İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2016: sömürülen ve yeni ciddi CVE kayıtları

49 kayıt · 6 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2016-5639
    36İzleyin

    Directory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote attac

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    crestron · airmedia am-100 firmware2 Ağu 2016

  • CVE-2016-5640
    44Planlayın

    Directory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with firmware before 1.4.0.13 allows remote atta

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    crestron · airmedia am-100 firmware2 Ağu 2016

  • CVE-2016-5696
    23İzleyin

    net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier fo

    OrtaCVSS 4,8Kavram kanıtıEPSS %14

    linux · linux kernel6 Ağu 2016

  • CVE-2016-3078
    56Planlayın

    Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-b

    KritikCVSS 9,8Kavram kanıtıEPSS %56

    php · php7 Ağu 2016

  • CVE-2016-3132
    43Planlayın

    Double free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c in PHP 7.x before 7.0.6 allows remote attac

    KritikCVSS 9,8İstismar yokEPSS %11

    php · php7 Ağu 2016

  • CVE-2016-5771
    44Planlayın

    spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and g

    KritikCVSS 9,8İstismar yokEPSS %15

    php · php7 Ağu 2016

  • CVE-2016-6515
    48Planlayın

    The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which

    YüksekCVSS 7,5Kavram kanıtıEPSS %58

    openbsd · openssh7 Ağu 2016

  • CVE-2016-2960
    26İzleyin

    IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty b

    DüşükCVSS 3,7İstismar yokEPSS %39

    ibm · websphere application server7 Ağu 2016

  • CVE-2016-5330
    40Planlayın

    Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware W

    YüksekCVSS 7,8SilahlaştırılmışEPSS %18

    vmware · workstation player7 Ağu 2016

  • CVE-2016-3237
    35İzleyin

    Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Wi

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    microsoft · windows 109 Ağu 2016

  • CVE-2016-3288
    46Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corru

    YüksekCVSS 7,5Kavram kanıtıEPSS %51

    microsoft · internet explorer9 Ağu 2016

  • CVE-2016-3289
    35İzleyin

    Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memo

    YüksekCVSS 7,5İstismar yokEPSS %17

    microsoft · edge9 Ağu 2016

  • CVE-2016-3290
    35İzleyin

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted web page, aka "Internet Explorer Memory Corru

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · internet explorer9 Ağu 2016

  • CVE-2016-3293
    34İzleyin

    Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Br

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · edge9 Ağu 2016

  • CVE-2016-3296
    34İzleyin

    The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engi

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · edge9 Ağu 2016

  • CVE-2016-3299
    25İzleyin

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1

    OrtaCVSS 5,3İstismar yokEPSS %13

    microsoft · windows 109 Ağu 2016

  • CVE-2016-3301
    44Planlayın

    The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012

    YüksekCVSS 7,8Kavram kanıtıEPSS %44

    microsoft · live meeting9 Ağu 2016

  • CVE-2016-3303
    46Planlayın

    The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2

    YüksekCVSS 7,8Kavram kanıtıEPSS %50

    microsoft · live meeting9 Ağu 2016

  • CVE-2016-3304
    46Planlayın

    The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2

    YüksekCVSS 7,8Kavram kanıtıEPSS %50

    microsoft · live meeting9 Ağu 2016

  • CVE-2016-3309
    67Bu hafta

    The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %20

    microsoft · windows 10 15079 Ağu 2016

  • CVE-2016-3315
    31İzleyin

    Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information v

    OrtaCVSS 5,5İstismar yokEPSS %30

    microsoft · onenote9 Ağu 2016

  • CVE-2016-3316
    45Planlayın

    Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Micro

    YüksekCVSS 7,8Kavram kanıtıEPSS %47

    microsoft · word9 Ağu 2016

  • CVE-2016-3317
    38İzleyin

    Microsoft Office 2010 SP2, Word 2007 SP3, Word 2010 SP2, Word for Mac 2011, Word 2016 for Mac, and Word Viewer allow remote attackers to exe

    YüksekCVSS 7,8İstismar yokEPSS %22

    microsoft · office9 Ağu 2016

  • CVE-2016-3318
    38İzleyin

    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allow remote attackers to execute arbitrary code via a crafted file, aka "Gra

    YüksekCVSS 7,8İstismar yokEPSS %22

    microsoft · office9 Ağu 2016

  • CVE-2016-3319
    34İzleyin

    The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attack

    YüksekCVSS 7,0İstismar yokEPSS %18

    microsoft · edge9 Ağu 2016

  • CVE-2016-3321
    40Planlayın

    Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which al

    DüşükCVSS 2,5SilahlaştırılmışEPSS %36

    microsoft · internet explorer9 Ağu 2016

  • CVE-2016-3322
    34İzleyin

    Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memo

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · edge9 Ağu 2016

  • CVE-2016-3326
    26İzleyin

    Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Micros

    OrtaCVSS 5,3İstismar yokEPSS %15

    microsoft · edge9 Ağu 2016

  • CVE-2016-3327
    25İzleyin

    Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Micros

    OrtaCVSS 5,3İstismar yokEPSS %14

    microsoft · edge9 Ağu 2016

  • CVE-2016-3329
    25İzleyin

    Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a crafted webpage, aka "Int

    OrtaCVSS 5,3İstismar yokEPSS %14

    microsoft · edge9 Ağu 2016

  • CVE-2016-3313
    46Planlayın

    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute a

    YüksekCVSS 7,8Kavram kanıtıEPSS %49

    microsoft · office9 Ağu 2016

  • CVE-2016-5419
    35İzleyin

    curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers

    YüksekCVSS 7,5İstismar yokEPSS %15

    haxx · libcurl10 Ağu 2016

  • CVE-2016-5420
    35İzleyin

    curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attac

    YüksekCVSS 7,5İstismar yokEPSS %15

    debian · debian linux10 Ağu 2016

  • CVE-2016-6366
    91Hemen

    Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V,

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %87

    cisco · pix firewall software18 Ağu 2016

  • CVE-2016-6367
    68Bu hafta

    Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain pri

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %22

    cisco · adaptive security appliance software18 Ağu 2016

  • CVE-2016-5645
    38İzleyin

    Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L32AWA, 1766-L32BXB, 1766-L32BWAA, 1766-L32AWAA, and 1766-L32BXBA devices have a h

    YüksekCVSS 7,3İstismar yokEPSS %29

    rockwellautomation · 1766-l32awa23 Ağu 2016

  • CVE-2016-6909
    54Planlayın

    Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9 and FortiSwitch befo

    KritikCVSS 9,8Kavram kanıtıEPSS %49

    fortinet · fortios24 Ağu 2016

  • CVE-2016-4655
    62Bu hafta

    The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

    OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %33

    apple · iphone os25 Ağu 2016

  • CVE-2016-4656
    68Bu hafta

    The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %23

    apple · iphone os25 Ağu 2016

  • CVE-2016-4657
    85Hemen

    WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a cr

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %66

    apple · iphone os25 Ağu 2016

  • CVE-2016-5681
    43Planlayın

    Stack-based buffer overflow in dws/api/Login on D-Link DIR-850L B1 2.07 before 2.07WWB05, DIR-817 Ax, DIR-818LW Bx before 2.05b03beta03, DIR

    KritikCVSS 9,8İstismar yokEPSS %11

    d-link · dir-880l firmware25 Ağu 2016

  • CVE-2016-6195
    60Bu hafta

    SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 al

    KritikCVSS 9,8Kavram kanıtıEPSS %68

    vbulletin · vbulletin30 Ağu 2016

  • CVE-2016-5674
    67Bu hafta

    __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1

    KritikCVSS 9,8SilahlaştırılmışEPSS %94

    netgear · readynas surveillance31 Ağu 2016

  • CVE-2016-5675
    60Bu hafta

    handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NET

    KritikCVSS 9,8SilahlaştırılmışEPSS %70

    nuuo · crystal31 Ağu 2016

  • CVE-2016-5676
    60Bu hafta

    cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %53

    netgear · readynas surveillance31 Ağu 2016

  • CVE-2016-5677
    34İzleyin

    NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    netgear · readynas surveillance31 Ağu 2016

  • CVE-2016-5679
    39İzleyin

    cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute

    YüksekCVSS 8,8Kavram kanıtıEPSS %14

    nuuo · nvrmini 231 Ağu 2016

  • CVE-2016-5680
    40Planlayın

    Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    nuuo · nvrmini 231 Ağu 2016

  • CVE-2016-2183
    58Planlayın

    The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of appr

    YüksekCVSS 7,5Kavram kanıtıEPSS %94

    redhat · jboss enterprise application platform31 Ağu 2016