan before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via the r

    OrtaCVSS 4,3İstismar yokEPSS %22

    opendocman · opendocman7 Eyl 2015

  • CVE-2015-2483
    26İzleyin

    Microsoft Internet Explorer 10 and 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, ak

    OrtaCVSS 5,0İstismar yokEPSS %19

    microsoft · internet explorer8 Eyl 2015

  • CVE-2015-2484
    29İzleyin

    Microsoft Internet Explorer 10 and 11 uses an incorrect flag during certain filesystem accesses, which allows remote attackers to delete arb

    OrtaCVSS 6,4İstismar yokEPSS %13

    microsoft · internet explorer8 Eyl 2015

  • CVE-2015-2485
    42Planlayın

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · edge8 Eyl 2015

  • CVE-2015-2486
    43Planlayın

    Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · edge8 Eyl 2015

  • CVE-2015-2487
    42Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer8 Eyl 2015

  • CVE-2015-2489
    20İzleyin

    Microsoft Internet Explorer 11 allows remote attackers to gain privileges via a crafted web site, as demonstrated by a transition from Low I

    OrtaCVSS 4,3İstismar yokEPSS %10

    microsoft · internet explorer8 Eyl 2015

  • CVE-2015-2490
    42Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer8 Eyl 2015

  • CVE-2015-2491
    42Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer8 Eyl 2015

  • CVE-2015-2492
    42Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer8 Eyl 2015

  • CVE-2015-2493
    42Planlayın

    The (1) VBScript and (2) JScript engines in Microsoft Internet Explorer 8 allow remote attackers to execute arbitrary code or cause a denial

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer8 Eyl 2015

  • CVE-2015-2494
    43Planlayın

    Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · edge8 Eyl 2015

  • CVE-2015-2498
    44Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer8 Eyl 2015

  • CVE-2015-2499
    44Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer8 Eyl 2015

  • CVE-2015-2500
    44Planlayın

    Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer8 Eyl 2015

  • CVE-2015-2501
    44Planlayın

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer8 Eyl 2015

  • CVE-2015-2504
    43Planlayın

    Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 improperly counts objects before performing an array copy, which

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · .net framework8 Eyl 2015

  • CVE-2015-2505
    25İzleyin

    Outlook Web Access (OWA) in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1 allows remote attackers to obtain sensitive sta

    OrtaCVSS 5,0İstismar yokEPSS %18

    microsoft · exchange server8 Eyl 2015

  • CVE-2015-2506
    42Planlayın

    atmfd.dll in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Wi

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · windows 108 Eyl 2015

  • CVE-2015-2509
    58Planlayın

    Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted remote attackers to exec

    KritikCVSS 9,3SilahlaştırılmışEPSS %71

    microsoft · windows 78 Eyl 2015

  • CVE-2015-2510
    48Planlayın

    Buffer overflow in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2,

    KritikCVSS 9,3Kavram kanıtıEPSS %35

    microsoft · live meeting console8 Eyl 2015

  • CVE-2015-2513
    43Planlayın

    Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · windows 108 Eyl 2015

  • CVE-2015-2514
    42Planlayın

    Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · windows 108 Eyl 2015

  • CVE-2015-2516
    21İzleyin

    Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · windows 108 Eyl 2015

  • CVE-2015-2519
    41Planlayın

    Integer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.

    KritikCVSS 9,3İstismar yokEPSS %14

    microsoft · windows 108 Eyl 2015

  • CVE-2015-2520
    45Planlayın

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attacker

    KritikCVSS 9,3Kavram kanıtıEPSS %27

    microsoft · excel8 Eyl 2015

  • CVE-2015-2521
    45Planlayın

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code v

    KritikCVSS 9,3Kavram kanıtıEPSS %27

    microsoft · excel8 Eyl 2015

  • CVE-2015-2522
    17İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 allows remote authenticated users to inject arbitrary w

    DüşükCVSS 3,5İstismar yokEPSS %10

    microsoft · sharepoint foundation8 Eyl 2015

  • CVE-2015-2523
    46Planlayın

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compatibility Pack SP3, and

    KritikCVSS 9,3Kavram kanıtıEPSS %30

    microsoft · excel8 Eyl 2015

  • CVE-2015-2525
    37İzleyin

    Task Scheduler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201

    YüksekCVSS 7,2Kavram kanıtıEPSS %31

    microsoft · windows 108 Eyl 2015

  • CVE-2015-2526
    27İzleyin

    Microsoft .NET Framework 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to cause a denial of service to an ASP.NET web site via crafted

    OrtaCVSS 5,0İstismar yokEPSS %23

    microsoft · .net framework8 Eyl 2015

  • CVE-2015-2530
    42Planlayın

    Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · windows 108 Eyl 2015

  • CVE-2015-2531
    20İzleyin

    Cross-site scripting (XSS) vulnerability in the jQuery engine in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote

    OrtaCVSS 4,3İstismar yokEPSS %10

    microsoft · lync server8 Eyl 2015

  • CVE-2015-2532
    20İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a

    OrtaCVSS 4,3İstismar yokEPSS %10

    microsoft · lync server8 Eyl 2015

  • CVE-2015-2535
    19İzleyin

    Active Directory in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a de

    OrtaCVSS 4,0İstismar yokEPSS %11

    microsoft · windows server 20088 Eyl 2015

  • CVE-2015-2541
    43Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer8 Eyl 2015

  • CVE-2015-2542
    43Planlayın

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memo

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · edge8 Eyl 2015

  • CVE-2015-2545
    87Hemen

    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, ak

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %85

    microsoft · office8 Eyl 2015

  • CVE-2015-2546
    65Bu hafta

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Se

    YüksekCVSS 8,2KEVSilahlaştırılmışEPSS %10

    microsoft · windows 10 15078 Eyl 2015

  • CVE-2015-6908
    26İzleyin

    The ber_get_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (rea

    OrtaCVSS 5,0Kavram kanıtıEPSS %19

    openldap · openldap11 Eyl 2015

  • CVE-2015-6912
    44Planlayın

    Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitle_

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    synology · video station11 Eyl 2015

  • CVE-2015-6830
    23İzleyin

    libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers

    OrtaCVSS 5,0Kavram kanıtıEPSS %10

    phpmyadmin · phpmyadmin13 Eyl 2015

  • CVE-2015-6946
    43Planlayın

    Multiple stack-based buffer overflows in the Reprise License Manager service in Borland AccuRev allow remote attackers to execute arbitrary

    KritikCVSS 9,3İstismar yokEPSS %21

    microfocus · accurev15 Eyl 2015

  • CVE-2015-6967
    41Planlayın

    Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary c

    OrtaCVSS 6,5SilahlaştırılmışEPSS %49

    nibbleblog · nibbleblog16 Eyl 2015

  • CVE-2015-3623
    30İzleyin

    XML external entity (XXE) vulnerability in QlikTech Qlikview before 11.20 SR12 allows remote attackers to conduct server-side request forger

    OrtaCVSS 6,4Kavram kanıtıEPSS %15

    qlik · qlikview16 Eyl 2015

  • CVE-2015-6973
    46Planlayın

    Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentic

    OrtaCVSS 6,8Kavram kanıtıEPSS %64

    igniterealtime · openfire16 Eyl 2015

  • CVE-2015-7243
    47Planlayın

    Buffer overflow in Boxoft WAV to MP3 Converter allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary c

    YüksekCVSS 7,5SilahlaştırılmışEPSS %58

    boxoft · boxoft wav to mp3 converter18 Eyl 2015

  • CVE-2015-5603
    44Planlayın

    The HipChat for JIRA plugin before 6.30.0 for Atlassian JIRA allows remote authenticated users to execute arbitrary Java code via unspecifie

    OrtaCVSS 6,5SilahlaştırılmışEPSS %59

    atlassian · hipchat21 Eyl 2015

  • CVE-2015-7303
    51Planlayın

    Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execute arbitrary code via

    KritikCVSS 10,0İstismar yokEPSS %35

    avira · management console21 Eyl 2015

  • CVE-2015-5568
    46Planlayın

    Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    adobe · flash player22 Eyl 2015

  • CVE-2015-5574
    54Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521

    KritikCVSS 10,0Kavram kanıtıEPSS %45

    adobe · flash player22 Eyl 2015

  • CVE-2015-7309
    40Planlayın

    The theme editor in Bolt before 2.2.5 does not check the file extension when renaming files, which allows remote authenticated users to exec

    OrtaCVSS 6,5SilahlaştırılmışEPSS %38

    boltcms · bolt22 Eyl 2015

  • CVE-2015-5082
    61Bu hafta

    Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NEW_PASSWORD_1 or (2) N

    KritikCVSS 10,0SilahlaştırılmışEPSS %69

    endian firewall · endian firewall28 Eyl 2015

  • CVE-2015-7387
    54Planlayın

    ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restrictions and execute arbitra

    YüksekCVSS 7,5SilahlaştırılmışEPSS %80

    zohocorp · manageengine eventlog analyzer28 Eyl 2015

  • CVE-2015-5400
    33İzleyin

    Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to

    OrtaCVSS 6,8İstismar yokEPSS %20

    fedoraproject · fedora28 Eyl 2015

  • CVE-2015-7601
    49Planlayın

    Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double sla

    YüksekCVSS 7,8SilahlaştırılmışEPSS %58

    pcman · ftp server29 Eyl 2015

  • CVE-2015-7602
    49Planlayın

    Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in a R

    YüksekCVSS 7,8SilahlaştırılmışEPSS %61

    bisonware · bisonftp29 Eyl 2015

  • CVE-2015-7603
    49Planlayın

    Directory traversal vulnerability in Konica Minolta FTP Utility 1.0 allows remote attackers to read arbitrary files via a ..\ (dot dot backs

    YüksekCVSS 7,8SilahlaştırılmışEPSS %60

    konicaminolta · ftp utility29 Eyl 2015

  • CVE-2015-1538
    70Bu hafta

    Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I all

    KritikCVSS 10,0Kavram kanıtıEPSS %99

    google · android30 Eyl 2015

  • CVE-2015-1539
    66Bu hafta

    Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remot

    KritikCVSS 10,0İstismar yokEPSS %85

    google · android30 Eyl 2015

  • CVE-2015-3824
    67Bu hafta

    The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict si

    KritikCVSS 10,0İstismar yokEPSS %90

    google · android30 Eyl 2015

  • CVE-2015-3826
    42Planlayın

    The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a min

    OrtaCVSS 5,0İstismar yokEPSS %73

    google · android30 Eyl 2015

  • CVE-2015-3827
    61Bu hafta

    The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relatio

    KritikCVSS 9,3İstismar yokEPSS %81

    google · android30 Eyl 2015

  • CVE-2015-3828
    66Bu hafta

    The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a min

    KritikCVSS 10,0İstismar yokEPSS %85

    google · android30 Eyl 2015

  • CVE-2015-3829
    67Bu hafta

    Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows re

    KritikCVSS 10,0İstismar yokEPSS %89

    google · android30 Eyl 2015

  • CVE-2015-3864
    66Bu hafta

    Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1

    KritikCVSS 10,0SilahlaştırılmışEPSS %87

    google · android30 Eyl 2015