By publication date

Exploited and new serious CVEs: March 2017

158 records · 17 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 2

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
24Monitor	CVE-2017-0124Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0125Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0126Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0127Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
24Monitor	CVE-2017-0128Proof of concept	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	22.4%	Mar 16, 2017
37Monitor	CVE-2017-0130No exploit	The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of servmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	High7.5	—	23.2%	Mar 16, 2017
35Monitor	CVE-2017-0131No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	15.2%	Mar 16, 2017
35Monitor	CVE-2017-0132No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	15.2%	Mar 16, 2017
38Monitor	CVE-2017-0133No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	25.9%	Mar 16, 2017
38Monitor	CVE-2017-0134No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	26.3%	Mar 16, 2017
35Monitor	CVE-2017-0136No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	15.2%	Mar 16, 2017
35Monitor	CVE-2017-0137No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	15.2%	Mar 16, 2017
35Monitor	CVE-2017-0138No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	15.2%	Mar 16, 2017
25Monitor	CVE-2017-0140No exploit	Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Secumicrosoft · edge Pre-auth	Medium4.2	—	28.5%	Mar 16, 2017
44Plan	CVE-2017-0141No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge pre-auth RCE	High7.5	—	48.1%	Mar 16, 2017
93Now	CVE-2017-0143Weaponized	The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anmicrosoft · server message block RCE	High8.8	KEV	93.3%	Mar 16, 2017
95Now	CVE-2017-0144Weaponized	The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anmicrosoft · server message block RCE	High8.8	KEV	99.2%	Mar 16, 2017
92Now	CVE-2017-0145Weaponized	The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anmicrosoft · server message block RCE	High8.8	KEV	89.8%	Mar 16, 2017
92Now	CVE-2017-0146Weaponized	The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anmicrosoft · server message block RCE	High8.8	KEV	89.8%	Mar 16, 2017
90Now	CVE-2017-0147Weaponized	The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anmicrosoft · windows 10 1507 Pre-auth	High7.5	KEV	99.6%	Mar 16, 2017
92Now	CVE-2017-0148Weaponized	The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold anmicrosoft · server message block · CWE-20 pre-auth RCE	High8.1	KEV	99.3%	Mar 16, 2017
74This week	CVE-2017-0149Weaponized	Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vmicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High8.8	KEV	29.1%	Mar 16, 2017
35Monitor	CVE-2017-0150No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	15.2%	Mar 16, 2017
35Monitor	CVE-2017-0151No exploit	A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	15.2%	Mar 16, 2017
20Monitor	CVE-2017-0154No exploit	Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attackmicrosoft · internet explorer · CWE-74 Local privilege escalation	Medium4.4	—	10.5%	Mar 16, 2017
34Monitor	CVE-2014-8722Proof of concept	GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<username>.xml, (2) backuget-simple · getsimple cms · CWE-200 Pre-auth Info leak	High7.5	—	14.3%	Mar 17, 2017
40Plan	CVE-2015-3884Weaponized	Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6) reports, and (7) schqdpm · qdpm · CWE-434 RCE File upload	High8.8	—	14.3%	Mar 17, 2017
43Plan	CVE-2017-6880Proof of concept	Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecicerberus · cerberus ftp server · CWE-119 Pre-auth Memory safety	Critical9.8	—	14.3%	Mar 17, 2017
99Now	CVE-2017-3881Weaponized	A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthecisco · ios · CWE-20 Pre-auth	Critical9.8	KEV	98.9%	Mar 17, 2017
40Plan	CVE-2017-5930Weaponized	The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the deleteopensuse · leap · CWE-862 Broken access control (IDOR)	Low2.7	—	14.9%	Mar 20, 2017
40Plan	CVE-2016-6816Proof of concept	The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the Hapache · tomcat · CWE-20 Pre-auth XSS	High7.1	—	39.6%	Mar 20, 2017
40Plan	CVE-2017-6971Proof of concept	AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged alienvault · ossim · CWE-74 RCE	High8.8	—	16.1%	Mar 22, 2017
60This week	CVE-2017-7230Weaponized	A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET reqdisksorter · disk sorter · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	13.8%	Mar 22, 2017
43Plan	CVE-2017-6972Proof of concept	AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl coalienvault · ossim · CWE-273 Pre-auth	Critical9.8	—	14.6%	Mar 22, 2017
47Plan	CVE-2017-6359Proof of concept	QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vectorqnap · qts · CWE-78 pre-auth RCE Command injection	Critical9.8	—	26.8%	Mar 23, 2017
59Plan	CVE-2017-6360Proof of concept	QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information via unspecified vectqnap · qts · CWE-78 pre-auth RCE Command injection	Critical9.8	—	66.1%	Mar 23, 2017
56Plan	CVE-2017-6361Proof of concept	QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors.qnap · qts · CWE-78 pre-auth RCE Command injection	Critical9.8	—	56.8%	Mar 23, 2017
43Plan	CVE-2014-7279Proof of concept	The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equipment management akankunit · konke smart plug firmware · CWE-264 Pre-auth	Critical9.8	—	11.7%	Mar 23, 2017
43Plan	CVE-2014-8731Proof of concept	PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last phpmemcachedadmin project · phpmemcachedadmin · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	11.7%	Mar 23, 2017
53Plan	CVE-2017-6517No exploit	Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the tamicrosoft · skype · CWE-427 pre-auth RCE	Critical9.8	—	46.3%	Mar 23, 2017
44Plan	CVE-2015-8556Proof of concept	Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.qemu · qemu · CWE-362 Pre-auth Race condition	Critical10.0	—	13.3%	Mar 24, 2017
45Plan	CVE-2017-5869Proof of concept	Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to unuxeo · nuxeo · CWE-22 RCE Path traversal	High8.8	—	34.5%	Mar 24, 2017
49Plan	CVE-2017-5334No exploit	Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackergnu · gnutls · CWE-415 Pre-auth Memory safety	Critical9.8	—	32.7%	Mar 24, 2017
35Monitor	CVE-2017-7240Proof of concept	An issue was discovered on Miele Professional PST10 devices.miele professional · pst10 webserver · CWE-22 Pre-auth Path traversal	High7.5	—	17.4%	Mar 24, 2017
43Plan	CVE-2017-2641Proof of concept	In Moodle 2.x and 3.x, SQL injection can occur via user preferences.moodle · moodle · CWE-89 Pre-auth SQL injection	Critical9.8	—	14.5%	Mar 26, 2017
99Now	CVE-2017-7269Weaponized	Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Smicrosoft · internet information services · CWE-120 pre-auth RCE Memory safety	Critical9.8	KEV	99.8%	Mar 26, 2017
35Monitor	CVE-2017-5850Proof of concept	httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for a large file using aopenbsd · openbsd · CWE-770 Pre-auth Denial of service	High7.5	—	17.2%	Mar 27, 2017
40Plan	CVE-2016-10225Weaponized	The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "rooallwinner · linux-3.4-sunxi · CWE-264 Local privilege escalation	High7.8	—	3.9%	Mar 27, 2017
46Plan	CVE-2017-6542Proof of concept	The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an aputty · putty · CWE-119 Pre-auth Memory safety	Critical9.8	—	21.8%	Mar 27, 2017
42Plan	CVE-2016-8749No exploit	Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.apache · camel · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	10.6%	Mar 28, 2017
36Monitor	CVE-2017-7285Proof of concept	A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhausmikrotik · routeros · CWE-400 Pre-auth Denial of service	High7.5	—	19.3%	Mar 29, 2017
41Plan	CVE-2017-5226No exploit	When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to pushprojectatomic · bubblewrap · CWE-20 Pre-auth	Critical10.0	—	3.1%	Mar 29, 2017
40Plan	CVE-2017-7308Weaponized	The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size datalinux · linux kernel · CWE-681 Local privilege escalation	High7.8	—	17.8%	Mar 29, 2017
47Plan	CVE-2017-7310Weaponized	A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 1flexense · diskboss · CWE-119 RCE Memory safety	High7.8	—	53.6%	Mar 29, 2017
44Plan	CVE-2017-6182Proof of concept	In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remosophos · web appliance · CWE-78 pre-auth RCE Command injection	Critical9.8	—	16.6%	Mar 30, 2017
36Monitor	CVE-2017-7309No exploit	A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to injemantisbt · mantisbt · CWE-79 RCE XSS	Medium4.8	—	57.3%	Mar 31, 2017
78This week	CVE-2014-3931Weaponized	fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corrumulti-router looking glass project · multi-router looking glass · CWE-119 Pre-auth Memory safety	Critical9.8	KEV	28.9%	Mar 31, 2017
41Plan	CVE-2015-4624Weaponized	Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens.hak5 · wi-fi pineapple firmware · CWE-284 Pre-auth Broken access control (IDOR) CSRF	High7.5	—	36.9%	Mar 31, 2017

CVE-2017-0124
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0125
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0126
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0127
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0128
24Monitor
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
MediumCVSS 4.3Proof of conceptEPSS 22%
- Pre-auth
- Info leak
microsoft · windows 7Mar 16, 2017
CVE-2017-0130
37Monitor
The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of serv
HighCVSS 7.5No exploitEPSS 23%
- pre-auth RCE
- Memory safety
microsoft · internet explorerMar 16, 2017
CVE-2017-0131
35Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0132
35Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0133
38Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 25%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0134
38Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 26%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0136
35Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0137
35Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0138
35Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0140
25Monitor
Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Secu
MediumCVSS 4.2No exploitEPSS 28%
- Pre-auth
microsoft · edgeMar 16, 2017
CVE-2017-0141
44Plan
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 48%
- pre-auth RCE
microsoft · edgeMar 16, 2017
CVE-2017-0143
93Now
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an
HighCVSS 8.8KEVWeaponizedEPSS 93%
- RCE
microsoft · server message blockMar 16, 2017
CVE-2017-0144
95Now
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an
HighCVSS 8.8KEVWeaponizedEPSS 99%
- RCE
microsoft · server message blockMar 16, 2017
CVE-2017-0145
92Now
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an
HighCVSS 8.8KEVWeaponizedEPSS 89%
- RCE
microsoft · server message blockMar 16, 2017
CVE-2017-0146
92Now
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an
HighCVSS 8.8KEVWeaponizedEPSS 89%
- RCE
microsoft · server message blockMar 16, 2017
CVE-2017-0147
90Now
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an
HighCVSS 7.5KEVWeaponizedEPSS 99%
- Pre-auth
microsoft · windows 10 1507Mar 16, 2017
CVE-2017-0148
92Now
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an
HighCVSS 8.1KEVWeaponizedEPSS 99%
- pre-auth RCE
microsoft · server message blockMar 16, 2017
CVE-2017-0149
74This week
Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v
HighCVSS 8.8KEVWeaponizedEPSS 29%
- pre-auth RCE
- Memory safety
microsoft · internet explorerMar 16, 2017
CVE-2017-0150
35Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0151
35Monitor
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeMar 16, 2017
CVE-2017-0154
20Monitor
Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain policies, allowing attack
MediumCVSS 4.4No exploitEPSS 10%
- Local privilege escalation
microsoft · internet explorerMar 16, 2017
CVE-2014-8722
34Monitor
GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<username>.xml, (2) backu
HighCVSS 7.5Proof of conceptEPSS 14%
- Pre-auth
- Info leak
get-simple · getsimple cmsMar 17, 2017
CVE-2015-3884
40Plan
Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6) reports, and (7) sch
HighCVSS 8.8WeaponizedEPSS 14%
- RCE
- File upload
qdpm · qdpmMar 17, 2017
CVE-2017-6880
43Plan
Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspeci
CriticalCVSS 9.8Proof of conceptEPSS 14%
- Pre-auth
- Memory safety
cerberus · cerberus ftp serverMar 17, 2017
CVE-2017-3881
99Now
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthe
CriticalCVSS 9.8KEVWeaponizedEPSS 98%
- Pre-auth
cisco · iosMar 17, 2017
CVE-2017-5930
40Plan
The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete
LowCVSS 2.7WeaponizedEPSS 14%
- Broken access control (IDOR)
opensuse · leapMar 20, 2017
CVE-2016-6816
40Plan
The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the H
HighCVSS 7.1Proof of conceptEPSS 39%
- Pre-auth
- XSS
apache · tomcatMar 20, 2017
CVE-2017-6971
40Plan
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged
HighCVSS 8.8Proof of conceptEPSS 16%
- RCE
alienvault · ossimMar 22, 2017
CVE-2017-7230
60This week
A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET req
CriticalCVSS 9.8WeaponizedEPSS 13%
- pre-auth RCE
- Memory safety
disksorter · disk sorterMar 22, 2017
CVE-2017-6972
43Plan
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl co
CriticalCVSS 9.8Proof of conceptEPSS 14%
- Pre-auth
alienvault · ossimMar 22, 2017
CVE-2017-6359
47Plan
QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vector
CriticalCVSS 9.8Proof of conceptEPSS 26%
- pre-auth RCE
- Command injection
qnap · qtsMar 23, 2017
CVE-2017-6360
59Plan
QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information via unspecified vect
CriticalCVSS 9.8Proof of conceptEPSS 66%
- pre-auth RCE
- Command injection
qnap · qtsMar 23, 2017
CVE-2017-6361
56Plan
QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors.
CriticalCVSS 9.8Proof of conceptEPSS 56%
- pre-auth RCE
- Command injection
qnap · qtsMar 23, 2017
CVE-2014-7279
43Plan
The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equipment management a
CriticalCVSS 9.8Proof of conceptEPSS 11%
- Pre-auth
kankunit · konke smart plug firmwareMar 23, 2017
CVE-2014-8731
43Plan
PHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via vectors related "serialized data and the last
CriticalCVSS 9.8Proof of conceptEPSS 11%
- pre-auth RCE
- Deserialization
phpmemcachedadmin project · phpmemcachedadminMar 23, 2017
CVE-2017-6517
53Plan
Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the ta
CriticalCVSS 9.8No exploitEPSS 46%
- pre-auth RCE
microsoft · skypeMar 23, 2017
CVE-2015-8556
44Plan
Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.
CriticalCVSS 10.0Proof of conceptEPSS 13%
- Pre-auth
- Race condition
qemu · qemuMar 24, 2017
CVE-2017-5869
45Plan
Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote authenticated users to u
HighCVSS 8.8Proof of conceptEPSS 34%
- RCE
- Path traversal
nuxeo · nuxeoMar 24, 2017
CVE-2017-5334
49Plan
Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attacker
CriticalCVSS 9.8No exploitEPSS 32%
- Pre-auth
- Memory safety
gnu · gnutlsMar 24, 2017
CVE-2017-7240
35Monitor
An issue was discovered on Miele Professional PST10 devices.
HighCVSS 7.5Proof of conceptEPSS 17%
- Pre-auth
- Path traversal
miele professional · pst10 webserverMar 24, 2017
CVE-2017-2641
43Plan
In Moodle 2.x and 3.x, SQL injection can occur via user preferences.
CriticalCVSS 9.8Proof of conceptEPSS 14%
- Pre-auth
- SQL injection
moodle · moodleMar 26, 2017
CVE-2017-7269
99Now
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows S
CriticalCVSS 9.8KEVWeaponizedEPSS 99%
- pre-auth RCE
- Memory safety
microsoft · internet information servicesMar 26, 2017
CVE-2017-5850
35Monitor
httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for a large file using a
HighCVSS 7.5Proof of conceptEPSS 17%
- Pre-auth
- Denial of service
openbsd · openbsdMar 27, 2017
CVE-2016-10225
40Plan
The sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local users to gain root privileges by sending "roo
HighCVSS 7.8WeaponizedEPSS 3%
- Local privilege escalation
allwinner · linux-3.4-sunxiMar 27, 2017
CVE-2017-6542
46Plan
The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an a
CriticalCVSS 9.8Proof of conceptEPSS 21%
- Pre-auth
- Memory safety
putty · puttyMar 27, 2017
CVE-2016-8749
42Plan
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.
CriticalCVSS 9.8No exploitEPSS 10%
- pre-auth RCE
- Deserialization
apache · camelMar 28, 2017
CVE-2017-7285
36Monitor
A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaus
HighCVSS 7.5Proof of conceptEPSS 19%
- Pre-auth
- Denial of service
mikrotik · routerosMar 29, 2017
CVE-2017-5226
41Plan
When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push
CriticalCVSS 10.0No exploitEPSS 3%
- Pre-auth
projectatomic · bubblewrapMar 29, 2017
CVE-2017-7308
40Plan
The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data
HighCVSS 7.8WeaponizedEPSS 17%
- Local privilege escalation
linux · linux kernelMar 29, 2017
CVE-2017-7310
47Plan
A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 1
HighCVSS 7.8WeaponizedEPSS 53%
- RCE
- Memory safety
flexense · diskbossMar 29, 2017
CVE-2017-6182
44Plan
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remo
CriticalCVSS 9.8Proof of conceptEPSS 16%
- pre-auth RCE
- Command injection
sophos · web applianceMar 30, 2017
CVE-2017-7309
36Monitor
A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inje
MediumCVSS 4.8No exploitEPSS 57%
- RCE
- XSS
mantisbt · mantisbtMar 31, 2017
CVE-2014-3931
78This week
fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corru
CriticalCVSS 9.8KEVWeaponizedEPSS 28%
- Pre-auth
- Memory safety
multi-router looking glass project · multi-router looking glassMar 31, 2017
CVE-2015-4624
41Plan
Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens.
HighCVSS 7.5WeaponizedEPSS 36%
- Pre-auth
- Broken access control (IDOR)
- CSRF
hak5 · wi-fi pineapple firmwareMar 31, 2017