İçeriğe atla
Noroxi

Yayın tarihine göre

Şubat 2018: sömürülen ve yeni ciddi CVE kayıtları

166 kayıt · 3 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 2

  • CVE-2018-6583
    45Planlayın

    SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    quanticalabs · timetable responsive schedule17 Şub 2018

  • CVE-2018-5378
    45Planlayın

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute le

    OrtaCVSS 5,9İstismar yokEPSS %74

    quagga · quagga19 Şub 2018

  • CVE-2018-5379
    51Planlayın

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing clust

    KritikCVSS 9,8İstismar yokEPSS %38

    quagga · quagga19 Şub 2018

  • CVE-2018-5380
    21İzleyin

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer va

    OrtaCVSS 4,3İstismar yokEPSS %14

    quagga · quagga19 Şub 2018

  • CVE-2018-5381
    39İzleyin

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp

    YüksekCVSS 7,5İstismar yokEPSS %30

    quagga · quagga19 Şub 2018

  • CVE-2018-7251
    61Bu hafta

    An issue was discovered in config/error.php in Anchor 0.12.3.

    KritikCVSS 9,8Kavram kanıtıEPSS %71

    anchorcms · anchor19 Şub 2018

  • CVE-2017-7376
    46Planlayın

    Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling

    KritikCVSS 9,8Kavram kanıtıEPSS %22

    xmlsoft · libxml219 Şub 2018

  • CVE-2016-6272
    36İzleyin

    XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display string

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    epic · mychart20 Şub 2018

  • CVE-2017-12161
    35İzleyin

    It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset reque

    YüksekCVSS 8,8İstismar yokEPSS %1

    keycloak · keycloak21 Şub 2018

  • CVE-2018-7284
    50Planlayın

    A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk thr

    YüksekCVSS 7,5Kavram kanıtıEPSS %66

    digium · asterisk21 Şub 2018

  • CVE-2018-7286
    42Planlayın

    An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert

    OrtaCVSS 6,5Kavram kanıtıEPSS %52

    digium · asterisk21 Şub 2018

  • CVE-2018-7287
    26İzleyin

    An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1.

    OrtaCVSS 5,9İstismar yokEPSS %11

    digium · asterisk21 Şub 2018

  • CVE-2018-7313
    45Planlayın

    SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    cwjoomla · cw tags22 Şub 2018

  • CVE-2018-7297
    58Planlayın

    Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/writ

    KritikCVSS 9,8Kavram kanıtıEPSS %64

    eq-3 · homematic central control unit ccu2 firmware22 Şub 2018

  • CVE-2018-7300
    48Planlayın

    Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earli

    KritikCVSS 9,8Kavram kanıtıEPSS %30

    eq-3 · homematic ccu2 firmware22 Şub 2018

  • CVE-2018-7314
    56Planlayın

    SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-64

    KritikCVSS 9,8Kavram kanıtıEPSS %57

    mlwebtechnologies · prayercenter22 Şub 2018

  • CVE-2014-3206
    54Planlayın

    Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or th

    KritikCVSS 9,8Kavram kanıtıEPSS %51

    seagate · blackarmor nas 220 firmware23 Şub 2018

  • CVE-2018-1305
    30İzleyin

    Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 t

    OrtaCVSS 6,5Kavram kanıtıEPSS %14

    apache · tomcat23 Şub 2018

  • CVE-2017-18195
    24İzleyin

    An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0.

    OrtaCVSS 5,3Kavram kanıtıEPSS %11

    concretecms · concrete cms26 Şub 2018

  • CVE-2018-7448
    34İzleyin

    Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote attackers to inject

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    cmsmadesimple · cms made simple26 Şub 2018

  • CVE-2018-7489
    45Planlayın

    FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    fasterxml · jackson-databind26 Şub 2018

  • CVE-2018-7490
    51Planlayın

    uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    unbit · uwsgi26 Şub 2018

  • CVE-2018-4872
    43Planlayın

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    KritikCVSS 10,0İstismar yokEPSS %11

    adobe · acrobat27 Şub 2018

  • CVE-2018-4879
    48Planlayın

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    KritikCVSS 9,8Kavram kanıtıEPSS %28

    adobe · acrobat27 Şub 2018

  • CVE-2018-4880
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4881
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4882
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4883
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4884
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %11

    adobe · acrobat27 Şub 2018

  • CVE-2018-4885
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %11

    adobe · acrobat27 Şub 2018

  • CVE-2018-4886
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4887
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4888
    39İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    YüksekCVSS 8,8İstismar yokEPSS %12

    adobe · acrobat27 Şub 2018

  • CVE-2018-4889
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4890
    42Planlayın

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    YüksekCVSS 8,8İstismar yokEPSS %24

    adobe · acrobat27 Şub 2018

  • CVE-2018-4891
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4892
    39İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    YüksekCVSS 8,8İstismar yokEPSS %12

    adobe · acrobat27 Şub 2018

  • CVE-2018-4893
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4894
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4895
    43Planlayın

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    KritikCVSS 9,8İstismar yokEPSS %13

    adobe · acrobat27 Şub 2018

  • CVE-2018-4896
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4897
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4898
    40Planlayın

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    YüksekCVSS 8,8İstismar yokEPSS %15

    adobe · acrobat27 Şub 2018

  • CVE-2018-4899
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4900
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4901
    40Planlayın

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    adobe · acrobat27 Şub 2018

  • CVE-2018-4902
    39İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    YüksekCVSS 8,8İstismar yokEPSS %12

    adobe · acrobat27 Şub 2018

  • CVE-2018-4903
    33İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %22

    adobe · acrobat27 Şub 2018

  • CVE-2018-4904
    48Planlayın

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    YüksekCVSS 8,8İstismar yokEPSS %42

    adobe · acrobat27 Şub 2018

  • CVE-2018-4905
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %11

    adobe · acrobat27 Şub 2018

  • CVE-2018-4906
    32İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %21

    adobe · acrobat27 Şub 2018

  • CVE-2018-4907
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4908
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4909
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4910
    42Planlayın

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    YüksekCVSS 8,8İstismar yokEPSS %24

    adobe · acrobat27 Şub 2018

  • CVE-2018-4912
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat27 Şub 2018

  • CVE-2018-4913
    39İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    YüksekCVSS 8,8İstismar yokEPSS %13

    adobe · acrobat27 Şub 2018

  • CVE-2018-4914
    29İzleyin

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    OrtaCVSS 6,5İstismar yokEPSS %11

    adobe · acrobat27 Şub 2018

  • CVE-2018-4915
    40Planlayın

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    YüksekCVSS 8,8İstismar yokEPSS %15

    adobe · acrobat27 Şub 2018

  • CVE-2018-4916
    40Planlayın

    An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and

    YüksekCVSS 8,8İstismar yokEPSS %15

    adobe · acrobat27 Şub 2018

  • CVE-2018-6481
    45Planlayın

    A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    flexense · disksavvy27 Şub 2018

  • CVE-2018-7467
    33İzleyin

    AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI.

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    axxonsoft · next27 Şub 2018

  • CVE-2018-7264
    43Planlayın

    The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    activepdf · activepdf toolkit28 Şub 2018

  • CVE-2015-4117
    38İzleyin

    Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup p

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    vestacp · control panel28 Şub 2018

  • CVE-2015-5079
    35İzleyin

    Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote attackers to read arbitrary files via a ..

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    blackcat-cms · blackcat cms28 Şub 2018

  • CVE-2018-1304
    28İzleyin

    The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4

    OrtaCVSS 5,9Kavram kanıtıEPSS %17

    apache · tomcat28 Şub 2018