İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2018: sömürülen ve yeni ciddi CVE kayıtları

113 kayıt · 4 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 2

  • CVE-2018-6008
    41Planlayın

    Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the download_file parameter.

    YüksekCVSS 7,5Kavram kanıtıEPSS %36

    joomlatag · jtag members directory29 Oca 2018

  • CVE-2017-1000353
    99Hemen

    Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    jenkins · jenkins29 Oca 2018

  • CVE-2018-6383
    39İzleyin

    Monstra CMS through 3.0.4 has an incomplete "forbidden types" list that excludes .php (and similar) file extensions but not the .pht or .pha

    YüksekCVSS 8,8Kavram kanıtıEPSS %13

    monstra · monstra29 Oca 2018

  • CVE-2018-0101
    66Bu hafta

    A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an u

    KritikCVSS 10,0Kavram kanıtıEPSS %86

    cisco · adaptive security appliance software29 Oca 2018

  • CVE-2018-6397
    34İzleyin

    Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter.

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    joomlacalendars · picture calendar30 Oca 2018

  • CVE-2018-6377
    41Planlayın

    In Joomla! before 3.8.4, inadequate input filtering in com_fields leads to an XSS vulnerability in multiple field types, i.e., list, radio,

    OrtaCVSS 6,1İstismar yokEPSS %56

    joomla · joomla\!30 Oca 2018

  • CVE-2016-6598
    45Planlayın

    BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    bmc · track-it\!30 Oca 2018

  • CVE-2016-6599
    43Planlayın

    BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010.

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    bmc · track-it\!30 Oca 2018

  • CVE-2018-6407
    40Planlayın

    An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 devices.

    YüksekCVSS 7,5Kavram kanıtıEPSS %32

    conceptronic · cipcamptiwl firmware30 Oca 2018

  • CVE-2018-1000001
    40Planlayın

    In glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be used to write before the destination buffer

    YüksekCVSS 7,8SilahlaştırılmışEPSS %13

    gnu · glibc31 Oca 2018

  • CVE-2018-6460
    33İzleyin

    Hotspot Shield runs a webserver with a static IP address 127.0.0.1 and port 895.

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    anchorfree · hotspot shield31 Oca 2018

  • CVE-2014-1632
    35İzleyin

    htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter.

    YüksekCVSS 8,1Kavram kanıtıEPSS %10

    eventum project · eventum31 Oca 2018

  • CVE-2018-5701
    45Planlayın

    In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not vali

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    iolo · system shield31 Oca 2018