Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: January 2017

71 records · 3 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2016-10105
    40Plan

    admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files.

    CriticalCVSS 9.8No exploitEPSS 2%

    piwigo · piwigoJan 3, 2017

  • CVE-2016-10107
    42Plan

    Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie hea

    CriticalCVSS 9.8No exploitEPSS 11%

    western digital · mycloud nasJan 3, 2017

  • CVE-2016-10108
    68This week

    Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modi

    CriticalCVSS 9.8WeaponizedEPSS 97%

    western digital · mycloud nasJan 3, 2017

  • CVE-2016-10009
    40Plan

    Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKC

    HighCVSS 7.3Proof of conceptEPSS 37%

    openbsd · opensshJan 4, 2017

  • CVE-2016-8334
    19Monitor

    A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure.

    LowCVSS 3.3No exploitEPSS 18%

    foxitsoftware · readerJan 6, 2017

  • CVE-2016-8704
    46Plan

    An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcac

    CriticalCVSS 9.8No exploitEPSS 23%

    memcached · memcachedJan 6, 2017

  • CVE-2016-8705
    45Plan

    Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached b

    CriticalCVSS 9.8No exploitEPSS 19%

    memcached · memcachedJan 6, 2017

  • CVE-2016-8706
    46Plan

    An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary pro

    HighCVSS 8.1Proof of conceptEPSS 45%

    memcached · memcachedJan 6, 2017

  • CVE-2017-0002
    39Monitor

    Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Micro

    HighCVSS 8.8No exploitEPSS 14%

    microsoft · edgeJan 10, 2017

  • CVE-2017-0003
    38Monitor

    Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Micr

    HighCVSS 7.8No exploitEPSS 24%

    microsoft · sharepoint enterprise serverJan 10, 2017

  • CVE-2017-0004
    57Plan

    The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1

    HighCVSS 7.5No exploitEPSS 91%

    microsoft · windows 7Jan 10, 2017

  • CVE-2017-2930
    43Plan

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurrency error when manip

    HighCVSS 8.8Proof of conceptEPSS 25%

    adobe · flash playerJan 11, 2017

  • CVE-2017-2931
    41Plan

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the parsing of SWF metadat

    HighCVSS 8.8Proof of conceptEPSS 21%

    adobe · flash playerJan 11, 2017

  • CVE-2017-2932
    42Plan

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript MovieClip class.

    HighCVSS 8.8Proof of conceptEPSS 24%

    adobe · flash playerJan 11, 2017

  • CVE-2017-2933
    44Plan

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture compression.

    HighCVSS 8.8Proof of conceptEPSS 29%

    adobe · flash playerJan 11, 2017

  • CVE-2017-2934
    44Plan

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when parsing Adobe Texture Format files.

    HighCVSS 8.8Proof of conceptEPSS 29%

    adobe · flash playerJan 11, 2017

  • CVE-2017-2935
    44Plan

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the Flash Video container

    HighCVSS 8.8Proof of conceptEPSS 29%

    adobe · flash playerJan 11, 2017

  • CVE-2017-2946
    38Monitor

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vuln

    HighCVSS 7.8No exploitEPSS 24%

    adobe · acrobatJan 11, 2017

  • CVE-2017-2949
    37Monitor

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vuln

    HighCVSS 7.8No exploitEPSS 20%

    adobe · acrobatJan 11, 2017

  • CVE-2017-2959
    34Monitor

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vuln

    HighCVSS 7.8No exploitEPSS 11%

    adobe · acrobatJan 11, 2017

  • CVE-2017-2960
    37Monitor

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption

    HighCVSS 7.8No exploitEPSS 18%

    adobe · acrobatJan 11, 2017

  • CVE-2017-2966
    34Monitor

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vuln

    HighCVSS 7.8No exploitEPSS 10%

    adobe · acrobatJan 11, 2017

  • CVE-2016-7478
    43Plan

    Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infin

    HighCVSS 7.5No exploitEPSS 42%

    php · phpJan 11, 2017

  • CVE-2017-5340
    44Plan

    Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows rem

    CriticalCVSS 9.8No exploitEPSS 16%

    php · phpJan 11, 2017

  • CVE-2016-7480
    51Plan

    The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, whic

    CriticalCVSS 9.8No exploitEPSS 41%

    php · phpJan 11, 2017

  • CVE-2016-4806
    33Monitor

    Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access w

    HighCVSS 7.5Proof of conceptEPSS 10%

    web2py · web2pyJan 11, 2017

  • CVE-2016-7479
    52Plan

    In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-af

    CriticalCVSS 9.8No exploitEPSS 41%

    php · phpJan 11, 2017

  • CVE-2016-9131
    42Plan

    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of ser

    HighCVSS 7.5No exploitEPSS 40%

    isc · bindJan 12, 2017

  • CVE-2016-9147
    37Monitor

    named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and d

    HighCVSS 7.5No exploitEPSS 24%

    isc · bindJan 12, 2017

  • CVE-2016-9444
    35Monitor

    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of ser

    HighCVSS 7.5No exploitEPSS 18%

    isc · bindJan 12, 2017

  • CVE-2016-9299
    68This week

    The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized

    CriticalCVSS 9.8WeaponizedEPSS 96%

    jenkins · jenkinsJan 12, 2017

  • CVE-2015-3188
    43Plan

    The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecified vectors.

    CriticalCVSS 9.8No exploitEPSS 14%

    apache · stormJan 13, 2017

  • CVE-2016-7426
    34Monitor

    NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allo

    HighCVSS 7.5No exploitEPSS 12%

    ntp · ntpJan 13, 2017

  • CVE-2016-7434
    46Plan

    The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.

    HighCVSS 7.5Proof of conceptEPSS 53%

    ntp · ntpJan 13, 2017

  • CVE-2016-9310
    29Monitor

    The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mo

    MediumCVSS 6.5No exploitEPSS 11%

    ntp · ntpJan 13, 2017

  • CVE-2016-9311
    26Monitor

    ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference

    MediumCVSS 5.9No exploitEPSS 11%

    ntp · ntpJan 13, 2017

  • CVE-2016-9312
    40Plan

    ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of service via a large UDP packet.

    HighCVSS 7.5No exploitEPSS 31%

    ntp · ntpJan 13, 2017

  • CVE-2016-8205
    43Plan

    A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 1

    CriticalCVSS 9.8No exploitEPSS 13%

    brocade · network advisorJan 14, 2017

  • CVE-2016-8206
    34Monitor

    A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 1

    HighCVSS 7.5No exploitEPSS 14%

    brocade · network advisorJan 14, 2017

  • CVE-2016-8207
    35Monitor

    A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.

    HighCVSS 7.5No exploitEPSS 15%

    brocade · network advisorJan 14, 2017

  • CVE-2017-5487
    47Plan

    wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not prop

    MediumCVSS 5.3Proof of conceptEPSS 87%

    wordpress · wordpressJan 14, 2017

  • CVE-2017-5521
    89Now

    An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R80

    HighCVSS 8.1KEVWeaponizedEPSS 89%

    netgear · r6200 firmwareJan 17, 2017

  • CVE-2016-2233
    40Plan

    Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial

    HighCVSS 7.5Proof of conceptEPSS 34%

    hexchat project · hexchatJan 18, 2017

  • CVE-2016-7982
    36Monitor

    Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on

    HighCVSS 7.5Proof of conceptEPSS 20%

    spip · spipJan 18, 2017

  • CVE-2016-7998
    39Monitor

    The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading a

    HighCVSS 8.8Proof of conceptEPSS 13%

    spip · spipJan 18, 2017

  • CVE-2016-6896
    39Monitor

    Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remo

    HighCVSS 7.1Proof of conceptEPSS 38%

    wordpress · wordpressJan 18, 2017

  • CVE-2016-6897
    60This week

    Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress bef

    MediumCVSS 6.5WeaponizedEPSS 28%

    wordpress · wordpressJan 18, 2017

  • CVE-2016-5198
    75This week

    V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect o

    HighCVSS 8.8KEVWeaponizedEPSS 34%

    google · chromeJan 19, 2017

  • CVE-2016-5725
    30Monitor

    Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP server

    MediumCVSS 5.9Proof of conceptEPSS 24%

    jcraft · jschJan 19, 2017

  • CVE-2016-6253
    40Plan

    mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbi

    HighCVSS 7.8WeaponizedEPSS 3%

    netbsd · netbsdJan 20, 2017

  • CVE-2016-4010
    67This week

    Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted

    CriticalCVSS 9.8WeaponizedEPSS 92%

    magento · magentoJan 23, 2017

  • CVE-2016-4338
    38Monitor

    The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.

    HighCVSS 8.1Proof of conceptEPSS 21%

    zabbix · zabbixJan 23, 2017

  • CVE-2016-4340
    38Monitor

    The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8.3.8, and 8.2.0 thro

    HighCVSS 8.8Proof of conceptEPSS 10%

    gitlab · gitlabJan 23, 2017

  • CVE-2016-6600
    66This week

    Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to uploa

    CriticalCVSS 9.8WeaponizedEPSS 90%

    zohocorp · webnms frameworkJan 23, 2017

  • CVE-2016-6601
    60This week

    Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to rea

    HighCVSS 7.5WeaponizedEPSS 97%

    zohocorp · webnms frameworkJan 23, 2017

  • CVE-2016-6602
    60This week

    ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtai

    CriticalCVSS 9.8WeaponizedEPSS 55%

    zohocorp · webnms frameworkJan 23, 2017

  • CVE-2016-6603
    65This week

    ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP

    CriticalCVSS 9.8Proof of conceptEPSS 86%

    zohocorp · webnms frameworkJan 23, 2017

  • CVE-2016-7567
    43Plan

    Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    openslp · openslpJan 23, 2017

  • CVE-2017-5495
    36Monitor

    All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of

    HighCVSS 7.5No exploitEPSS 18%

    quagga · quaggaJan 24, 2017

  • CVE-2016-10161
    34Monitor

    The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remo

    HighCVSS 7.5No exploitEPSS 13%

    php · phpJan 24, 2017

  • CVE-2017-3241
    46Plan

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI).

    CriticalCVSS 9.0Proof of conceptEPSS 32%

    oracle · jdkJan 27, 2017

  • CVE-2017-3248
    68This week

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components).

    CriticalCVSS 9.8WeaponizedEPSS 97%

    oracle · weblogic serverJan 27, 2017

  • CVE-2016-9553
    34Monitor

    The Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection vulnerabilities affecting its web administrative in

    HighCVSS 7.2Proof of conceptEPSS 19%

    sophos · web applianceJan 28, 2017

  • CVE-2016-9554
    36Monitor

    The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in i

    HighCVSS 7.2Proof of conceptEPSS 25%

    sophos · web applianceJan 28, 2017

  • CVE-2016-10174
    94Now

    The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html.

    CriticalCVSS 9.8KEVWeaponizedEPSS 83%

    netgear · d6100 firmwareJan 30, 2017

  • CVE-2016-10175
    60This week

    The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI.

    CriticalCVSS 9.8WeaponizedEPSS 65%

    netgear · wnr2000v5 firmwareJan 30, 2017

  • CVE-2016-10176
    62This week

    The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the dev

    CriticalCVSS 9.8WeaponizedEPSS 77%

    netgear · wnr2000v5 firmwareJan 30, 2017

  • CVE-2017-5611
    42Plan

    SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbit

    CriticalCVSS 9.8No exploitEPSS 10%

    wordpress · wordpressJan 30, 2017

  • CVE-2015-7979
    34Monitor

    NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sen

    HighCVSS 7.5No exploitEPSS 11%

    ntp · ntpJan 30, 2017

  • CVE-2016-2518
    26Monitor

    The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference v

    MediumCVSS 5.3No exploitEPSS 15%

    ntp · ntpJan 30, 2017

  • CVE-2016-6267
    51Plan

    SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authe

    HighCVSS 8.8WeaponizedEPSS 54%

    trendmicro · smart protection serverJan 30, 2017