Top 10 Vulnerabilities
The Top 10 External and Top 10 Internal Vulnerabilities are dynamic lists of the most prevalent and critical security vulnerabilities in the real world. Based on the Laws of Vulnerabilities, this information is computed anonymously from over 200 million IP audits per year. The Top 10 External Vulnerabilities are the most prevalent and critical vulnerabilities which have been identified on Internet facing systems. The Top 10 Internal Vulnerabilities show this information for systems and networks inside the firewall.
The two Top 10 lists exclude vulnerabilities that do not have patches, even if workarounds are available, because these lists are tools to help prioritize remediation.
Top 10 Internal Vulnerabilities: November 2011
| Title | QualysID | Ext. Reference |
|---|---|---|
| Microsoft Internet Explorer Cumulative Security Update (MS11-057) |
100105 | MS11-057 |
| Oracle Java SE Critical Patch Update - June 2011 |
119319 | Oracle JAVA CPU JUN201 |
| Microsoft Windows Fax Cover Page Editor Remote Code Execution Vulnerability (MS11-024) |
90675 | MS11-024 |
| Microsoft Windows SMB Client Remote Code Execution (MS11-043) |
90707 | MS11-043 |
| Microsoft OLE Automation Remote Code Execution Vulnerability (MS11-038) |
90709 | MS11-038 |
| Microsoft Windows Kernel Mode Drivers Elevation of Privilege (MS11-054) |
90718 | MS11-054 |
| Microsoft Windows Client/Server Run-time Subsystem Elevation of Privilege Vulnerability (MS11-063) |
90721 | MS11-063 |
| Microsoft Windows Kernel Elevation of Privilege Vulnerabilities (MS11-011) |
90659 | MS11-011 |
| Microsoft Distributed File System Remote Code Execution Vulnerability (MS11-042) |
90706 | MS11-042 |
| Microsoft MHTML Information Disclosure Vulnerability (MS11-037) |
90713 | MS11-037 |
Top 10 External Vulnerabilities: November 2011
| Title | QualysID | Ext. Reference |
|---|---|---|
| SSL Server Allows Anonymous Authentication Vulnerability |
38142 | N/A |
| EOL/Obsolete Operating System : Microsoft Windows 2000 Detected |
105359 | N/A |
| PHP "spl_object_storage_attach" Use-After-Free Vulnerability |
12378 | N/A |
| SSH Protocol Version 1 Supported |
38304 | N/A |
| Internet Information Services (IIS) Could Allow Elevation of Privilege (MS09-020) |
86837 | MS09-020 |
| Cisco IOS Telnet Service Remote Denial of Service Vulnerability |
38308 | cisco-sa-20040827-telnet |
| Microsoft SMB Remote Code Execution Vulnerability (MS09-001) |
90477 | MS09-001 |
| Microsoft Windows Server Service Could Allow Remote Code Execution (MS08-067) |
90464 | MS08-06 |
| JBoss Application Server Web Console and JMX Management Console Authentication Bypass Vulnerability |
86882 | N/A |
| Remote User List Disclosure Using NetBIOS |
45003 | N/A |
