İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2020: sömürülen ve yeni ciddi CVE kayıtları

70 kayıt · 10 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2020-3657
    48Planlayın

    u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client th

    KritikCVSS 9,8İstismar yokEPSS %28

    qualcomm · apq8009 firmware2 Kas 2020

  • CVE-2020-14425
    40Planlayın

    Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API.

    YüksekCVSS 7,8Kavram kanıtıEPSS %31

    foxitsoftware · foxit reader2 Kas 2020

  • CVE-2020-14750
    99Hemen

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    oracle · weblogic server2 Kas 2020

  • CVE-2020-24881
    61Bu hafta

    SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.

    KritikCVSS 9,8Kavram kanıtıEPSS %73

    enhancesoft · osticket2 Kas 2020

  • CVE-2020-28032
    44Planlayın

    WordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility/FilteredIterator.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    wordpress · wordpress2 Kas 2020

  • CVE-2020-15994
    39İzleyin

    Use after free in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted H

    YüksekCVSS 8,8İstismar yokEPSS %13

    google · chrome2 Kas 2020

  • CVE-2020-15999
    87Hemen

    Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption vi

    KritikCVSS 9,6KEVSilahlaştırılmışEPSS %63

    google · chrome2 Kas 2020

  • CVE-2020-16009
    79Bu hafta

    Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %48

    google · chrome2 Kas 2020

  • CVE-2020-16010
    70Bu hafta

    Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer pro

    KritikCVSS 9,6KEVSilahlaştırılmışEPSS %6

    google · chrome2 Kas 2020

  • CVE-2020-27387
    41Planlayın

    An unrestricted file upload issue in HorizontCMS through 1.0.0-beta allows an authenticated remote attacker (with access to the FileManager)

    YüksekCVSS 8,8SilahlaştırılmışEPSS %18

    horizontcms project · horizontcms4 Kas 2020

  • CVE-2020-27955
    64Bu hafta

    Git LFS 2.12.0 allows Remote Code Execution.

    KritikCVSS 9,8SilahlaştırılmışEPSS %82

    git large file storage project · git large file storage5 Kas 2020

  • CVE-2020-12146
    43Planlayın

    Silver Peak Unity OrchestratorTM subject to path traversal.

    YüksekCVSS 8,8İstismar yokEPSS %27

    silver-peak · unity orchestrator5 Kas 2020

  • CVE-2020-24430
    37İzleyin

    Acrobat Pro DC Use-After-Free vulnerability Could Lead to Arbitrary Code Execution

    YüksekCVSS 7,8İstismar yokEPSS %18

    adobe · acrobat5 Kas 2020

  • CVE-2020-24432
    34İzleyin

    Acrobat Reader DC Arbitrary JavaScript Execution in PDF Documents

    YüksekCVSS 7,8İstismar yokEPSS %11

    adobe · acrobat5 Kas 2020

  • CVE-2020-24433
    36İzleyin

    Adobe Acrobat Reader DC Local Privilege Escalation via Installer Component

    YüksekCVSS 7,8İstismar yokEPSS %15

    adobe · acrobat5 Kas 2020

  • CVE-2020-24435
    47Planlayın

    Acrobat Reader DC Heap-based Buffer Overflow Could Lead to Arbitrary Code Execution

    YüksekCVSS 7,8İstismar yokEPSS %52

    adobe · acrobat5 Kas 2020

  • CVE-2020-24436
    36İzleyin

    Acrobat Pro DC PDF Export Out-Of-Bounds Write Vulnerability Could Lead to Arbitrary Code Execution

    YüksekCVSS 7,8İstismar yokEPSS %17

    adobe · acrobat5 Kas 2020

  • CVE-2020-24437
    45Planlayın

    Acrobat Reader DC Use-After-Free Vulnerability Could Lead to Arbitrary Code Execution

    YüksekCVSS 7,8İstismar yokEPSS %46

    adobe · acrobat5 Kas 2020

  • CVE-2020-16846
    99Hemen

    An issue was discovered in SaltStack Salt through 3002.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    saltstack · salt6 Kas 2020

  • CVE-2020-25592
    56Planlayın

    In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens.

    KritikCVSS 9,8SilahlaştırılmışEPSS %56

    saltstack · salt6 Kas 2020

  • CVE-2020-26214
    59Planlayın

    LDAP authentication bypass in Alerta

    KritikCVSS 9,8Kavram kanıtıEPSS %65

    alerta project · alerta6 Kas 2020

  • CVE-2020-27128
    44Planlayın

    Cisco SD-WAN vManage Software Arbitrary File Creation Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %60

    cisco · sd-wan6 Kas 2020

  • CVE-2020-28328
    54Planlayın

    SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %63

    salesagility · suitecrm6 Kas 2020

  • CVE-2020-28347
    62Bu hafta

    tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slave_mac parameter.

    KritikCVSS 9,8SilahlaştırılmışEPSS %75

    tp-link · ac1750 firmware8 Kas 2020

  • CVE-2020-28351
    29İzleyin

    The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an unauthenticated attacker to conduct a reflected cross-site

    OrtaCVSS 6,1Kavram kanıtıEPSS %15

    mitel · shoretel firmware9 Kas 2020

  • CVE-2020-27019
    27İzleyin

    Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulnerability which could

    OrtaCVSS 5,5İstismar yokEPSS %17

    trendmicro · interscan messaging security virtual appliance9 Kas 2020

  • CVE-2020-13927
    99Hemen

    The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security ri

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · airflow10 Kas 2020

  • CVE-2020-17047
    38İzleyin

    Windows Network File System Denial of Service Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %27

    microsoft · windows 1011 Kas 2020

  • CVE-2020-17049
    30İzleyin

    Kerberos KDC Security Feature Bypass Vulnerability

    OrtaCVSS 6,6İstismar yokEPSS %13

    microsoft · windows server 201211 Kas 2020

  • CVE-2020-17051
    42Planlayın

    Windows Network File System Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %10

    microsoft · windows server 200811 Kas 2020

  • CVE-2020-17083
    26İzleyin

    Microsoft Exchange Server Remote Code Execution Vulnerability

    OrtaCVSS 5,5İstismar yokEPSS %11

    microsoft · exchange server11 Kas 2020

  • CVE-2020-17087
    63Bu hafta

    Windows Kernel Local Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %5

    microsoft · windows 10 150711 Kas 2020

  • CVE-2020-1599
    28İzleyin

    Windows Spoofing Vulnerability

    OrtaCVSS 5,5İstismar yokEPSS %19

    microsoft · windows 1011 Kas 2020

  • CVE-2020-13954
    36İzleyin

    Apache CXF Reflected XSS in the services listing page via the styleSheetPath

    OrtaCVSS 6,1İstismar yokEPSS %40

    apache · cxf12 Kas 2020

  • CVE-2020-27481
    42Planlayın

    An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_nopriv" call in WordPr

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    goodlayers · good learning management system12 Kas 2020

  • CVE-2019-17566
    33İzleyin

    Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes.

    YüksekCVSS 7,5İstismar yokEPSS %10

    apache · batik12 Kas 2020

  • CVE-2020-27386
    57Planlayın

    An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary fil

    YüksekCVSS 8,8SilahlaştırılmışEPSS %72

    flexdotnetcms project · flexdotnetcms12 Kas 2020

  • CVE-2020-24719
    46Planlayın

    Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack.

    KritikCVSS 9,8SilahlaştırılmışEPSS %23

    couchbase · couchbase server12 Kas 2020

  • CVE-2020-13638
    62Bu hafta

    lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation.

    KritikCVSS 9,8Kavram kanıtıEPSS %76

    rconfig · rconfig13 Kas 2020

  • CVE-2020-25695
    49Planlayın

    A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24.

    YüksekCVSS 8,8İstismar yokEPSS %46

    postgresql · postgresql15 Kas 2020

  • CVE-2020-8271
    42Planlayın

    Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8

    KritikCVSS 9,8İstismar yokEPSS %11

    citrix · sd-wan15 Kas 2020

  • CVE-2020-27988
    48Planlayın

    Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users (Username field).

    OrtaCVSS 5,4İstismar yokEPSS %91

    nagios · nagios xi16 Kas 2020

  • CVE-2020-27989
    31İzleyin

    Nagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools (Edit Dashboard).

    OrtaCVSS 5,4İstismar yokEPSS %34

    nagios · nagios xi16 Kas 2020

  • CVE-2020-27990
    31İzleyin

    Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool (add agent).

    OrtaCVSS 5,4İstismar yokEPSS %34

    nagios · nagios xi16 Kas 2020

  • CVE-2020-27991
    31İzleyin

    Nagios XI before 5.7.5 is vulnerable to XSS in Account Information (Email field).

    OrtaCVSS 5,4İstismar yokEPSS %34

    nagios · nagios xi16 Kas 2020

  • CVE-2020-26217
    61Bu hafta

    Remote Code Execution in XStream

    YüksekCVSS 8,8Kavram kanıtıEPSS %85

    xstream · xstream16 Kas 2020

  • CVE-2020-27130
    56Planlayın

    Cisco Security Manager Path Traversal Vulnerability

    KritikCVSS 9,1İstismar yokEPSS %65

    cisco · security manager17 Kas 2020

  • CVE-2020-27131
    65Bu hafta

    Cisco Security Manager Java Deserialization Vulnerabilities

    KritikCVSS 9,8İstismar yokEPSS %87

    cisco · security manager17 Kas 2020

  • CVE-2020-7774
    60Bu hafta

    The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.

    KritikCVSS 9,8İstismar yokEPSS %69

    y18n project · y18n17 Kas 2020

  • CVE-2020-28687
    39İzleyin

    The edit profile functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    artworks gallery in php\, css\, javascript\, and mysql project · artworks gallery in php\, css\, javascript\, and mysql17 Kas 2020

  • CVE-2020-28688
    39İzleyin

    The add artwork functionality in ARTWORKS GALLERY IN PHP, CSS, JAVASCRIPT, AND MYSQL 1.0 allows remote attackers to upload arbitrary files.

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    artworks gallery in php\, css\, javascript\, and mysql project · artworks gallery in php\, css\, javascript\, and mysql17 Kas 2020

  • CVE-2020-28578
    61Bu hafta

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a sp

    KritikCVSS 9,8İstismar yokEPSS %73

    trendmicro · interscan web security virtual appliance18 Kas 2020

  • CVE-2020-28579
    50Planlayın

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send a spec

    YüksekCVSS 8,8İstismar yokEPSS %50

    trendmicro · interscan web security virtual appliance18 Kas 2020

  • CVE-2020-28580
    41Planlayın

    A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticate

    YüksekCVSS 7,2İstismar yokEPSS %44

    trendmicro · interscan web security virtual appliance18 Kas 2020

  • CVE-2020-28581
    41Planlayın

    A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authentic

    YüksekCVSS 7,2İstismar yokEPSS %44

    trendmicro · interscan web security virtual appliance18 Kas 2020

  • CVE-2020-8277
    46Planlayın

    A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versi

    YüksekCVSS 7,5Kavram kanıtıEPSS %54

    nodejs · node.js18 Kas 2020

  • CVE-2019-20933
    48Planlayın

    InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT tok

    KritikCVSS 9,8Kavram kanıtıEPSS %30

    influxdata · influxdb18 Kas 2020

  • CVE-2020-28948
    45Planlayın

    Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

    YüksekCVSS 7,8Kavram kanıtıEPSS %47

    php · archive tar19 Kas 2020

  • CVE-2020-28949
    86Hemen

    Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as fil

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %84

    php · archive tar19 Kas 2020

  • CVE-2020-13671
    76Bu hafta

    Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect exten

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %36

    drupal · drupal20 Kas 2020

  • CVE-2020-4006
    71Bu hafta

    VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerabili

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %17

    vmware · identity manager23 Kas 2020

  • CVE-2020-3984
    33İzleyin

    The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-inject

    OrtaCVSS 6,5İstismar yokEPSS %22

    vmware · sd-wan orchestrator24 Kas 2020

  • CVE-2020-4000
    48Planlayın

    The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing files through directory

    YüksekCVSS 8,8İstismar yokEPSS %43

    vmware · sd-wan orchestrator24 Kas 2020

  • CVE-2020-13942
    59Planlayın

    Remote Code Execution in Apache Unomi

    KritikCVSS 9,8Kavram kanıtıEPSS %68

    apache · unomi24 Kas 2020

  • CVE-2020-28976
    29İzleyin

    The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability.

    OrtaCVSS 5,3Kavram kanıtıEPSS %27

    canto · canto30 Kas 2020

  • CVE-2020-28977
    26İzleyin

    The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability.

    OrtaCVSS 5,3Kavram kanıtıEPSS %15

    canto · canto30 Kas 2020

  • CVE-2020-28978
    26İzleyin

    The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability.

    OrtaCVSS 5,3Kavram kanıtıEPSS %15

    canto · canto30 Kas 2020

  • CVE-2020-28926
    43Planlayın

    ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution.

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    readymedia project · readymedia30 Kas 2020

  • CVE-2020-29390
    51Planlayın

    Zeroshell 3.9.3 contains a command injection vulnerability in the /cgi-bin/kerbynet StartSessionSubmit parameter that could allow an unauthe

    KritikCVSS 9,8Kavram kanıtıEPSS %39

    zeroshell · zeroshell30 Kas 2020

  • CVE-2020-29395
    28İzleyin

    The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the search field.

    OrtaCVSS 6,1Kavram kanıtıEPSS %12

    myeventon · eventon30 Kas 2020