İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2018: sömürülen ve yeni ciddi CVE kayıtları

121 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 2

  • CVE-2018-12814
    42Planlayın

    Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %11

    adobe · digital editions17 Eki 2018

  • CVE-2018-12386
    36İzleyin

    A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write.

    YüksekCVSS 8,1Kavram kanıtıEPSS %13

    redhat · enterprise linux desktop18 Eki 2018

  • CVE-2015-4632
    46Planlayın

    Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before

    YüksekCVSS 7,5Kavram kanıtıEPSS %51

    koha · koha18 Eki 2018

  • CVE-2018-18284
    39İzleyin

    Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving the 1Policy operator.

    YüksekCVSS 8,6İstismar yokEPSS %16

    artifex · ghostscript19 Eki 2018

  • CVE-2018-18428
    33İzleyin

    TP-Link TL-SC3130 1.6.18P12_121101 devices allow unauthenticated RTSP stream access, as demonstrated by a /jpg/image.jpg URI.

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    tp-link · tl-sc3130 firmware19 Eki 2018

  • CVE-2018-18557
    39İzleyin

    LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta,

    YüksekCVSS 8,8Kavram kanıtıEPSS %14

    libtiff · libtiff22 Eki 2018

  • CVE-2018-15704
    41Planlayın

    Advantech WebAccess 8.3.2 and below is vulnerable to a stack buffer overflow vulnerability.

    YüksekCVSS 8,8İstismar yokEPSS %21

    advantech · webaccess22 Eki 2018

  • CVE-2018-8569
    35İzleyin

    A remote code execution vulnerability exists in the Yammer desktop application due to the loading of arbitrary content, aka "Yammer Desktop

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · yammer23 Eki 2018

  • CVE-2017-18349
    51Planlayın

    parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbi

    KritikCVSS 9,8Kavram kanıtıEPSS %39

    pippo · pippo23 Eki 2018

  • CVE-2018-17445
    42Planlayın

    A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

    KritikCVSS 9,8İstismar yokEPSS %11

    citrix · netscaler sd-wan23 Eki 2018

  • CVE-2018-18475
    45Planlayın

    Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload.

    KritikCVSS 9,8İstismar yokEPSS %20

    zohocorp · manageengine opmanager23 Eki 2018

  • CVE-2018-15442
    40Planlayın

    Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

    YüksekCVSS 7,8SilahlaştırılmışEPSS %16

    cisco · webex meetings desktop24 Eki 2018

  • CVE-2018-3971
    31İzleyin

    An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744.

    YüksekCVSS 7,8İstismar yokEPSS %0

    sophos · hitmanpro.alert25 Eki 2018

  • CVE-2018-14665
    40Planlayın

    A flaw was found in xorg-x11-server before 1.20.3.

    OrtaCVSS 6,6SilahlaştırılmışEPSS %27

    x.org · x server25 Eki 2018

  • CVE-2018-18778
    47Planlayın

    ACME mini_httpd before 1.30 lets remote users read arbitrary files.

    OrtaCVSS 6,5Kavram kanıtıEPSS %70

    acme · mini-httpd29 Eki 2018

  • CVE-2018-0734
    27İzleyin

    Timing attack against DSA

    OrtaCVSS 5,9İstismar yokEPSS %12

    openssl · openssl30 Eki 2018

  • CVE-2018-14558
    72Bu hafta

    An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %8

    tenda · ac7 firmware30 Eki 2018

  • CVE-2018-18850
    40Planlayın

    In Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1, an authenticated user with permission to modify deployment processes could uplo

    YüksekCVSS 8,8SilahlaştırılmışEPSS %12

    octopus · octopus server30 Eki 2018

  • CVE-2018-11759
    57Planlayın

    The Apache Web Server (httpd) specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK

    YüksekCVSS 7,5Kavram kanıtıEPSS %90

    apache · tomcat jk connector31 Eki 2018

  • CVE-2018-15705
    30İzleyin

    WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any file on the filesyste

    OrtaCVSS 6,5Kavram kanıtıEPSS %12

    advantech · webaccess31 Eki 2018

  • CVE-2018-15706
    36İzleyin

    WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to read any file on the filesystem due to a dir

    OrtaCVSS 6,5İstismar yokEPSS %32

    advantech · webaccess31 Eki 2018