Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: February 2017

41 records · 2 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2017-3823
    60This week

    An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on M

    HighCVSS 8.8WeaponizedEPSS 27%

    cisco · activetouch general plugin containerFeb 1, 2017

  • CVE-2017-5630
    34Monitor

    PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect,

    HighCVSS 7.5Proof of conceptEPSS 12%

    php · pearFeb 1, 2017

  • CVE-2016-10150
    42Plan

    Use-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in the Linux kernel before 4.8.13 allows host OS

    CriticalCVSS 9.8No exploitEPSS 10%

    linux · linux kernelFeb 6, 2017

  • CVE-2015-2794
    62This week

    The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via

    CriticalCVSS 9.8Proof of conceptEPSS 75%

    dnnsoftware · dotnetnukeFeb 6, 2017

  • CVE-2016-6175
    45Plan

    Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural fo

    CriticalCVSS 9.8Proof of conceptEPSS 19%

    php-gettext project · php-gettextFeb 7, 2017

  • CVE-2015-6023
    32Monitor

    ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote attackers to bypas

    HighCVSS 7.3Proof of conceptEPSS 10%

    netcommwireless · hspa 3g10wve firmwareFeb 9, 2017

  • CVE-2015-6024
    47Plan

    ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated user

    CriticalCVSS 9.8Proof of conceptEPSS 26%

    netcommwireless · hspa 3g10wve firmwareFeb 9, 2017

  • CVE-2016-2148
    47Plan

    Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vecto

    CriticalCVSS 9.8No exploitEPSS 27%

    busybox · busyboxFeb 9, 2017

  • CVE-2016-9244
    52Plan

    A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes

    HighCVSS 7.5Proof of conceptEPSS 74%

    f5 · big-ip local traffic managerFeb 9, 2017

  • CVE-2017-3807
    39Monitor

    A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software, Major Releases 9.0-

    HighCVSS 8.8Proof of conceptEPSS 14%

    cisco · adaptive security appliance softwareFeb 9, 2017

  • CVE-2017-5941
    57Plan

    An issue was discovered in the node-serialize package 0.0.4 for Node.js.

    CriticalCVSS 9.8Proof of conceptEPSS 61%

    node-serialize project · node-serializeFeb 9, 2017

  • CVE-2016-6210
    60This week

    sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the us

    MediumCVSS 5.9WeaponizedEPSS 88%

    openbsd · opensshFeb 13, 2017

  • CVE-2016-9343
    43Plan

    An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware

    CriticalCVSS 10.0No exploitEPSS 10%

    rockwellautomation · softlogix 5800 controller firmwareFeb 13, 2017

  • CVE-2016-9361
    60This week

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p

    CriticalCVSS 9.8WeaponizedEPSS 20%

    moxa · nport 5100 series firmwareFeb 13, 2017

  • CVE-2017-5146
    60This week

    An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17.

    HighCVSS 7.5WeaponizedEPSS 9%

    carlosgavazzi · vmu-c em firmwareFeb 13, 2017

  • CVE-2017-5162
    60This week

    An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter.

    CriticalCVSS 9.8WeaponizedEPSS 12%

    binom3 · universal multifunctional electric power quality meter firmwareFeb 13, 2017

  • CVE-2017-5972
    37Monitor

    The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connectio

    HighCVSS 7.5Proof of conceptEPSS 23%

    linux · linux kernelFeb 14, 2017

  • CVE-2017-2984
    40Plan

    Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine.

    HighCVSS 8.8No exploitEPSS 18%

    adobe · flash playerFeb 15, 2017

  • CVE-2017-2985
    42Plan

    Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class.

    HighCVSS 8.8Proof of conceptEPSS 21%

    adobe · flash playerFeb 15, 2017

  • CVE-2017-2986
    44Plan

    Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec.

    HighCVSS 8.8Proof of conceptEPSS 30%

    adobe · flash playerFeb 15, 2017

  • CVE-2017-2988
    40Plan

    Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection.

    HighCVSS 8.8Proof of conceptEPSS 18%

    adobe · flash playerFeb 15, 2017

  • CVE-2017-2992
    45Plan

    Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header.

    HighCVSS 8.8Proof of conceptEPSS 32%

    adobe · flash playerFeb 15, 2017

  • CVE-2017-5991
    35Monitor

    An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465.

    HighCVSS 7.5Proof of conceptEPSS 15%

    artifex · mupdfFeb 15, 2017

  • CVE-2016-10134
    64This week

    SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the t

    CriticalCVSS 9.8WeaponizedEPSS 83%

    zabbix · zabbixFeb 16, 2017

  • CVE-2016-4314
    23Monitor

    Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arb

    MediumCVSS 4.9Proof of conceptEPSS 12%

    wso2 · carbonFeb 16, 2017

  • CVE-2016-8652
    37Monitor

    The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash)

    MediumCVSS 5.9No exploitEPSS 48%

    dovecot · dovecotFeb 16, 2017

  • CVE-2016-4669
    40Plan

    An issue was discovered in certain Apple products.

    HighCVSS 7.8WeaponizedEPSS 3%

    apple · iphone osFeb 20, 2017

  • CVE-2017-2361
    29Monitor

    An issue was discovered in certain Apple products.

    MediumCVSS 6.1Proof of conceptEPSS 17%

    apple · mac os xFeb 20, 2017

  • CVE-2017-2370
    34Monitor

    An issue was discovered in certain Apple products.

    HighCVSS 7.8Proof of conceptEPSS 11%

    apple · iphone osFeb 20, 2017

  • CVE-2017-0038
    47Plan

    gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,

    MediumCVSS 5.5Proof of conceptEPSS 82%

    microsoft · windows 10Feb 20, 2017

  • CVE-2016-9269
    43Plan

    Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version

    CriticalCVSS 9.9Proof of conceptEPSS 13%

    trendmicro · interscan web security virtual applianceFeb 21, 2017

  • CVE-2016-9682
    46Plan

    The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web ad

    CriticalCVSS 9.8Proof of conceptEPSS 23%

    dell · sonicwall secure remote access serverFeb 22, 2017

  • CVE-2016-9683
    42Plan

    The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web admini

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    dell · sonicwall secure remote access serverFeb 22, 2017

  • CVE-2017-5586
    47Plan

    OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java

    CriticalCVSS 9.8Proof of conceptEPSS 25%

    opentext · documentum d2Feb 22, 2017

  • CVE-2017-6077
    90Now

    ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via s

    CriticalCVSS 9.8KEVWeaponizedEPSS 68%

    netgear · dgn2200 firmwareFeb 22, 2017

  • CVE-2017-6187
    60This week

    Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI i

    CriticalCVSS 9.8WeaponizedEPSS 33%

    disksavvy · disksavvy enterpriseFeb 22, 2017

  • CVE-2017-6206
    35Monitor

    D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware be

    HighCVSS 7.5Proof of conceptEPSS 16%

    dlink · websmart dgs-1510 series firmwareFeb 23, 2017

  • CVE-2017-0037
    86Now

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreak

    HighCVSS 8.1KEVWeaponizedEPSS 80%

    microsoft · edgeFeb 26, 2017

  • CVE-2017-6342
    43Plan

    An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-0

    CriticalCVSS 9.8No exploitEPSS 12%

    dahuasecurity · camera firmwareFeb 27, 2017

  • CVE-2017-6343
    50Plan

    The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29,

    HighCVSS 8.1No exploitEPSS 60%

    dahuasecurity · camera firmwareFeb 27, 2017

  • CVE-2017-5982
    60This week

    Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (en

    HighCVSS 7.5WeaponizedEPSS 77%

    kodi · kodiFeb 28, 2017