İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2017: sömürülen ve yeni ciddi CVE kayıtları

84 kayıt · 8 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2017-14955
    27İzleyin

    Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote att

    OrtaCVSS 5,9Kavram kanıtıEPSS %12

    checkmk · checkmk1 Eki 2017

  • CVE-2017-13704
    50Planlayın

    In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value.

    YüksekCVSS 7,5İstismar yokEPSS %65

    canonical · ubuntu linux2 Eki 2017

  • CVE-2017-14492
    67Bu hafta

    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via

    KritikCVSS 9,8Kavram kanıtıEPSS %93

    canonical · ubuntu linux2 Eki 2017

  • CVE-2017-14493
    64Bu hafta

    Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code vi

    KritikCVSS 9,8Kavram kanıtıEPSS %83

    canonical · ubuntu linux2 Eki 2017

  • CVE-2017-14494
    43Planlayın

    dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handli

    OrtaCVSS 5,9Kavram kanıtıEPSS %67

    canonical · ubuntu linux2 Eki 2017

  • CVE-2017-14495
    55Planlayın

    Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a

    YüksekCVSS 7,5Kavram kanıtıEPSS %84

    canonical · ubuntu linux2 Eki 2017

  • CVE-2017-14496
    50Planlayın

    Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is speci

    YüksekCVSS 7,5Kavram kanıtıEPSS %66

    canonical · ubuntu linux2 Eki 2017

  • CVE-2017-6090
    64Bu hafta

    Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute

    YüksekCVSS 8,8SilahlaştırılmışEPSS %96

    phpcollab · phpcollab2 Eki 2017

  • CVE-2017-12617
    92Hemen

    When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g.

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %99

    apache · tomcat3 Eki 2017

  • CVE-2017-14491
    64Bu hafta

    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via

    KritikCVSS 9,8Kavram kanıtıEPSS %84

    thekelleys · dnsmasq3 Eki 2017

  • CVE-2017-12149
    96Hemen

    In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOn

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %90

    redhat · jboss enterprise application platform4 Eki 2017

  • CVE-2017-1000112
    34İzleyin

    Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch.

    YüksekCVSS 7,0SilahlaştırılmışEPSS %20

    linux · linux kernel4 Eki 2017

  • CVE-2017-1000117
    58Planlayın

    A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any prog

    YüksekCVSS 8,8SilahlaştırılmışEPSS %77

    git-scm · git4 Eki 2017

  • CVE-2017-1000119
    46Planlayın

    October CMS build 412 is vulnerable to PHP code execution in the file upload functionality resulting in site compromise and possibly other a

    YüksekCVSS 7,2SilahlaştırılmışEPSS %61

    octobercms · october4 Eki 2017

  • CVE-2017-1000253
    64Bu hafta

    Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %10

    linux · linux kernel4 Eki 2017

  • CVE-2017-12263
    33İzleyin

    A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view

    YüksekCVSS 7,5İstismar yokEPSS %11

    cisco · license manager5 Eki 2017

  • CVE-2017-14084
    35İzleyin

    A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary cod

    YüksekCVSS 8,1Kavram kanıtıEPSS %10

    trendmicro · officescan5 Eki 2017

  • CVE-2015-2673
    41Planlayın

    The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 th

    YüksekCVSS 8,8SilahlaştırılmışEPSS %18

    wpeasycart · wp easycart6 Eki 2017

  • CVE-2014-0030
    44Planlayın

    The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attacks via unspecified vec

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    apache · roller9 Eki 2017

  • CVE-2017-14980
    46Planlayın

    Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login

    KritikCVSS 9,8SilahlaştırılmışEPSS %22

    flexense · syncbreeze9 Eki 2017

  • CVE-2017-5637
    52Planlayın

    Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, w

    YüksekCVSS 7,5Kavram kanıtıEPSS %73

    apache · zookeeper9 Eki 2017

  • CVE-2015-2856
    47Planlayın

    Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210

    YüksekCVSS 7,5SilahlaştırılmışEPSS %56

    accellion · file transfer appliance10 Eki 2017

  • CVE-2013-6924
    44Planlayın

    Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    seagate · blackarmor nas 220 firmware11 Eki 2017

  • CVE-2017-0903
    44Planlayın

    RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %15

    rubygems · rubygems11 Eki 2017

  • CVE-2017-5789
    44Planlayın

    HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via uns

    KritikCVSS 9,8İstismar yokEPSS %17

    hp · loadrunner11 Eki 2017

  • CVE-2017-5791
    60Bu hafta

    The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of authenticati

    KritikCVSS 9,8İstismar yokEPSS %68

    hp · intelligent management center plat11 Eki 2017

  • CVE-2017-15277
    32İzleyin

    ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file th

    OrtaCVSS 6,5Kavram kanıtıEPSS %19

    graphicsmagick · graphicsmagick12 Eki 2017

  • CVE-2017-11762
    40Planlayın

    The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R

    YüksekCVSS 8,8İstismar yokEPSS %17

    microsoft · windows 1013 Eki 2017

  • CVE-2017-11763
    40Planlayın

    The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R

    YüksekCVSS 8,8İstismar yokEPSS %17

    microsoft · windows 1013 Eki 2017

  • CVE-2017-11769
    37İzleyin

    The Microsoft Windows TRIE component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execut

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · windows 1013 Eki 2017

  • CVE-2017-11771
    55Planlayın

    The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold

    KritikCVSS 9,8İstismar yokEPSS %51

    microsoft · windows 1013 Eki 2017

  • CVE-2017-11774
    79Bu hafta

    Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Micros

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %59

    microsoft · outlook13 Eki 2017

  • CVE-2017-11779
    42Planlayın

    The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold,

    YüksekCVSS 8,1İstismar yokEPSS %33

    microsoft · windows 1013 Eki 2017

  • CVE-2017-11781
    34İzleyin

    The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · windows 1013 Eki 2017

  • CVE-2017-11793
    45Planlayın

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2

    YüksekCVSS 7,5Kavram kanıtıEPSS %49

    microsoft · internet explorer13 Eki 2017

  • CVE-2017-11799
    49Planlayın

    ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar

    YüksekCVSS 7,5Kavram kanıtıEPSS %63

    microsoft · chakracore13 Eki 2017

  • CVE-2017-11802
    51Planlayın

    ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    microsoft · chakracore13 Eki 2017

  • CVE-2017-11809
    50Planlayın

    ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar

    YüksekCVSS 7,5Kavram kanıtıEPSS %68

    microsoft · chakracore13 Eki 2017

  • CVE-2017-11810
    46Planlayın

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2

    YüksekCVSS 7,5Kavram kanıtıEPSS %54

    microsoft · internet explorer13 Eki 2017

  • CVE-2017-11811
    50Planlayın

    ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar

    YüksekCVSS 7,5Kavram kanıtıEPSS %65

    microsoft · edge13 Eki 2017

  • CVE-2017-11812
    44Planlayın

    ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code

    YüksekCVSS 7,5İstismar yokEPSS %47

    microsoft · chakracore13 Eki 2017

  • CVE-2017-11815
    25İzleyin

    The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go

    OrtaCVSS 5,3İstismar yokEPSS %13

    microsoft · windows 1013 Eki 2017

  • CVE-2017-11816
    28İzleyin

    The Microsoft Windows Graphics Device Interface (GDI) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows S

    OrtaCVSS 5,5İstismar yokEPSS %19

    microsoft · windows 1013 Eki 2017

  • CVE-2017-11819
    34İzleyin

    Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handl

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · windows 713 Eki 2017

  • CVE-2017-11825
    38İzleyin

    Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform acti

    YüksekCVSS 7,8İstismar yokEPSS %22

    microsoft · office13 Eki 2017

  • CVE-2017-11826
    85Hemen

    Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Wo

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %81

    microsoft · office compatibility pack13 Eki 2017

  • CVE-2017-8717
    38İzleyin

    The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2,

    YüksekCVSS 7,8İstismar yokEPSS %24

    microsoft · windows 1013 Eki 2017

  • CVE-2017-8718
    38İzleyin

    The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2,

    YüksekCVSS 7,8İstismar yokEPSS %23

    microsoft · windows 1013 Eki 2017

  • CVE-2017-12629
    67Bu hafta

    Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config A

    KritikCVSS 9,8Kavram kanıtıEPSS %91

    apache · solr14 Eki 2017

  • CVE-2017-15363
    35İzleyin

    Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler exten

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    luracast · restler15 Eki 2017

  • CVE-2014-9147
    33İzleyin

    Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup file in .backup/.

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    fiyo · fiyo cms16 Eki 2017

  • CVE-2014-9148
    42Planlayın

    Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update" or (2) Backup super

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    fiyo · fiyo cms16 Eki 2017

  • CVE-2015-2780
    44Planlayın

    Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a crafted image file with

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    berta · berta cms16 Eki 2017

  • CVE-2014-9118
    51Planlayın

    The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary commands via shell metac

    YüksekCVSS 8,8Kavram kanıtıEPSS %53

    dasanzhone · znid 2426a firmware17 Eki 2017

  • CVE-2017-14322
    50Planlayın

    The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remo

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    interspire · email marketer18 Eki 2017

  • CVE-2017-12285
    32İzleyin

    A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arb

    OrtaCVSS 5,3İstismar yokEPSS %37

    cisco · prime network analysis module19 Eki 2017

  • CVE-2017-10271
    90Hemen

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security).

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99

    oracle · weblogic server19 Eki 2017

  • CVE-2017-10355
    26İzleyin

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).

    OrtaCVSS 5,3Kavram kanıtıEPSS %16

    oracle · jdk19 Eki 2017

  • CVE-2017-10366
    52Planlayın

    Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor).

    KritikCVSS 9,8Kavram kanıtıEPSS %43

    oracle · peoplesoft enterprise peopletools19 Eki 2017

  • CVE-2015-6668
    33İzleyin

    The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the WordPress upload dir

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    wp-jobmanager · job manager19 Eki 2017

  • CVE-2017-15647
    38İzleyin

    On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value.

    YüksekCVSS 7,5Kavram kanıtıEPSS %26

    fiberhome · routerfiberhome firmware19 Eki 2017

  • CVE-2017-14937
    18İzleyin

    The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access (SA) data to the internal CAN bus (

    OrtaCVSS 4,7SilahlaştırılmışEPSS %0

    pcu · pcu20 Eki 2017

  • CVE-2017-11292
    69Bu hafta

    Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be us

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %11

    adobe · flash player desktop runtime22 Eki 2017

  • CVE-2017-7117
    38İzleyin

    An issue was discovered in certain Apple products.

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    apple · safari22 Eki 2017

  • CVE-2017-14328
    30İzleyin

    Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot.

    YüksekCVSS 7,5İstismar yokEPSS %1

    extremenetworks · extremexos23 Eki 2017

  • CVE-2017-15580
    44Planlayın

    osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats.

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    osticket · osticket23 Eki 2017

  • CVE-2017-9946
    37İzleyin

    A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5.

    YüksekCVSS 7,5İstismar yokEPSS %24

    siemens · apogee pxc firmware23 Eki 2017

  • CVE-2014-3744
    40Planlayın

    Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (en

    YüksekCVSS 7,5Kavram kanıtıEPSS %34

    nodejs · node.js23 Eki 2017

  • CVE-2017-13772
    50Planlayın

    Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arb

    YüksekCVSS 8,8Kavram kanıtıEPSS %51

    tp-link · wr940n firmware23 Eki 2017

  • CVE-2014-1203
    44Planlayın

    The get_login_ip_config_file function in Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacha

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    eyou · eyou24 Eki 2017

  • CVE-2017-15222
    57Planlayın

    Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code.

    KritikCVSS 9,8SilahlaştırılmışEPSS %60

    nftp project · nftp24 Eki 2017

  • CVE-2017-15908
    37İzleyin

    In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in th

    YüksekCVSS 7,5İstismar yokEPSS %23

    systemd project · systemd26 Eki 2017

  • CVE-2017-5070
    75Bu hafta

    Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote atta

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %32

    google · chrome27 Eki 2017

  • CVE-2017-5098
    40Planlayın

    A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an o

    YüksekCVSS 8,8İstismar yokEPSS %15

    google · chrome27 Eki 2017

  • CVE-2017-5115
    43Planlayın

    Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption v

    YüksekCVSS 8,8İstismar yokEPSS %26

    google · chrome27 Eki 2017

  • CVE-2017-5116
    39İzleyin

    Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote atta

    YüksekCVSS 8,8İstismar yokEPSS %12

    google · chrome27 Eki 2017

  • CVE-2016-5003
    43Planlayın

    The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted

    KritikCVSS 9,8İstismar yokEPSS %14

    apache · ws-xmlrpc27 Eki 2017

  • CVE-2017-13089
    59Planlayın

    GNU Wget: stack overflow in HTTP protocol handling

    YüksekCVSS 8,8Kavram kanıtıEPSS %79

    gnu · wget27 Eki 2017

  • CVE-2017-13090
    46Planlayın

    GNU Wget: heap overflow in HTTP protocol handling

    YüksekCVSS 8,8İstismar yokEPSS %36

    gnu · wget27 Eki 2017

  • CVE-2017-16227
    36İzleyin

    The aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 allows remote attackers to cause a denial of service (session drop) via

    YüksekCVSS 7,5İstismar yokEPSS %18

    quagga · quagga29 Eki 2017

  • CVE-2012-5357
    59Planlayın

    Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remot

    KritikCVSS 9,8SilahlaştırılmışEPSS %67

    ektron · ektron content management system30 Eki 2017

  • CVE-2015-0224
    35İzleyin

    qpidd in Apache Qpid 0.30 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted protocol sequence se

    YüksekCVSS 7,5İstismar yokEPSS %15

    apache · qpid30 Eki 2017

  • CVE-2017-7411
    55Planlayın

    An issue was discovered in Enalean Tuleap 9.6 and prior versions.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %66

    enalean · tuleap30 Eki 2017

  • CVE-2012-0881
    35İzleyin

    Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an

    YüksekCVSS 7,5İstismar yokEPSS %17

    apache · xerces2 java30 Eki 2017