İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2016: sömürülen ve yeni ciddi CVE kayıtları

66 kayıt · 3 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2016-0800
    60Bu hafta

    The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify me

    OrtaCVSS 5,9SilahlaştırılmışEPSS %82

    openssl · openssl1 Mar 2016

  • CVE-2016-2278
    32İzleyin

    Schneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P 1.7 and earlier allows remote authenticate

    YüksekCVSS 7,2Kavram kanıtıEPSS %13

    schneider-electric · struxureware building operations automation server as2 Mar 2016

  • CVE-2016-0705
    47Planlayın

    Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g a

    KritikCVSS 9,8İstismar yokEPSS %26

    openssl · openssl3 Mar 2016

  • CVE-2016-0797
    38İzleyin

    Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap

    YüksekCVSS 7,5İstismar yokEPSS %27

    openssl · openssl3 Mar 2016

  • CVE-2016-0798
    37İzleyin

    Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to ca

    YüksekCVSS 7,5İstismar yokEPSS %24

    openssl · openssl3 Mar 2016

  • CVE-2016-0799
    49Planlayın

    The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, whi

    KritikCVSS 9,8İstismar yokEPSS %32

    openssl · openssl3 Mar 2016

  • CVE-2016-2842
    55Planlayın

    The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memor

    KritikCVSS 9,8İstismar yokEPSS %53

    openssl · openssl3 Mar 2016

  • CVE-2016-0021
    38İzleyin

    Microsoft InfoPath 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Mi

    YüksekCVSS 7,8İstismar yokEPSS %23

    microsoft · infopath9 Mar 2016

  • CVE-2016-0091
    38İzleyin

    OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows

    YüksekCVSS 7,8İstismar yokEPSS %23

    microsoft · windows 109 Mar 2016

  • CVE-2016-0092
    48Planlayın

    OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows

    YüksekCVSS 7,8İstismar yokEPSS %57

    microsoft · windows 109 Mar 2016

  • CVE-2016-0098
    41Planlayın

    Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 allow remo

    YüksekCVSS 8,8İstismar yokEPSS %19

    microsoft · windows 109 Mar 2016

  • CVE-2016-0099
    72Bu hafta

    The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %37

    microsoft · windows 10 15079 Mar 2016

  • CVE-2016-0100
    50Planlayın

    Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted applica

    YüksekCVSS 8,4SilahlaştırılmışEPSS %57

    microsoft · windows server 20089 Mar 2016

  • CVE-2016-0101
    41Planlayın

    Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1

    YüksekCVSS 8,8İstismar yokEPSS %19

    microsoft · windows 109 Mar 2016

  • CVE-2016-0102
    35İzleyin

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · edge9 Mar 2016

  • CVE-2016-0103
    34İzleyin

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · internet explorer9 Mar 2016

  • CVE-2016-0104
    34İzleyin

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · internet explorer9 Mar 2016

  • CVE-2016-0105
    34İzleyin

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · edge9 Mar 2016

  • CVE-2016-0106
    35İzleyin

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · internet explorer9 Mar 2016

  • CVE-2016-0107
    35İzleyin

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · internet explorer9 Mar 2016

  • CVE-2016-0108
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    YüksekCVSS 7,5Kavram kanıtıEPSS %39

    microsoft · internet explorer9 Mar 2016

  • CVE-2016-0109
    35İzleyin

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · edge9 Mar 2016

  • CVE-2016-0110
    34İzleyin

    Microsoft Internet Explorer 10 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · edge9 Mar 2016

  • CVE-2016-0111
    42Planlayın

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    YüksekCVSS 7,5Kavram kanıtıEPSS %39

    microsoft · edge9 Mar 2016

  • CVE-2016-0112
    35İzleyin

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · internet explorer9 Mar 2016

  • CVE-2016-0113
    35İzleyin

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · internet explorer9 Mar 2016

  • CVE-2016-0114
    35İzleyin

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · internet explorer9 Mar 2016

  • CVE-2016-0117
    53Planlayın

    The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attack

    YüksekCVSS 7,8İstismar yokEPSS %71

    microsoft · windows 109 Mar 2016

  • CVE-2016-0118
    41Planlayın

    The PDF library in Microsoft Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted PDF document, aka "Win

    YüksekCVSS 7,8İstismar yokEPSS %32

    microsoft · windows 109 Mar 2016

  • CVE-2016-0120
    37İzleyin

    The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serve

    OrtaCVSS 6,5Kavram kanıtıEPSS %36

    microsoft · windows 109 Mar 2016

  • CVE-2016-0121
    47Planlayın

    The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serve

    YüksekCVSS 8,8Kavram kanıtıEPSS %38

    microsoft · windows 109 Mar 2016

  • CVE-2016-0123
    35İzleyin

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · edge9 Mar 2016

  • CVE-2016-0124
    34İzleyin

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · edge9 Mar 2016

  • CVE-2016-0125
    16İzleyin

    Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and request information via

    DüşükCVSS 3,1İstismar yokEPSS %11

    microsoft · edge9 Mar 2016

  • CVE-2016-0129
    34İzleyin

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · edge9 Mar 2016

  • CVE-2016-0130
    34İzleyin

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · edge9 Mar 2016

  • CVE-2016-0132
    45Planlayın

    Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML

    KritikCVSS 9,8İstismar yokEPSS %21

    microsoft · .net framework9 Mar 2016

  • CVE-2016-0134
    38İzleyin

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, O

    YüksekCVSS 7,8İstismar yokEPSS %22

    microsoft · office9 Mar 2016

  • CVE-2016-0954
    44Planlayın

    Adobe Digital Editions before 4.5.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecif

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    adobe · digital editions9 Mar 2016

  • CVE-2016-2774
    45Planlayın

    ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows rem

    OrtaCVSS 5,9İstismar yokEPSS %73

    isc · dhcp9 Mar 2016

  • CVE-2015-6184
    36İzleyin

    The CAttrArray object implementation in Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause

    YüksekCVSS 8,1İstismar yokEPSS %13

    microsoft · internet explorer9 Mar 2016

  • CVE-2016-1285
    45Planlayın

    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages,

    OrtaCVSS 6,8İstismar yokEPSS %59

    isc · bind9 Mar 2016

  • CVE-2016-1286
    53Planlayın

    named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure an

    YüksekCVSS 8,6İstismar yokEPSS %62

    isc · bind9 Mar 2016

  • CVE-2016-2088
    34İzleyin

    resolver.c in named in ISC BIND 9.10.x before 9.10.3-P4, when DNS cookies are enabled, allows remote attackers to cause a denial of service

    OrtaCVSS 6,8İstismar yokEPSS %22

    isc · bind9 Mar 2016

  • CVE-2016-0997
    44Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before

    YüksekCVSS 8,8Kavram kanıtıEPSS %28

    adobe · flash player12 Mar 2016

  • CVE-2016-0998
    43Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before

    YüksekCVSS 8,8Kavram kanıtıEPSS %28

    adobe · flash player12 Mar 2016

  • CVE-2016-0999
    44Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before

    YüksekCVSS 8,8Kavram kanıtıEPSS %28

    adobe · flash player12 Mar 2016

  • CVE-2016-1000
    44Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before

    YüksekCVSS 8,8Kavram kanıtıEPSS %28

    adobe · flash player12 Mar 2016

  • CVE-2016-1001
    43Planlayın

    Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11

    YüksekCVSS 8,8Kavram kanıtıEPSS %25

    adobe · flash player12 Mar 2016

  • CVE-2016-1002
    41Planlayın

    Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR

    YüksekCVSS 8,8Kavram kanıtıEPSS %19

    adobe · flash player12 Mar 2016

  • CVE-2016-1010
    71Bu hafta

    Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %19

    adobe · flash player12 Mar 2016

  • CVE-2016-1960
    44Planlayın

    Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7

    YüksekCVSS 8,8Kavram kanıtıEPSS %30

    mozilla · firefox13 Mar 2016

  • CVE-2015-7560
    30İzleyin

    The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows

    OrtaCVSS 6,5İstismar yokEPSS %12

    samba · samba13 Mar 2016

  • CVE-2016-1988
    42Planlayın

    HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive i

    KritikCVSS 9,8İstismar yokEPSS %10

    hp · network automation14 Mar 2016

  • CVE-2016-1989
    42Planlayın

    HPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to execute arbitrary code or obtain sensitive i

    KritikCVSS 9,8İstismar yokEPSS %10

    hp · network automation14 Mar 2016

  • CVE-2016-2342
    36İzleyin

    The bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 conf

    YüksekCVSS 8,1İstismar yokEPSS %13

    quagga · quagga17 Mar 2016

  • CVE-2016-2345
    54Planlayın

    Stack-based buffer overflow in dwrcs.exe in the dwmrcs daemon in SolarWinds DameWare Mini Remote Control 12.0 allows remote attackers to exe

    KritikCVSS 9,8Kavram kanıtıEPSS %51

    dameware · mini remote control17 Mar 2016

  • CVE-2016-1995
    42Planlayın

    HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors.

    KritikCVSS 9,8İstismar yokEPSS %10

    hp · system management homepage18 Mar 2016

  • CVE-2016-3115
    36İzleyin

    Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended she

    OrtaCVSS 6,4Kavram kanıtıEPSS %35

    openbsd · openssh22 Mar 2016

  • CVE-2016-3116
    31İzleyin

    CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions

    OrtaCVSS 6,4Kavram kanıtıEPSS %19

    dropbear ssh project · dropbear ssh22 Mar 2016

  • CVE-2016-1741
    42Planlayın

    The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    apple · mac os x23 Mar 2016

  • CVE-2016-1757
    32İzleyin

    Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged cont

    YüksekCVSS 7,0Kavram kanıtıEPSS %12

    apple · iphone os23 Mar 2016

  • CVE-2016-1768
    36İzleyin

    QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi

    YüksekCVSS 7,8Kavram kanıtıEPSS %16

    apple · mac os x23 Mar 2016

  • CVE-2016-3119
    33İzleyin

    The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5

    OrtaCVSS 5,3İstismar yokEPSS %39

    mit · kerberos 525 Mar 2016

  • CVE-2016-1646
    79Bu hafta

    The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly cons

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %48

    google · chrome29 Mar 2016

  • CVE-2016-3141
    50Planlayın

    Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    php · php31 Mar 2016