İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2015: sömürülen ve yeni ciddi CVE kayıtları

58 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2015-5470
    34İzleyin

    The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3

    YüksekCVSS 7,8İstismar yokEPSS %11

    powerdns · authoritative2 Kas 2015

  • CVE-2015-7182
    42Planlayın

    Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used

    KritikCVSS 9,8İstismar yokEPSS %10

    mozilla · firefox5 Kas 2015

  • CVE-2014-9749
    19İzleyin

    Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when Digest authentication is used, allow remote authenticated users to retain access

    OrtaCVSS 4,0İstismar yokEPSS %11

    squid-cache · squid6 Kas 2015

  • CVE-2015-7254
    28İzleyin

    Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a ..

    OrtaCVSS 5,0Kavram kanıtıEPSS %27

    huawei · hg532e6 Kas 2015

  • CVE-2015-4551
    21İzleyin

    LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode configuration information in OpenDocument Format

    OrtaCVSS 4,3İstismar yokEPSS %13

    libreoffice · libreoffice10 Kas 2015

  • CVE-2015-5213
    31İzleyin

    Integer overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory

    OrtaCVSS 6,8İstismar yokEPSS %12

    apache · openoffice10 Kas 2015

  • CVE-2015-2427
    41Planlayın

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-2503
    42Planlayın

    Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, V

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · access11 Kas 2015

  • CVE-2015-6038
    48Planlayın

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Comp

    KritikCVSS 9,3İstismar yokEPSS %35

    microsoft · excel11 Kas 2015

  • CVE-2015-6061
    21İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Skype for Business 2016, Lync 2010 and 2013 SP1, Lync 2010 Attendee, and Lync Room Sys

    OrtaCVSS 4,3İstismar yokEPSS %12

    microsoft · lync11 Kas 2015

  • CVE-2015-6064
    43Planlayın

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memo

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · edge11 Kas 2015

  • CVE-2015-6065
    43Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6066
    41Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6068
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6069
    41Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6070
    41Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6071
    43Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6072
    41Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6073
    42Planlayın

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · edge11 Kas 2015

  • CVE-2015-6074
    41Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6075
    43Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6076
    43Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6077
    43Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6078
    42Planlayın

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · edge11 Kas 2015

  • CVE-2015-6079
    41Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6080
    41Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6081
    43Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6082
    41Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6084
    42Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6085
    42Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6086
    25İzleyin

    Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site,

    OrtaCVSS 4,3Kavram kanıtıEPSS %25

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6087
    41Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer11 Kas 2015

  • CVE-2015-6088
    26İzleyin

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web

    OrtaCVSS 4,3İstismar yokEPSS %30

    microsoft · edge11 Kas 2015

  • CVE-2015-6089
    41Planlayın

    The Microsoft (1) VBScript and (2) JScript engines, as used in Internet Explorer 8 through 11, allow remote attackers to execute arbitrary c

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · jscript11 Kas 2015

  • CVE-2015-6091
    41Planlayın

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Word Viewer allow remote attackers

    KritikCVSS 9,3İstismar yokEPSS %14

    microsoft · office11 Kas 2015

  • CVE-2015-6092
    41Planlayın

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, and Word

    KritikCVSS 9,3İstismar yokEPSS %14

    microsoft · office11 Kas 2015

  • CVE-2015-6094
    43Planlayın

    Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, and Excel Services on Share

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · excel11 Kas 2015

  • CVE-2015-6096
    35İzleyin

    The XML DTD parser in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to read arbitrary

    OrtaCVSS 4,3İstismar yokEPSS %61

    microsoft · .net framework11 Kas 2015

  • CVE-2015-6097
    43Planlayın

    Heap-based buffer overflow in Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows r

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 711 Kas 2015

  • CVE-2015-6099
    31İzleyin

    Cross-site scripting (XSS) vulnerability in ASP.NET in Microsoft .NET Framework 4, 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to inj

    OrtaCVSS 4,3İstismar yokEPSS %47

    microsoft · .net framework11 Kas 2015

  • CVE-2015-6103
    48Planlayın

    The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi

    KritikCVSS 9,3Kavram kanıtıEPSS %35

    microsoft · windows 1011 Kas 2015

  • CVE-2015-6104
    48Planlayın

    The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wi

    KritikCVSS 9,3Kavram kanıtıEPSS %35

    microsoft · windows 1011 Kas 2015

  • CVE-2015-6115
    21İzleyin

    Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka

    OrtaCVSS 4,3İstismar yokEPSS %13

    microsoft · .net framework11 Kas 2015

  • CVE-2015-6123
    20İzleyin

    Cross-site scripting (XSS) vulnerability in Microsoft Excel for Mac 2011 and Excel 2016 for Mac allows remote attackers to inject arbitrary

    OrtaCVSS 4,3İstismar yokEPSS %11

    microsoft · excel for mac11 Kas 2015

  • CVE-2015-7652
    44Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548

    KritikCVSS 9,3Kavram kanıtıEPSS %24

    adobe · flash player11 Kas 2015

  • CVE-2015-8043
    49Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548

    KritikCVSS 10,0Kavram kanıtıEPSS %29

    adobe · air11 Kas 2015

  • CVE-2015-8044
    52Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548

    KritikCVSS 10,0Kavram kanıtıEPSS %40

    adobe · air11 Kas 2015

  • CVE-2015-8046
    49Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548

    KritikCVSS 10,0Kavram kanıtıEPSS %29

    adobe · air11 Kas 2015

  • CVE-2015-6093
    43Planlayın

    Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · office11 Kas 2015

  • CVE-2015-6045
    43Planlayın

    Use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbi

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer12 Kas 2015

  • CVE-2015-8126
    33İzleyin

    Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3

    YüksekCVSS 7,5İstismar yokEPSS %10

    libpng · libpng13 Kas 2015

  • CVE-2015-5311
    40Planlayın

    PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and serv

    OrtaCVSS 5,0İstismar yokEPSS %67

    powerdns · authoritative17 Kas 2015

  • CVE-2015-7805
    41Planlayın

    Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex value in the header in

    KritikCVSS 9,3Kavram kanıtıEPSS %14

    opensuse · opensuse17 Kas 2015

  • CVE-2015-4852
    97Hemen

    The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    oracle · virtual desktop infrastructure18 Kas 2015

  • CVE-2015-7036
    42Planlayın

    The fts3_tokenizer function in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allows remote attackers to execute arbitrary

    YüksekCVSS 7,5İstismar yokEPSS %39

    apple · mac os x21 Kas 2015

  • CVE-2015-7808
    54Planlayın

    The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection a

    YüksekCVSS 7,5SilahlaştırılmışEPSS %80

    vbulletin · vbulletin24 Kas 2015

  • CVE-2015-5317
    67Bu hafta

    The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name in

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %23

    jenkins · jenkins25 Kas 2015

  • CVE-2015-8103
    65Bu hafta

    The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted ser

    KritikCVSS 9,8SilahlaştırılmışEPSS %86

    jenkins · jenkins25 Kas 2015