İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2020: sömürülen ve yeni ciddi CVE kayıtları

119 kayıt · 7 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 2

  • CVE-2013-1602
    35İzleyin

    An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    dlink · dcs-3411 firmware28 Oca 2020

  • CVE-2013-1603
    26İzleyin

    An Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO DCS-2102 1.05_TESCO, DCS-7510 1.00, DCS-741

    OrtaCVSS 5,3Kavram kanıtıEPSS %16

    dlink · dcs-3411 firmware28 Oca 2020

  • CVE-2019-20215
    62Bu hafta

    D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in

    KritikCVSS 9,8SilahlaştırılmışEPSS %75

    dlink · dir-859 firmware28 Oca 2020

  • CVE-2020-7247
    99Hemen

    smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary co

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    openbsd · opensmtpd29 Oca 2020

  • CVE-2013-2567
    34İzleyin

    An Authentication Bypass vulnerability exists in the web interface in Zavio IP Cameras through 1.6.03 due to a hardcoded admin account found

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    zavio · f3105 firmware29 Oca 2020

  • CVE-2020-8416
    34İzleyin

    IKTeam BearFTP before 0.2.0 allows remote attackers to achieve denial of service via a large volume of connections to the PASV mode port.

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    iktm · bearftp29 Oca 2020

  • CVE-2013-2568
    54Planlayın

    A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wireless_mft.cgi, which coul

    KritikCVSS 9,8Kavram kanıtıEPSS %48

    zavio · f3105 firmware29 Oca 2020

  • CVE-2013-2569
    39İzleyin

    A Security Bypass vulnerability exists in Zavio IP Cameras through 1.6.3 because the RTSP protocol authentication is disabled by default, wh

    YüksekCVSS 7,5Kavram kanıtıEPSS %30

    zavio · f3105 firmware29 Oca 2020

  • CVE-2013-2570
    47Planlayın

    A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 in the General.Time.NTP.Server parameter to the sub_C8C8 function

    KritikCVSS 9,8Kavram kanıtıEPSS %26

    zavio · f3105 firmware29 Oca 2020

  • CVE-2013-3215
    60Bu hafta

    vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession

    KritikCVSS 9,8SilahlaştırılmışEPSS %68

    vtiger · vtiger crm29 Oca 2020

  • CVE-2019-18634
    37İzleyin

    In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo proc

    YüksekCVSS 7,8Kavram kanıtıEPSS %19

    sudo project · sudo29 Oca 2020

  • CVE-2013-2572
    35İzleyin

    A Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G, 4171G, and 3130 1.6.18P12 due to default hard-c

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    tp-link · tl-sc 3130 firmware29 Oca 2020

  • CVE-2013-2573
    52Planlayın

    A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wireless_mft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-

    KritikCVSS 9,8Kavram kanıtıEPSS %42

    tp-link · tl-sc 3130g firmware29 Oca 2020

  • CVE-2013-2574
    39İzleyin

    An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, whic

    YüksekCVSS 7,5Kavram kanıtıEPSS %29

    foscam · fi8620 firmware29 Oca 2020

  • CVE-2020-3716
    43Planlayın

    Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a deserialization of untrusted da

    KritikCVSS 9,8İstismar yokEPSS %13

    magento · magento29 Oca 2020

  • CVE-2019-20445
    40Planlayın

    HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Tr

    KritikCVSS 9,1İstismar yokEPSS %13

    netty · netty29 Oca 2020

  • CVE-2013-0291
    35İzleyin

    NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    imagely · nextgen gallery30 Oca 2020

  • CVE-2014-8322
    46Planlayın

    Stack-based buffer overflow in the tcp_test function in aireplay-ng.c in Aircrack-ng before 1.2 RC 1 allows remote attackers to execute arbi

    KritikCVSS 9,8Kavram kanıtıEPSS %23

    aircrack-ng · aircrack-ng31 Oca 2020

  • CVE-2020-8512
    28İzleyin

    In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.

    OrtaCVSS 6,1Kavram kanıtıEPSS %14

    icewarp · icewarp server31 Oca 2020