İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2016: sömürülen ve yeni ciddi CVE kayıtları

54 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2015-7450
    98Hemen

    Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allo

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    ibm · sterling b2b integrator2 Oca 2016

  • CVE-2015-5254
    50Planlayın

    Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execu

    KritikCVSS 9,8Kavram kanıtıEPSS %38

    apache · activemq8 Oca 2016

  • CVE-2015-5259
    51Planlayın

    Integer overflow in the read_string function in libsvn_ra_svn/marshal.c in Apache Subversion 1.9.x before 1.9.3 allows remote attackers to e

    YüksekCVSS 8,6İstismar yokEPSS %57

    apache · subversion8 Oca 2016

  • CVE-2015-8612
    40Planlayın

    The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges

    YüksekCVSS 8,4SilahlaştırılmışEPSS %6

    blueman project · blueman8 Oca 2016

  • CVE-2015-8668
    43Planlayın

    Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attack

    KritikCVSS 9,8İstismar yokEPSS %13

    libtiff · libtiff8 Oca 2016

  • CVE-2015-4694
    39İzleyin

    Directory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for WordPress allows remote attackers to read a

    YüksekCVSS 8,6Kavram kanıtıEPSS %15

    zip attachments project · zip attachments8 Oca 2016

  • CVE-2015-5471
    31İzleyin

    Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allows remote attackers

    OrtaCVSS 5,3Kavram kanıtıEPSS %32

    swim team project · swim team12 Oca 2016

  • CVE-2015-8396
    45Planlayın

    Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cxx in Grassroots DICO

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    malaterre · grassroots dicom12 Oca 2016

  • CVE-2016-0002
    37İzleyin

    The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, al

    YüksekCVSS 7,5İstismar yokEPSS %23

    microsoft · jscript13 Oca 2016

  • CVE-2016-0003
    49Planlayın

    Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Microsoft Edge Memory Corruption Vulnerabilit

    KritikCVSS 9,6İstismar yokEPSS %37

    microsoft · edge13 Oca 2016

  • CVE-2016-0005
    25İzleyin

    Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Exp

    OrtaCVSS 4,3İstismar yokEPSS %27

    microsoft · internet explorer13 Oca 2016

  • CVE-2016-0008
    21İzleyin

    The graphics device interface in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Win

    OrtaCVSS 4,3İstismar yokEPSS %13

    microsoft · windows 713 Oca 2016

  • CVE-2016-0009
    40Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 10 Gold and 1511 allow remote attackers to execu

    YüksekCVSS 8,8İstismar yokEPSS %15

    microsoft · windows 1013 Oca 2016

  • CVE-2016-0015
    46Planlayın

    DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go

    YüksekCVSS 7,8Kavram kanıtıEPSS %49

    microsoft · windows 1013 Oca 2016

  • CVE-2016-0016
    40Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    YüksekCVSS 7,8Kavram kanıtıEPSS %29

    microsoft · windows 1013 Oca 2016

  • CVE-2016-0018
    33İzleyin

    Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows lo

    YüksekCVSS 7,3İstismar yokEPSS %13

    microsoft · windows 1013 Oca 2016

  • CVE-2016-0019
    36İzleyin

    The Remote Desktop Protocol (RDP) service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers to bypass intended ac

    YüksekCVSS 8,1İstismar yokEPSS %12

    microsoft · windows 1013 Oca 2016

  • CVE-2016-0024
    40Planlayın

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Eng

    YüksekCVSS 8,8İstismar yokEPSS %17

    microsoft · edge13 Oca 2016

  • CVE-2016-0034
    86Hemen

    Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary c

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %69

    microsoft · silverlight13 Oca 2016

  • CVE-2016-0010
    37İzleyin

    Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Excel for Mac 2011, PowerPoint for Mac 2011, W

    YüksekCVSS 7,8İstismar yokEPSS %21

    microsoft · excel for mac13 Oca 2016

  • CVE-2016-0012
    20İzleyin

    Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2

    OrtaCVSS 4,3İstismar yokEPSS %10

    microsoft · excel13 Oca 2016

  • CVE-2016-0035
    38İzleyin

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Comp

    YüksekCVSS 7,8İstismar yokEPSS %22

    microsoft · excel13 Oca 2016

  • CVE-2015-8605
    51Planlayın

    ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crash

    OrtaCVSS 6,5İstismar yokEPSS %82

    isc · dhcp14 Oca 2016

  • CVE-2016-0777
    45Planlayın

    The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensit

    OrtaCVSS 6,5Kavram kanıtıEPSS %63

    sophos · unified threat management software14 Oca 2016

  • CVE-2016-0778
    38İzleyin

    The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certa

    YüksekCVSS 8,1İstismar yokEPSS %20

    oracle · linux14 Oca 2016

  • CVE-2015-8279
    60Bu hafta

    Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script

    YüksekCVSS 8,6SilahlaştırılmışEPSS %51

    samsung · web viewer14 Oca 2016

  • CVE-2016-0854
    62Bu hafta

    Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in

    KritikCVSS 9,8SilahlaştırılmışEPSS %77

    advantech · webaccess14 Oca 2016

  • CVE-2016-0856
    44Planlayın

    Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vec

    KritikCVSS 9,8İstismar yokEPSS %16

    advantech · webaccess14 Oca 2016

  • CVE-2016-0857
    47Planlayın

    Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vect

    KritikCVSS 9,8İstismar yokEPSS %28

    advantech · webaccess14 Oca 2016

  • CVE-2016-1897
    26İzleyin

    FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Str

    OrtaCVSS 5,5İstismar yokEPSS %14

    ffmpeg · ffmpeg14 Oca 2016

  • CVE-2016-1898
    26İzleyin

    FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live St

    OrtaCVSS 5,5İstismar yokEPSS %13

    ffmpeg · ffmpeg14 Oca 2016

  • CVE-2016-1909
    60Bu hafta

    Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0.8; and FortiOS 4.1.

    KritikCVSS 9,8SilahlaştırılmışEPSS %71

    fortinet · fortios15 Oca 2016

  • CVE-2015-6836
    32İzleyin

    The SoapClient __call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage

    YüksekCVSS 7,3İstismar yokEPSS %10

    php · php19 Oca 2016

  • CVE-2015-8617
    46Planlayın

    Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers t

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    php · php19 Oca 2016

  • CVE-2016-1907
    25İzleyin

    The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds r

    OrtaCVSS 5,3İstismar yokEPSS %14

    openbsd · openssh19 Oca 2016

  • CVE-2015-8704
    32İzleyin

    apl_42.c in ISC BIND 9.x before 9.9.8-P3, 9.9.x, and 9.10.x before 9.10.3-P3 allows remote authenticated users to cause a denial of service

    OrtaCVSS 6,5İstismar yokEPSS %20

    isc · bind20 Oca 2016

  • CVE-2016-0476
    27İzleyin

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 5,0İstismar yokEPSS %21

    oracle · enterprise manager grid control20 Oca 2016

  • CVE-2016-0477
    27İzleyin

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 5,0İstismar yokEPSS %21

    oracle · application testing suite20 Oca 2016

  • CVE-2016-0478
    27İzleyin

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 5,0İstismar yokEPSS %21

    oracle · application testing suite20 Oca 2016

  • CVE-2016-0480
    27İzleyin

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 5,0İstismar yokEPSS %21

    oracle · application testing suite20 Oca 2016

  • CVE-2016-0481
    27İzleyin

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 5,0İstismar yokEPSS %21

    oracle · enterprise manager grid control20 Oca 2016

  • CVE-2016-0482
    27İzleyin

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 5,0İstismar yokEPSS %21

    oracle · application testing suite20 Oca 2016

  • CVE-2016-0484
    27İzleyin

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 5,0İstismar yokEPSS %22

    oracle · application testing suite20 Oca 2016

  • CVE-2016-0485
    28İzleyin

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 5,0İstismar yokEPSS %27

    oracle · application testing suite20 Oca 2016

  • CVE-2016-0486
    28İzleyin

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 5,0İstismar yokEPSS %27

    oracle · application testing suite20 Oca 2016

  • CVE-2016-0487
    40Planlayın

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 6,4İstismar yokEPSS %50

    oracle · application testing suite20 Oca 2016

  • CVE-2016-0488
    45Planlayın

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 6,4İstismar yokEPSS %65

    oracle · application testing suite20 Oca 2016

  • CVE-2016-0489
    42Planlayın

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 6,5İstismar yokEPSS %54

    oracle · application testing suite20 Oca 2016

  • CVE-2016-0490
    33İzleyin

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 6,4İstismar yokEPSS %27

    oracle · application testing suite20 Oca 2016

  • CVE-2016-0491
    49Planlayın

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 6,4SilahlaştırılmışEPSS %79

    oracle · application testing suite20 Oca 2016

  • CVE-2016-0492
    53Planlayın

    Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2

    OrtaCVSS 6,4SilahlaştırılmışEPSS %92

    oracle · application testing suite20 Oca 2016

  • CVE-2016-0483
    44Planlayın

    Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to aff

    KritikCVSS 10,0İstismar yokEPSS %14

    oracle · jdk21 Oca 2016

  • CVE-2015-8770
    37İzleyin

    Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube before 1.0.8 and 1.1.x bef

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    roundcube · roundcube webmail29 Oca 2016

  • CVE-2016-1879
    34İzleyin

    The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is co

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    freebsd · freebsd29 Oca 2016