Yayın tarihine göre
Nisan 2018: sömürülen ve yeni ciddi CVE kayıtları
107 kayıt · 3 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 2 / 2
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
60Bu hafta | CVE-2018-1335Silahlaştırılmış | From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands intapache · tika | Yüksek8,1 | — | %93,5 | 25 Nis 2018 |
50Planlayın | CVE-2018-1418Silahlaştırılmış | IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution.ibm · qradar security information and event manager · CWE-287 | Yüksek8,8 | — | %50,7 | 26 Nis 2018 |
35İzleyin | CVE-2018-7669Kavram kanıtı | An issue was discovered in Sitecore Sitecore.NET 8.1 rev.sitecore · sitecore.net · CWE-22 | Yüksek7,5 | — | %16,9 | 27 Nis 2018 |
31İzleyin | CVE-2018-10517Kavram kanıtı | In CMS Made Simple (CMSMS) through 2.2.7, the "module import" operation in the admin dashboard contains a remote code execution vulnerabilitcmsmadesimple · cms made simple · CWE-94 | Yüksek7,2 | — | %11,5 | 27 Nis 2018 |
43Planlayın | CVE-2018-9845Kavram kanıtı | Etherpad Lite before 1.6.4 is exploitable for admin access.etherpad · etherpad lite · CWE-178 | Kritik9,8 | — | %12,7 | 29 Nis 2018 |
38İzleyin | CVE-2018-10553İstismar yok | An issue was discovered in Nagios XI 5.4.13.nagios · nagios xi · CWE-22 | Orta6,5 | — | %38,3 | 29 Nis 2018 |
37İzleyin | CVE-2018-5234Kavram kanıtı | The Norton Core router prior to v237 may be susceptible to a command injection exploit.symantec · norton core firmware | Yüksek8,0 | — | %15,2 | 30 Nis 2018 |
- CVE-2018-133560Bu hafta
From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands int
YüksekCVSS 8,1SilahlaştırılmışEPSS %93apache · tika25 Nis 2018
- CVE-2018-141850Planlayın
IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution.
YüksekCVSS 8,8SilahlaştırılmışEPSS %50ibm · qradar security information and event manager26 Nis 2018
- CVE-2018-766935İzleyin
An issue was discovered in Sitecore Sitecore.NET 8.1 rev.
YüksekCVSS 7,5Kavram kanıtıEPSS %16sitecore · sitecore.net27 Nis 2018
- CVE-2018-1051731İzleyin
In CMS Made Simple (CMSMS) through 2.2.7, the "module import" operation in the admin dashboard contains a remote code execution vulnerabilit
YüksekCVSS 7,2Kavram kanıtıEPSS %11cmsmadesimple · cms made simple27 Nis 2018
- CVE-2018-984543Planlayın
Etherpad Lite before 1.6.4 is exploitable for admin access.
KritikCVSS 9,8Kavram kanıtıEPSS %12etherpad · etherpad lite29 Nis 2018
- CVE-2018-1055338İzleyin
An issue was discovered in Nagios XI 5.4.13.
OrtaCVSS 6,5İstismar yokEPSS %38nagios · nagios xi29 Nis 2018
- CVE-2018-523437İzleyin
The Norton Core router prior to v237 may be susceptible to a command injection exploit.
YüksekCVSS 8,0Kavram kanıtıEPSS %15symantec · norton core firmware30 Nis 2018