Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: April 2017

91 records · 9 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2017-1001000
    55Plan

    The register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before

    HighCVSS 7.5WeaponizedEPSS 84%

    wordpress · wordpressApr 2, 2017

  • CVE-2014-1677
    35Monitor

    Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.

    HighCVSS 7.5Proof of conceptEPSS 17%

    technicolor · tc7200 firmwareApr 3, 2017

  • CVE-2017-7397
    33Monitor

    BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packets with Martian sourc

    HighCVSS 7.5Proof of conceptEPSS 11%

    backbox · backbox linuxApr 3, 2017

  • CVE-2016-10229
    43Plan

    udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checks

    CriticalCVSS 9.8No exploitEPSS 12%

    linux · linux kernelApr 4, 2017

  • CVE-2017-7413
    47Plan

    In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an

    HighCVSS 8.8No exploitEPSS 39%

    horde · groupwareApr 4, 2017

  • CVE-2016-3740
    36Monitor

    Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to

    HighCVSS 7.8No exploitEPSS 15%

    foxitsoftware · foxit readerApr 4, 2017

  • CVE-2017-6884
    75This week

    A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8.

    HighCVSS 8.8KEVWeaponizedEPSS 32%

    zyxel · emg2926 firmwareApr 6, 2017

  • CVE-2016-8735
    96Now

    Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before

    CriticalCVSS 9.8KEVWeaponizedEPSS 90%

    apache · tomcatApr 6, 2017

  • CVE-2017-7577
    47Plan

    XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request.

    CriticalCVSS 9.8No exploitEPSS 28%

    xiongmaitech · uc-httpdApr 7, 2017

  • CVE-2017-7581
    54Plan

    SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arb

    CriticalCVSS 9.8WeaponizedEPSS 48%

    news system project · news systemApr 7, 2017

  • CVE-2017-0561
    48Plan

    A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the con

    CriticalCVSS 9.8Proof of conceptEPSS 29%

    linux · linux kernelApr 7, 2017

  • CVE-2017-6019
    41Plan

    An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830.

    HighCVSS 7.5Proof of conceptEPSS 36%

    schneider-electric · conext combox 865-1058 firmwareApr 7, 2017

  • CVE-2017-6190
    36Monitor

    Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows remote attackers to

    HighCVSS 7.5Proof of conceptEPSS 18%

    dlink · dwr-116 firmwareApr 10, 2017

  • CVE-2017-5983
    44Plan

    The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    atlassian · jiraApr 10, 2017

  • CVE-2017-7185
    34Monitor

    Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Libra

    HighCVSS 7.5Proof of conceptEPSS 12%

    cesanta · mongoose embedded web server libraryApr 10, 2017

  • CVE-2017-7461
    22Monitor

    Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows re

    MediumCVSS 4.9Proof of conceptEPSS 10%

    intellinet-network · nfc-30ir firmwareApr 11, 2017

  • CVE-2017-7462
    43Plan

    Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web direc

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    intellinet-network · nfc-30ir firmwareApr 11, 2017

  • CVE-2016-1908
    43Plan

    The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for acc

    CriticalCVSS 9.8No exploitEPSS 13%

    openbsd · opensshApr 11, 2017

  • CVE-2016-7547
    67This week

    A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.c

    CriticalCVSS 9.8WeaponizedEPSS 92%

    trendmicro · threat discovery applianceApr 12, 2017

  • CVE-2016-7552
    67This week

    On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthent

    CriticalCVSS 9.8WeaponizedEPSS 93%

    trendmicro · threat discovery applianceApr 12, 2017

  • CVE-2017-7588
    49Plan

    On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attemp

    CriticalCVSS 9.8Proof of conceptEPSS 33%

    brother · mfc firmwareApr 12, 2017

  • CVE-2017-0093
    34Monitor

    A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · edgeApr 12, 2017

  • CVE-2017-0106
    40Plan

    Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execu

    HighCVSS 7.8Proof of conceptEPSS 28%

    microsoft · outlookApr 12, 2017

  • CVE-2017-0158
    34Monitor

    An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, an

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · windows 10Apr 12, 2017

  • CVE-2017-0160
    36Monitor

    Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious

    HighCVSS 7.8Proof of conceptEPSS 17%

    microsoft · .net frameworkApr 12, 2017

  • CVE-2017-0194
    30Monitor

    Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information

    MediumCVSS 5.5No exploitEPSS 25%

    microsoft · excelApr 12, 2017

  • CVE-2017-0197
    37Monitor

    Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, aka "Micr

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · onenoteApr 12, 2017

  • CVE-2017-0199
    91Now

    Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows

    HighCVSS 7.8KEVWeaponizedEPSS 99%

    microsoft · officeApr 12, 2017

  • CVE-2017-0200
    34Monitor

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · edgeApr 12, 2017

  • CVE-2017-0201
    34Monitor

    A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines render when handling obje

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · internet explorerApr 12, 2017

  • CVE-2017-0202
    44Plan

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.

    HighCVSS 7.5Proof of conceptEPSS 45%

    microsoft · internet explorerApr 12, 2017

  • CVE-2017-0204
    28Monitor

    Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to byp

    MediumCVSS 5.5Proof of conceptEPSS 19%

    microsoft · outlookApr 12, 2017

  • CVE-2017-0205
    37Monitor

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.

    HighCVSS 7.5No exploitEPSS 23%

    microsoft · edgeApr 12, 2017

  • CVE-2017-0207
    29Monitor

    Microsoft Outlook for Mac 2011 allows remote attackers to spoof web content via a crafted email with specific HTML tags, aka "Microsoft Brow

    MediumCVSS 6.5No exploitEPSS 10%

    microsoft · outlookApr 12, 2017

  • CVE-2017-0208
    22Monitor

    An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory

    MediumCVSS 4.3No exploitEPSS 15%

    microsoft · edgeApr 12, 2017

  • CVE-2017-0210
    72This week

    An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an

    HighCVSS 8.8KEVWeaponizedEPSS 22%

    microsoft · internet explorerApr 12, 2017

  • CVE-2017-0211
    26Monitor

    An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and

    MediumCVSS 5.5Proof of conceptEPSS 14%

    microsoft · windows 10Apr 12, 2017

  • CVE-2017-3006
    38Monitor

    Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation o

    HighCVSS 8.8Proof of conceptEPSS 10%

    adobe · creative cloudApr 12, 2017

  • CVE-2017-3022
    17Monitor

    Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili

    LowCVSS 3.3No exploitEPSS 11%

    adobe · acrobatApr 12, 2017

  • CVE-2017-3042
    35Monitor

    Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vuln

    HighCVSS 7.8No exploitEPSS 14%

    adobe · acrobatApr 12, 2017

  • CVE-2017-3044
    37Monitor

    Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption

    HighCVSS 7.8No exploitEPSS 20%

    adobe · acrobatApr 12, 2017

  • CVE-2017-3048
    35Monitor

    Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vuln

    HighCVSS 7.8No exploitEPSS 13%

    adobe · acrobatApr 12, 2017

  • CVE-2017-3055
    35Monitor

    Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vuln

    HighCVSS 7.8No exploitEPSS 14%

    adobe · acrobatApr 12, 2017

  • CVE-2017-3061
    46Plan

    Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser.

    CriticalCVSS 9.8Proof of conceptEPSS 24%

    adobe · flash playerApr 12, 2017

  • CVE-2017-3064
    35Monitor

    Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline.

    HighCVSS 7.8Proof of conceptEPSS 13%

    adobe · flash playerApr 12, 2017

  • CVE-2017-7722
    44Plan

    In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and

    CriticalCVSS 10.0WeaponizedEPSS 12%

    solarwinds · log \& event managerApr 12, 2017

  • CVE-2016-6808
    46Plan

    Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.

    CriticalCVSS 9.8No exploitEPSS 22%

    apache · tomcat jk connectorApr 12, 2017

  • CVE-2016-2555
    63This week

    SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands v

    CriticalCVSS 9.8WeaponizedEPSS 79%

    atutor · atutorApr 13, 2017

  • CVE-2016-4970
    33Monitor

    handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of

    HighCVSS 7.5No exploitEPSS 11%

    netty · nettyApr 13, 2017

  • CVE-2017-7857
    40Plan

    FreeType 2 before 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the TT_Get_MM_Var function in true

    CriticalCVSS 9.8No exploitEPSS 3%

    freetype · freetypeApr 14, 2017

  • CVE-2017-7455
    35Monitor

    Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.

    HighCVSS 7.5Proof of conceptEPSS 15%

    moxa · mxviewApr 14, 2017

  • CVE-2017-7456
    39Monitor

    Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView client login credent

    HighCVSS 7.5Proof of conceptEPSS 29%

    moxa · mxviewApr 14, 2017

  • CVE-2015-6567
    38Monitor

    Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanage

    HighCVSS 8.8Proof of conceptEPSS 10%

    wolfcms · wolf cmsApr 14, 2017

  • CVE-2015-6568
    38Monitor

    Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanage

    HighCVSS 8.8Proof of conceptEPSS 10%

    wolfcms · wolf cmsApr 14, 2017

  • CVE-2016-1713
    34Monitor

    Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDeta

    HighCVSS 7.3WeaponizedEPSS 16%

    vtiger · vtiger crmApr 14, 2017

  • CVE-2016-5312
    42Plan

    Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to

    MediumCVSS 6.5Proof of conceptEPSS 53%

    symantec · messaging gatewayApr 14, 2017

  • CVE-2017-6554
    33Monitor

    pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary fil

    HighCVSS 7.2Proof of conceptEPSS 15%

    quest · privilege managerApr 14, 2017

  • CVE-2017-7696
    41Plan

    SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service (memory consumption) via large va

    HighCVSS 7.5No exploitEPSS 36%

    sap · sso authentication libraryApr 14, 2017

  • CVE-2017-7615
    62This week

    MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.

    HighCVSS 8.8WeaponizedEPSS 91%

    mantisbt · mantisbtApr 16, 2017

  • CVE-2015-8256
    39Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.

    MediumCVSS 6.1Proof of conceptEPSS 50%

    axis · network camera firmwareApr 17, 2017

  • CVE-2017-5647
    35Monitor

    A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.7

    HighCVSS 7.5No exploitEPSS 16%

    apache · tomcatApr 17, 2017

  • CVE-2017-5648
    40Plan

    While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.

    CriticalCVSS 9.1No exploitEPSS 13%

    apache · tomcatApr 17, 2017

  • CVE-2017-5645
    66This week

    In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another applic

    CriticalCVSS 9.8Proof of conceptEPSS 89%

    apache · log4jApr 17, 2017

  • CVE-2017-7896
    25Monitor

    Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.

    MediumCVSS 6.1WeaponizedEPSS 4%

    trendmicro · interscan messaging security virtual applianceApr 18, 2017

  • CVE-2017-5653
    24Monitor

    JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypt

    MediumCVSS 5.3No exploitEPSS 11%

    apache · cxfApr 18, 2017

  • CVE-2017-7692
    45Plan

    SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file th

    HighCVSS 8.8Proof of conceptEPSS 32%

    squirrelmail · squirrelmailApr 20, 2017

  • CVE-2016-1555
    98Now

    (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3

    CriticalCVSS 9.8KEVWeaponizedEPSS 98%

    netgear · wnap320 firmwareApr 21, 2017

  • CVE-2017-8051
    44Plan

    Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI.

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    tenable · applianceApr 21, 2017

  • CVE-2016-1560
    61This week

    ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the

    CriticalCVSS 9.8WeaponizedEPSS 72%

    exagrid · ex3000 firmwareApr 21, 2017

  • CVE-2016-1561
    52Plan

    ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote atta

    HighCVSS 7.5WeaponizedEPSS 74%

    exagrid · ex3000 firmwareApr 21, 2017

  • CVE-2016-3109
    47Plan

    The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code.

    CriticalCVSS 9.8No exploitEPSS 28%

    shopware · shopwareApr 21, 2017

  • CVE-2015-7245
    44Plan

    Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read

    HighCVSS 7.5Proof of conceptEPSS 45%

    d-link · dvg-n5402sp firmwareApr 24, 2017

  • CVE-2015-7246
    43Plan

    D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw

    CriticalCVSS 9.8Proof of conceptEPSS 14%

    d-link · dvg-n5402sp firmwareApr 24, 2017

  • CVE-2015-7247
    42Plan

    D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    d-link · dvg-n5402sp firmwareApr 24, 2017

  • CVE-2017-3506
    88Now

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

    HighCVSS 7.4KEVWeaponizedEPSS 95%

    oracle · weblogic serverApr 24, 2017

  • CVE-2017-3528
    25Monitor

    Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datep

    MediumCVSS 5.4Proof of conceptEPSS 14%

    oracle · applications frameworkApr 24, 2017

  • CVE-2017-3548
    41Plan

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker).

    MediumCVSS 6.5Proof of conceptEPSS 50%

    oracle · peoplesoft enterprise peopletoolsApr 24, 2017

  • CVE-2017-3549
    41Plan

    Vulnerability in the Oracle Scripting component of Oracle E-Business Suite (subcomponent: Scripting Administration).

    CriticalCVSS 9.1Proof of conceptEPSS 15%

    oracle · scriptingApr 24, 2017

  • CVE-2017-3599
    57Plan

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth).

    HighCVSS 7.5Proof of conceptEPSS 89%

    oracle · mysqlApr 24, 2017

  • CVE-2017-3622
    33Monitor

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (CDE)).

    HighCVSS 7.8WeaponizedEPSS 5%

    oracle · solarisApr 24, 2017

  • CVE-2017-3623
    47Plan

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC).

    CriticalCVSS 10.0Proof of conceptEPSS 22%

    oracle · solarisApr 24, 2017

  • CVE-2017-5030
    77This week

    Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android

    HighCVSS 8.8KEVWeaponizedEPSS 40%

    google · chromeApr 24, 2017

  • CVE-2017-5040
    24Monitor

    V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which all

    MediumCVSS 4.3No exploitEPSS 23%

    google · chromeApr 24, 2017

  • CVE-2017-8220
    50Plan

    TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP reques

    CriticalCVSS 9.9No exploitEPSS 37%

    tp-link · c2 firmwareApr 25, 2017

  • CVE-2017-8225
    50Plan

    On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked.

    CriticalCVSS 9.8Proof of conceptEPSS 35%

    wificam · wireless ip camera \(p2p\) firmwareApr 25, 2017

  • CVE-2017-8291
    90Now

    Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile

    HighCVSS 7.8KEVWeaponizedEPSS 96%

    artifex · ghostscriptApr 26, 2017

  • CVE-2017-3066
    96Now

    Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserializa

    CriticalCVSS 9.8KEVWeaponizedEPSS 90%

    adobe · coldfusionApr 27, 2017

  • CVE-2017-5135
    41Plan

    Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases.

    CriticalCVSS 9.1Proof of conceptEPSS 17%

    technicolor · dpc3928sl firmwareApr 27, 2017

  • CVE-2017-7895
    42Plan

    The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows rem

    CriticalCVSS 9.8No exploitEPSS 10%

    linux · linux kernelApr 28, 2017

  • CVE-2017-6553
    52Plan

    Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the polic

    CriticalCVSS 9.8WeaponizedEPSS 42%

    quest · privilege manager for unixApr 29, 2017

  • CVE-2017-7981
    40Plan

    Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin.

    HighCVSS 8.8Proof of conceptEPSS 16%

    enalean · tuleapApr 29, 2017