Top 10 Vulnerabilities
The Top 20 external and internal vulnerabilities are dynamic lists of the most prevalent and critical security vulnerabilities in the real world. Based on the "Laws of Vulnerabilities", this information is computed anonymously from over 200 million IP audits per year. The Top 10 External Vulnerabilities are the most prevalent and critical vulnerabilities which have been identified on Internet facing systems. The Top 10 Internal Vulnerabilities show this information for systems and networks inside organization's firewalls.
The Top 20 excludes vulnerabilities that do not have patches. Although such vulnerabilities may have a workaround they were excluded as there is no fix from the vendor.
Top 10 Internal Vulnerabilities: November 2011
| Title | QualysID | CVE Reference | Ext. Reference |
|---|---|---|---|
| Microsoft Internet Explorer Cumulative Security Update (MS11-057) | 100105 | MS11-057 | |
| Oracle Java SE Critical Patch Update - June 2011 | 119319 | Oracle JAVA CPU JUN201 | |
| Microsoft Windows Fax Cover Page Editor Remote Code Execution Vulnerability (MS11-024)) | 90675 | MS11-024 | |
| Microsoft Windows SMB Client Remote Code Execution (MS11-043) | 90707 | MS11-043 | |
| Microsoft OLE Automation Remote Code Execution Vulnerability (MS11-038) | 90709 | MS11-038 | |
| Microsoft Windows Kernel Mode Drivers Elevation of Privilege (MS11-054) | 90718 | MS11-054 | |
| Microsoft Windows Client/Server Run-time Subsystem Elevation of Privilege Vulnerability (MS11-063) | 90721 | MS11-063 | |
| Microsoft Windows Kernel Elevation of Privilege Vulnerabilities (MS11-011) | 90659 | MS11-011 | |
| Microsoft Distributed File System Remote Code Execution Vulnerability (MS11-042) | 90706 | MS11-042 | |
| Microsoft MHTML Information Disclosure Vulnerability (MS11-037) | 90713 | MS11-037 |
Top 10 External Vulnerabilities: November 2011
| Title | QualysID | CVE Reference | Ext. Reference |
|---|---|---|---|
| SSL Server Allows Anonymous Authentication Vulnerability | 38142 | N/A | |
| EOL/Obsolete Operating System : Microsoft Windows 2000 Detected | 105359 | N/A | |
| PHP "spl_object_storage_attach" Use-After-Free Vulnerability | 12378 | N/A | |
| SSH Protocol Version 1 Supported | 38304 | N/A | |
| Internet Information Services (IIS) Could Allow Elevation of Privilege (MS09-020) | 86837 | MS09-020 | |
| Cisco IOS Telnet Service Remote Denial of Service Vulnerability | 38308 | cisco-sa-20040827-telnet | |
| Microsoft SMB Remote Code Execution Vulnerability (MS09-001) | 90477 | MS09-001 | |
| Microsoft Windows Server Service Could Allow Remote Code Execution (MS08-067) | 90464 | MS08-06 | |
| JBoss Application Server Web Console and JMX Management Console Authentication Bypass Vulnerability | 86882 | N/A | |
| Remote User List Disclosure Using NetBIOS | 45003 | N/A |
