Yayın tarihine göre

Temmuz 2018: sömürülen ve yeni ciddi CVE kayıtları

159 kayıt · 5 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 2

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
44Planlayın	CVE-2018-13859Kavram kanıtı	MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18, allow unauthorized remotrivum · c4 professional firmware Kimlik doğrulamasız	Kritik9,8	—	%17,2	17 Tem 2018
54Planlayın	CVE-2018-13862Kavram kanıtı	Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attackers to reset the authetrivum · webtouch setup v9 firmware Kimlik doğrulamasız	Kritik9,8	—	%49,2	17 Tem 2018
60Bu hafta	CVE-2018-1612Silahlaştırılmış	IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive infibm · qradar security information and event manager · CWE-200 Kimlik doğrulamasız Kimlik doğrulama atlatma Bilgi sızıntısı	Orta5,8	—	%55,6	17 Tem 2018
60Bu hafta	CVE-2018-2893Kavram kanıtı	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).oracle · weblogic server Kimlik doğrulamasız	Kritik9,8	—	%70,3	18 Tem 2018
54Planlayın	CVE-2018-2894Kavram kanıtı	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services).oracle · weblogic server Kimlik doğrulamasız	Kritik9,8	—	%50,2	18 Tem 2018
39İzleyin	CVE-2018-2992İstismar yok	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).oracle · outside in technology Kimlik doğrulamasız	Yüksek7,1	—	%35,1	18 Tem 2018
47Planlayın	CVE-2018-8011Kavram kanıtı	mod_md, DoS via Coredumps on specially crafted requestsapache · http server · CWE-476 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Yüksek7,5	—	%55,6	18 Tem 2018
53Planlayın	CVE-2018-14364İstismar yok	GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write acgitlab · gitlab · CWE-22 Girişsiz RCE Yol geçişi	Kritik9,8	—	%47,6	18 Tem 2018
39İzleyin	CVE-2018-14392Kavram kanıtı	The New Threads plugin before 1.2 for MyBB has XSS.mybb · new threads · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%48,5	18 Tem 2018
99Hemen	CVE-2018-7602Silahlaştırılmış	Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004drupal · drupal · CWE-94 Girişsiz RCE	Kritik9,8	KEV	%99,1	19 Tem 2018
46Planlayın	CVE-2018-12754İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,8	—	%24,9	20 Tem 2018
46Planlayın	CVE-2018-12755İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,8	—	%24,9	20 Tem 2018
35İzleyin	CVE-2018-12764İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Kimlik doğrulamasız Bellek hatası	Orta6,5	—	%30,6	20 Tem 2018
38İzleyin	CVE-2018-12765İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Kimlik doğrulamasız Bellek hatası	Yüksek7,5	—	%27,4	20 Tem 2018
38İzleyin	CVE-2018-12766İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Kimlik doğrulamasız Bellek hatası	Yüksek7,5	—	%27,4	20 Tem 2018
38İzleyin	CVE-2018-12767İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Kimlik doğrulamasız Bellek hatası	Yüksek7,5	—	%27,4	20 Tem 2018
38İzleyin	CVE-2018-12768İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Kimlik doğrulamasız Bellek hatası	Yüksek7,5	—	%27,4	20 Tem 2018
42Planlayın	CVE-2018-12782İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Double Free adobe · acrobat dc · CWE-415 Girişsiz RCE Bellek hatası	Kritik9,8	—	%11,0	20 Tem 2018
38İzleyin	CVE-2018-12788İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%11,1	20 Tem 2018
40Planlayın	CVE-2018-12794İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusiadobe · acrobat dc · CWE-704 Girişsiz RCE	Yüksek8,8	—	%15,6	20 Tem 2018
43Planlayın	CVE-2018-12798Kavram kanıtı	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,8	—	%13,3	20 Tem 2018
42Planlayın	CVE-2018-12804İstismar yok	Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability.adobe · connect · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%11,0	20 Tem 2018
42Planlayın	CVE-2018-12815İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-fradobe · acrobat dc · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,8	—	%10,8	20 Tem 2018
46Planlayın	CVE-2018-5006İstismar yok	Adobe Experience Manager versions 6.4 and earlier have a Server-Side Request Forgery vulnerability.adobe · experience manager · CWE-918 Kimlik doğrulamasız SSRF	Yüksek7,5	—	%53,3	20 Tem 2018
40Planlayın	CVE-2018-5007İstismar yok	Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability.adobe · flash player desktop runtime · CWE-704 Girişsiz RCE	Yüksek8,8	—	%17,7	20 Tem 2018
38İzleyin	CVE-2018-5015İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%11,1	20 Tem 2018
38İzleyin	CVE-2018-5028İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%11,1	20 Tem 2018
38İzleyin	CVE-2018-5032İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%10,6	20 Tem 2018
38İzleyin	CVE-2018-5036İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%11,1	20 Tem 2018
38İzleyin	CVE-2018-5038İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%11,1	20 Tem 2018
38İzleyin	CVE-2018-5040İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%11,1	20 Tem 2018
38İzleyin	CVE-2018-5041İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%11,1	20 Tem 2018
38İzleyin	CVE-2018-5045İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%11,1	20 Tem 2018
38İzleyin	CVE-2018-5052İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%11,1	20 Tem 2018
38İzleyin	CVE-2018-5058İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%11,1	20 Tem 2018
35İzleyin	CVE-2018-5063İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Kimlik doğrulamasız Bellek hatası	Orta6,5	—	%30,6	20 Tem 2018
47Planlayın	CVE-2018-5064İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,8	—	%25,1	20 Tem 2018
44Planlayın	CVE-2018-5065İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-fradobe · acrobat dc · CWE-416 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%31,1	20 Tem 2018
38İzleyin	CVE-2018-5067İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overfloadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	—	%11,1	20 Tem 2018
38İzleyin	CVE-2018-5068İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-125 Kimlik doğrulamasız Bellek hatası	Yüksek7,5	—	%27,4	20 Tem 2018
47Planlayın	CVE-2018-5069İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,8	—	%25,1	20 Tem 2018
47Planlayın	CVE-2018-5070İstismar yok	Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounadobe · acrobat dc · CWE-787 Girişsiz RCE Bellek hatası	Kritik9,8	—	%25,1	20 Tem 2018
40Planlayın	CVE-2018-1999001İstismar yok	A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allowsjenkins · jenkins Kimlik doğrulamasız	Yüksek8,8	—	%18,1	23 Tem 2018
56Planlayın	CVE-2018-1999002Kavram kanıtı	A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stapjenkins · jenkins Kimlik doğrulamasız	Yüksek7,5	—	%86,5	23 Tem 2018
42Planlayın	CVE-2018-14328Kavram kanıtı	Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via abrynamics · online trade · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Kritik9,8	—	%10,5	23 Tem 2018
30İzleyin	CVE-2018-14335Kavram kanıtı	An issue was discovered in H2 1.4.197.h2database · h2 · CWE-59	Orta6,5	—	%13,2	24 Tem 2018
46Planlayın	CVE-2016-5649Kavram kanıtı	Netgear DGN2200 and DGND3700 disclose the administrator passwordnetgear · dgn2200 firmware · CWE-319 Kimlik doğrulamasız Zayıf kripto	Kritik9,8	—	%23,5	24 Tem 2018
25İzleyin	CVE-2018-1002200Kavram kanıtı	plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) codehaus-plexus · plexus-archiver · CWE-22 Yol geçişi	Orta5,5	—	%11,5	25 Tem 2018
25İzleyin	CVE-2018-1002201Kavram kanıtı	zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip ajrebel · zt-zip · CWE-22 Yol geçişi	Orta5,5	—	%10,4	25 Tem 2018
30İzleyin	CVE-2018-1002202Kavram kanıtı	zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip azip4j project · zip4j · CWE-22 Kimlik doğrulamasız Yol geçişi	Orta6,5	—	%12,6	25 Tem 2018
25İzleyin	CVE-2018-1002203İstismar yok	unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot sunzipper project · unzipper · CWE-22 Yol geçişi	Orta5,5	—	%10,5	25 Tem 2018
26İzleyin	CVE-2018-1002204İstismar yok	adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slaadm-zip project · adm-zip · CWE-22 Yol geçişi	Orta5,5	—	%13,4	25 Tem 2018
25İzleyin	CVE-2018-1002205İstismar yok	DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot sladotnetzip.semverd project · dotnetzip.semverd · CWE-22 Yol geçişi	Orta5,5	—	%10,3	25 Tem 2018
36İzleyin	CVE-2018-14493Kavram kanıtı	Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web scopmantek · open-audit · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%40,9	25 Tem 2018
40Planlayın	CVE-2018-10900Silahlaştırılmış	Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack.gnome · network manager vpnc · CWE-78 RCE Yerel yetki yükseltme Komut enjeksiyonu	Yüksek7,8	—	%3,9	26 Tem 2018
33İzleyin	CVE-2017-12150İstismar yok	It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration samba · samba · CWE-300 Kimlik doğrulamasız	Yüksek7,4	—	%13,0	26 Tem 2018
45Planlayın	CVE-2017-15120Kavram kanıtı	An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference whepowerdns · recursor · CWE-476 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Yüksek7,5	—	%51,3	27 Tem 2018
43Planlayın	CVE-2017-15118Kavram kanıtı	A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an exporqemu · qemu · CWE-121 Kimlik doğrulamasız Bellek hatası	Kritik9,8	—	%11,9	27 Tem 2018
48Planlayın	CVE-2018-14767İstismar yok	In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentationkamailio · kamailio · CWE-20 Girişsiz RCE	Kritik9,8	—	%29,3	31 Tem 2018

CVE-2018-13859
44Planlayın
MusicCenter / Trivum Multiroom Setup Tool V8.76 - SNR 8604.26 - C4 Professional before V9.34 build 13381 - 12.07.18, allow unauthorized remo
KritikCVSS 9,8Kavram kanıtıEPSS %17
- Kimlik doğrulamasız
trivum · c4 professional firmware17 Tem 2018
CVE-2018-13862
54Planlayın
Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attackers to reset the authe
KritikCVSS 9,8Kavram kanıtıEPSS %49
- Kimlik doğrulamasız
trivum · webtouch setup v9 firmware17 Tem 2018
CVE-2018-1612
60Bu hafta
IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and obtain sensitive inf
OrtaCVSS 5,8SilahlaştırılmışEPSS %55
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
- Bilgi sızıntısı
ibm · qradar security information and event manager17 Tem 2018
CVE-2018-2893
60Bu hafta
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).
KritikCVSS 9,8Kavram kanıtıEPSS %70
- Kimlik doğrulamasız
oracle · weblogic server18 Tem 2018
CVE-2018-2894
54Planlayın
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services).
KritikCVSS 9,8Kavram kanıtıEPSS %50
- Kimlik doğrulamasız
oracle · weblogic server18 Tem 2018
CVE-2018-2992
39İzleyin
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).
YüksekCVSS 7,1İstismar yokEPSS %35
- Kimlik doğrulamasız
oracle · outside in technology18 Tem 2018
CVE-2018-8011
47Planlayın
mod_md, DoS via Coredumps on specially crafted requests
YüksekCVSS 7,5Kavram kanıtıEPSS %55
- Kimlik doğrulamasız
- Bellek hatası
- Hizmet dışı bırakma
apache · http server18 Tem 2018
CVE-2018-14364
53Planlayın
GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write ac
KritikCVSS 9,8İstismar yokEPSS %47
- Girişsiz RCE
- Yol geçişi
gitlab · gitlab18 Tem 2018
CVE-2018-14392
39İzleyin
The New Threads plugin before 1.2 for MyBB has XSS.
OrtaCVSS 6,1Kavram kanıtıEPSS %48
- Kimlik doğrulamasız
- XSS
mybb · new threads18 Tem 2018
CVE-2018-7602
99Hemen
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
drupal · drupal19 Tem 2018
CVE-2018-12754
46Planlayın
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
KritikCVSS 9,8İstismar yokEPSS %24
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-12755
46Planlayın
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
KritikCVSS 9,8İstismar yokEPSS %24
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-12764
35İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
OrtaCVSS 6,5İstismar yokEPSS %30
- Kimlik doğrulamasız
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-12765
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
YüksekCVSS 7,5İstismar yokEPSS %27
- Kimlik doğrulamasız
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-12766
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
YüksekCVSS 7,5İstismar yokEPSS %27
- Kimlik doğrulamasız
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-12767
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
YüksekCVSS 7,5İstismar yokEPSS %27
- Kimlik doğrulamasız
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-12768
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
YüksekCVSS 7,5İstismar yokEPSS %27
- Kimlik doğrulamasız
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-12782
42Planlayın
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Double Free
KritikCVSS 9,8İstismar yokEPSS %11
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-12788
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
YüksekCVSS 8,8İstismar yokEPSS %11
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-12794
40Planlayın
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusi
YüksekCVSS 8,8İstismar yokEPSS %15
- Girişsiz RCE
adobe · acrobat dc20 Tem 2018
CVE-2018-12798
43Planlayın
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
KritikCVSS 9,8Kavram kanıtıEPSS %13
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-12804
42Planlayın
Adobe Connect versions 9.7.5 and earlier have an Authentication Bypass vulnerability.
KritikCVSS 9,8İstismar yokEPSS %11
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
adobe · connect20 Tem 2018
CVE-2018-12815
42Planlayın
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-fr
KritikCVSS 9,8İstismar yokEPSS %10
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5006
46Planlayın
Adobe Experience Manager versions 6.4 and earlier have a Server-Side Request Forgery vulnerability.
YüksekCVSS 7,5İstismar yokEPSS %53
- Kimlik doğrulamasız
- SSRF
adobe · experience manager20 Tem 2018
CVE-2018-5007
40Planlayın
Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability.
YüksekCVSS 8,8İstismar yokEPSS %17
- Girişsiz RCE
adobe · flash player desktop runtime20 Tem 2018
CVE-2018-5015
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
YüksekCVSS 8,8İstismar yokEPSS %11
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5028
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
YüksekCVSS 8,8İstismar yokEPSS %11
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5032
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
YüksekCVSS 8,8İstismar yokEPSS %10
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5036
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
YüksekCVSS 8,8İstismar yokEPSS %11
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5038
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
YüksekCVSS 8,8İstismar yokEPSS %11
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5040
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
YüksekCVSS 8,8İstismar yokEPSS %11
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5041
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
YüksekCVSS 8,8İstismar yokEPSS %11
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5045
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
YüksekCVSS 8,8İstismar yokEPSS %11
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5052
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
YüksekCVSS 8,8İstismar yokEPSS %11
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5058
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
YüksekCVSS 8,8İstismar yokEPSS %11
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5063
35İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
OrtaCVSS 6,5İstismar yokEPSS %30
- Kimlik doğrulamasız
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5064
47Planlayın
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
KritikCVSS 9,8İstismar yokEPSS %25
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5065
44Planlayın
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Use-after-fr
YüksekCVSS 8,8İstismar yokEPSS %31
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5067
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflo
YüksekCVSS 8,8İstismar yokEPSS %11
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5068
38İzleyin
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
YüksekCVSS 7,5İstismar yokEPSS %27
- Kimlik doğrulamasız
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5069
47Planlayın
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
KritikCVSS 9,8İstismar yokEPSS %25
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-5070
47Planlayın
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-boun
KritikCVSS 9,8İstismar yokEPSS %25
- Girişsiz RCE
- Bellek hatası
adobe · acrobat dc20 Tem 2018
CVE-2018-1999001
40Planlayın
A unauthorized modification of configuration vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in User.java that allows
YüksekCVSS 8,8İstismar yokEPSS %18
- Kimlik doğrulamasız
jenkins · jenkins23 Tem 2018
CVE-2018-1999002
56Planlayın
A arbitrary file read vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in the Stapler web framework's org/kohsuke/stap
YüksekCVSS 7,5Kavram kanıtıEPSS %86
- Kimlik doğrulamasız
jenkins · jenkins23 Tem 2018
CVE-2018-14328
42Planlayın
Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensitive information via a
KritikCVSS 9,8Kavram kanıtıEPSS %10
- Kimlik doğrulamasız
- Bilgi sızıntısı
brynamics · online trade23 Tem 2018
CVE-2018-14335
30İzleyin
An issue was discovered in H2 1.4.197.
OrtaCVSS 6,5Kavram kanıtıEPSS %13
h2database · h224 Tem 2018
CVE-2016-5649
46Planlayın
Netgear DGN2200 and DGND3700 disclose the administrator password
KritikCVSS 9,8Kavram kanıtıEPSS %23
- Kimlik doğrulamasız
- Zayıf kripto
netgear · dgn2200 firmware24 Tem 2018
CVE-2018-1002200
25İzleyin
plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash)
OrtaCVSS 5,5Kavram kanıtıEPSS %11
- Yol geçişi
codehaus-plexus · plexus-archiver25 Tem 2018
CVE-2018-1002201
25İzleyin
zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip a
OrtaCVSS 5,5Kavram kanıtıEPSS %10
- Yol geçişi
jrebel · zt-zip25 Tem 2018
CVE-2018-1002202
30İzleyin
zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip a
OrtaCVSS 6,5Kavram kanıtıEPSS %12
- Kimlik doğrulamasız
- Yol geçişi
zip4j project · zip4j25 Tem 2018
CVE-2018-1002203
25İzleyin
unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot s
OrtaCVSS 5,5İstismar yokEPSS %10
- Yol geçişi
unzipper project · unzipper25 Tem 2018
CVE-2018-1002204
26İzleyin
adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot sla
OrtaCVSS 5,5İstismar yokEPSS %13
- Yol geçişi
adm-zip project · adm-zip25 Tem 2018
CVE-2018-1002205
25İzleyin
DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot sla
OrtaCVSS 5,5İstismar yokEPSS %10
- Yol geçişi
dotnetzip.semverd project · dotnetzip.semverd25 Tem 2018
CVE-2018-14493
36İzleyin
Cross-site scripting (XSS) vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web sc
OrtaCVSS 6,1Kavram kanıtıEPSS %40
- Kimlik doğrulamasız
- XSS
opmantek · open-audit25 Tem 2018
CVE-2018-10900
40Planlayın
Network Manager VPNC plugin (aka networkmanager-vpnc) before version 1.2.6 is vulnerable to a privilege escalation attack.
YüksekCVSS 7,8SilahlaştırılmışEPSS %3
- RCE
- Yerel yetki yükseltme
- Komut enjeksiyonu
gnome · network manager vpnc26 Tem 2018
CVE-2017-12150
33İzleyin
It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration
YüksekCVSS 7,4İstismar yokEPSS %13
- Kimlik doğrulamasız
samba · samba26 Tem 2018
CVE-2017-15120
45Planlayın
An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference whe
YüksekCVSS 7,5Kavram kanıtıEPSS %51
- Kimlik doğrulamasız
- Bellek hatası
- Hizmet dışı bırakma
powerdns · recursor27 Tem 2018
CVE-2017-15118
43Planlayın
A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an expor
KritikCVSS 9,8Kavram kanıtıEPSS %11
- Kimlik doğrulamasız
- Bellek hatası
qemu · qemu27 Tem 2018
CVE-2018-14767
48Planlayın
In Kamailio before 5.0.7 and 5.1.x before 5.1.4, a crafted SIP message with a double "To" header and an empty "To" tag causes a segmentation
KritikCVSS 9,8İstismar yokEPSS %29
- Girişsiz RCE
kamailio · kamailio31 Tem 2018