By publication date

Exploited and new serious CVEs: May 2017

88 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2015-8257Proof of concept	The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell metacharacters in taxis · network camera firmware · CWE-77 RCE Command injection	High8.8	—	17.6%	May 2, 2017
40Plan	CVE-2016-5810Weaponized	upAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated administrators to obtain sensitive password informationadvantech · webaccess · CWE-200 Info leak	Medium4.9	—	15.3%	May 2, 2017
97Now	CVE-2017-5689Weaponized	An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (Aintel · active management technology firmware · CWE-269 Pre-auth	Critical9.8	KEV	92.1%	May 2, 2017
35Monitor	CVE-2016-10367Proof of concept	In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security opsview · opsview · CWE-22 Pre-auth Path traversal	High7.5	—	16.1%	May 3, 2017
31Monitor	CVE-2017-8295Proof of concept	WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to rewordpress · wordpress · CWE-640 Pre-auth	Medium5.9	—	26.6%	May 4, 2017
60This week	CVE-2017-8779Weaponized	rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data rpcbind project · rpcbind · CWE-770 Pre-auth Denial of service	High7.5	—	81.2%	May 4, 2017
37Monitor	CVE-2016-7053No exploit	CMS Null dereferenceopenssl · openssl · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	21.6%	May 4, 2017
40Plan	CVE-2016-7054Proof of concept	ChaCha20/Poly1305 heap-buffer-overflowopenssl · openssl · CWE-284 Pre-auth Broken access control (IDOR) Denial of service	High7.5	—	32.3%	May 4, 2017
47Plan	CVE-2017-3730Proof of concept	Bad (EC)DHE parameters cause a client crashopenssl · openssl · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	55.2%	May 4, 2017
47Plan	CVE-2017-3731No exploit	Truncated packet could crash via OOB readopenssl · openssl · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	57.3%	May 4, 2017
28Monitor	CVE-2017-3732No exploit	BN_mod_exp may produce incorrect results on x86_64openssl · openssl · CWE-200 Pre-auth Info leak	Medium5.9	—	15.4%	May 4, 2017
34Monitor	CVE-2017-3733No exploit	Encrypt-Then-Mac renegotiation crashopenssl · openssl · CWE-20 Pre-auth Denial of service	High7.5	—	12.8%	May 4, 2017
27Monitor	CVE-2016-7055No exploit	There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c thatopenssl · openssl Pre-auth Denial of service	Medium5.9	—	14.2%	May 4, 2017
46Plan	CVE-2017-8303No exploit	An issue was discovered on Accellion FTA devices before FTA_9_12_180.accellion · file transfer appliance · CWE-116 pre-auth RCE	Critical9.8	—	24.1%	May 5, 2017
99Now	CVE-2017-7921Weaponized	An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I hikvision · ds-2cd2032-i firmware · CWE-287 Pre-auth Auth bypass	Critical9.8	KEV	99.9%	May 5, 2017
54Plan	CVE-2017-7925Proof of concept	A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-Idahuasecurity · dh-ipc-hdbw23a0rn-zs firmware · CWE-260 Pre-auth	Critical9.8	—	51.4%	May 5, 2017
40Plan	CVE-2017-7927No exploit	A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-dahuasecurity · dh-ipc-hdbw23a0rn-zs firmware · CWE-836 Pre-auth Auth bypass	High7.3	—	36.7%	May 5, 2017
55Plan	CVE-2017-0290Proof of concept	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPmicrosoft · forefront security · CWE-119 RCE Memory safety	High7.8	—	81.4%	May 9, 2017
41Plan	CVE-2017-3068Proof of concept	Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine.adobe · flash player desktop runtime · CWE-787 pre-auth RCE Memory safety	High8.8	—	20.3%	May 9, 2017
60This week	CVE-2017-8895Weaponized	In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulnerveritas · backup exec · CWE-416 pre-auth RCE Memory safety	Critical9.8	—	71.0%	May 10, 2017
46Plan	CVE-2017-8798Proof of concept	Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly hminiupnp project · miniupnpd · CWE-119 Pre-auth Memory safety	Critical9.8	—	24.0%	May 10, 2017
30Monitor	CVE-2017-0190No exploit	The GDI component in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8microsoft · windows 10 · CWE-200 Info leak	Medium4.4	—	43.4%	May 12, 2017
84Now	CVE-2017-0213Weaponized	Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2microsoft · windows 10 1507 Local privilege escalation	High7.3	KEV	84.2%	May 12, 2017
74This week	CVE-2017-0222Weaponized	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cormicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High8.8	KEV	29.6%	May 12, 2017
33Monitor	CVE-2017-0224No exploit	A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "Scmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	11.4%	May 12, 2017
34Monitor	CVE-2017-0227No exploit	A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects microsoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	13.7%	May 12, 2017
35Monitor	CVE-2017-0228No exploit	A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, akamicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	16.9%	May 12, 2017
33Monitor	CVE-2017-0229No exploit	A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	10.7%	May 12, 2017
33Monitor	CVE-2017-0230No exploit	A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	10.7%	May 12, 2017
41Plan	CVE-2017-0234No exploit	A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects inmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	38.1%	May 12, 2017
33Monitor	CVE-2017-0235No exploit	A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects inmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	11.0%	May 12, 2017
39Monitor	CVE-2017-0236No exploit	A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects inmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	31.5%	May 12, 2017
35Monitor	CVE-2017-0238No exploit	A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka "Scmicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	18.0%	May 12, 2017
34Monitor	CVE-2017-0240No exploit	A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects microsoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	14.7%	May 12, 2017
35Monitor	CVE-2017-0247No exploit	A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests.microsoft · asp.net model view controller · CWE-20 Pre-auth	High7.5	—	16.9%	May 12, 2017
37Monitor	CVE-2017-0254No exploit	Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Offimicrosoft · office · CWE-119 RCE Memory safety	High7.8	—	19.8%	May 12, 2017
84Now	CVE-2017-0261Weaponized	Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly microsoft · office · CWE-416 RCE Memory safety	High7.8	KEV	78.1%	May 12, 2017
85Now	CVE-2017-0262Weaponized	Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly microsoft · office RCE	High7.8	KEV	81.0%	May 12, 2017
64This week	CVE-2017-0263Weaponized	The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windowmicrosoft · windows 10 1507 · CWE-416 Local privilege escalation Memory safety	High7.8	KEV	10.0%	May 12, 2017
35Monitor	CVE-2017-0264No exploit	Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory,microsoft · powerpoint for mac · CWE-119 RCE Memory safety	High7.8	—	13.9%	May 12, 2017
37Monitor	CVE-2017-0265No exploit	Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory,microsoft · powerpoint for mac · CWE-119 RCE Memory safety	High7.8	—	18.6%	May 12, 2017
41Plan	CVE-2017-0266No exploit	A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects microsoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	35.8%	May 12, 2017
27Monitor	CVE-2017-0267No exploit	Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 microsoft · windows 10 · CWE-200 Pre-auth Info leak	Medium5.9	—	12.6%	May 12, 2017
27Monitor	CVE-2017-0271No exploit	Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 microsoft · windows 10 · CWE-200 Pre-auth Info leak	Medium5.9	—	13.2%	May 12, 2017
37Monitor	CVE-2017-0272No exploit	The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Smicrosoft · windows 10 pre-auth RCE	High8.1	—	17.1%	May 12, 2017
31Monitor	CVE-2017-0277No exploit	The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Smicrosoft · windows 10 pre-auth RCE	High7.0	—	10.8%	May 12, 2017
31Monitor	CVE-2017-0278No exploit	The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Smicrosoft · windows 10 pre-auth RCE	High7.0	—	10.8%	May 12, 2017
31Monitor	CVE-2017-0279No exploit	The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Smicrosoft · windows 10 pre-auth RCE	High7.0	—	10.8%	May 12, 2017
36Monitor	CVE-2017-0281No exploit	Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Appmicrosoft · office RCE	High7.8	—	15.7%	May 12, 2017
51Plan	CVE-2016-10329No exploit	Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code vsynology · photo station · CWE-77 pre-auth RCE Command injection	Critical9.8	—	40.8%	May 12, 2017
43Plan	CVE-2017-0223No exploit	A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory.microsoft · edge · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	14.6%	May 15, 2017
43Plan	CVE-2017-0252No exploit	A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory.microsoft · edge · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	13.3%	May 15, 2017
34Monitor	CVE-2017-7478Proof of concept	OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet.openvpn · openvpn · CWE-617 Pre-auth Denial of service	High7.5	—	13.7%	May 15, 2017
64This week	CVE-2016-10372Weaponized	The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP porteir · d1000 modem firmware · CWE-264 pre-auth RCE	Critical9.8	—	81.7%	May 16, 2017
53Plan	CVE-2017-6079Proof of concept	The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such aribboncommunications · edgemarc firmware Pre-auth	Critical9.8	—	46.8%	May 16, 2017
69This week	CVE-2017-8917Weaponized	SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors.joomla · joomla\! · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	99.8%	May 17, 2017
58Plan	CVE-2017-6622Proof of concept	A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass aucisco · prime collaboration provisioning · CWE-264 pre-auth RCE Auth bypass Command injection	Critical9.8	—	62.1%	May 18, 2017
48Plan	CVE-2017-5173Proof of concept	An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0geutebrueck · ip camera g-cam efd-2250 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	29.5%	May 18, 2017
55Plan	CVE-2017-5174Proof of concept	An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12.geutebruck · ip camera g-cam efd-2250 firmware · CWE-288 pre-auth RCE Auth bypass	Critical9.8	—	52.2%	May 18, 2017
35Monitor	CVE-2017-5177Proof of concept	A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior.vipa controls · winplc7 firmware · CWE-121 pre-auth RCE Memory safety Denial of service	High7.5	—	17.7%	May 18, 2017
40Plan	CVE-2017-6048Weaponized	A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c asatel-iberia · sennet multitask meter · CWE-77 RCE Command injection	High8.8	—	15.5%	May 18, 2017
54Plan	CVE-2017-9080Weaponized	PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed.playsms · playsms · CWE-434 RCE File upload	High8.8	—	62.3%	May 19, 2017
51Plan	CVE-2017-7504Proof of concept	HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Appliredhat · jboss enterprise application platform · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	38.8%	May 19, 2017
61This week	CVE-2017-9100No exploit	login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spacdlink · dir-600m firmware · CWE-287 Pre-auth Auth bypass	High8.8	—	85.4%	May 21, 2017
34Monitor	CVE-2017-9024Proof of concept	Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor (SCA) 3.0, has a Directory Traversal issue in its secure-bytes · secure cisco auditor · CWE-22 Pre-auth Path traversal	High7.5	—	12.1%	May 21, 2017
62This week	CVE-2017-9101Weaponized	import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header aplaysms · playsms · CWE-434 pre-auth RCE File upload	Critical9.8	—	76.7%	May 21, 2017
42Plan	CVE-2017-2523Proof of concept	An issue was discovered in certain Apple products.apple · iphone os · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	11.4%	May 22, 2017
38Monitor	CVE-2017-2536Proof of concept	An issue was discovered in certain Apple products.apple · safari · CWE-119 pre-auth RCE Memory safety	High8.8	—	10.4%	May 22, 2017
40Plan	CVE-2017-2547Proof of concept	An issue was discovered in certain Apple products.apple · safari · CWE-119 pre-auth RCE Memory safety	High8.8	—	15.5%	May 22, 2017
40Plan	CVE-2017-4915Weaponized	VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files.vmware · workstation player · CWE-863 Local privilege escalation Broken access control (IDOR)	High7.8	—	5.4%	May 22, 2017
62This week	CVE-2017-1092Weaponized	IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servibm · informix open admin tool pre-auth RCE	Critical9.8	—	75.7%	May 22, 2017
51Plan	CVE-2015-4455Proof of concept	Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPraviary image editor add-on for gravity forms project · aviary image editor add-on for gravity forms · CWE-434 pre-auth RCE File upload	Critical9.8	—	40.5%	May 23, 2017
37Monitor	CVE-2015-5468Proof of concept	Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrarwpshopstyling · wp e-commerce shop styling · CWE-22 Pre-auth Path traversal	High7.5	—	24.0%	May 23, 2017
33Monitor	CVE-2015-5469Proof of concept	Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary filmdc youtube downloader project · mdc youtube downloader · CWE-22 Pre-auth Path traversal	High7.5	—	10.1%	May 23, 2017
60This week	CVE-2016-10073Weaponized	The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent mesvanillaforums · vanilla · CWE-200 Pre-auth Info leak	High7.5	—	83.6%	May 23, 2017
41Plan	CVE-2016-7979No exploit	Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code bartifex · ghostscript · CWE-704 pre-auth RCE	Critical9.8	—	6.4%	May 23, 2017
35Monitor	CVE-2017-9217No exploit	systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty qusystemd project · systemd · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	15.3%	May 24, 2017
40Plan	CVE-2017-2824Proof of concept	An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X.zabbix · zabbix · CWE-78 pre-auth RCE Command injection	High8.1	—	25.8%	May 24, 2017
59Plan	CVE-2016-4977Proof of concept	When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_tpivotal · spring security oauth · CWE-19 RCE	High8.8	—	79.1%	May 25, 2017
83Now	CVE-2017-6862Weaponized	NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypnetgear · wnr2000 firmware · CWE-120 pre-auth RCE Auth bypass Memory safety	Critical9.8	KEV	45.7%	May 26, 2017
27Monitor	CVE-2017-8535Proof of concept	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPmicrosoft · windows defender · CWE-119 Memory safety Denial of service	Medium5.5	—	16.8%	May 26, 2017
27Monitor	CVE-2017-8536Proof of concept	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPmicrosoft · windows defender · CWE-119 Memory safety Denial of service	Medium5.5	—	16.8%	May 26, 2017
27Monitor	CVE-2017-8537Proof of concept	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPmicrosoft · windows defender · CWE-119 Memory safety Denial of service	Medium5.5	—	16.8%	May 26, 2017
46Plan	CVE-2017-8538Proof of concept	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPmicrosoft · forefront security · CWE-119 RCE Memory safety	High7.8	—	50.0%	May 26, 2017
83Now	CVE-2017-8540Weaponized	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPmicrosoft · malware protection engine · CWE-787 RCE Memory safety	High7.8	KEV	71.8%	May 26, 2017
45Plan	CVE-2017-8541Proof of concept	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPmicrosoft · forefront security · CWE-119 RCE Memory safety	High7.8	—	48.1%	May 26, 2017
60This week	CVE-2017-9232Weaponized	Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing canonical · juju · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	48.5%	May 27, 2017
99Now	CVE-2017-7494Weaponized	Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious clisamba · samba · CWE-94 pre-auth RCE	Critical9.8	KEV	99.4%	May 30, 2017

CVE-2015-8257
40Plan
The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell metacharacters in t
HighCVSS 8.8Proof of conceptEPSS 17%
- RCE
- Command injection
axis · network camera firmwareMay 2, 2017
CVE-2016-5810
40Plan
upAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated administrators to obtain sensitive password information
MediumCVSS 4.9WeaponizedEPSS 15%
- Info leak
advantech · webaccessMay 2, 2017
CVE-2017-5689
97Now
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (A
CriticalCVSS 9.8KEVWeaponizedEPSS 92%
- Pre-auth
intel · active management technology firmwareMay 2, 2017
CVE-2016-10367
35Monitor
In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security
HighCVSS 7.5Proof of conceptEPSS 16%
- Pre-auth
- Path traversal
opsview · opsviewMay 3, 2017
CVE-2017-8295
31Monitor
WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to re
MediumCVSS 5.9Proof of conceptEPSS 26%
- Pre-auth
wordpress · wordpressMay 4, 2017
CVE-2017-8779
60This week
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data
HighCVSS 7.5WeaponizedEPSS 81%
- Pre-auth
- Denial of service
rpcbind project · rpcbindMay 4, 2017
CVE-2016-7053
37Monitor
CMS Null dereference
HighCVSS 7.5No exploitEPSS 21%
- Pre-auth
- Memory safety
- Denial of service
openssl · opensslMay 4, 2017
CVE-2016-7054
40Plan
ChaCha20/Poly1305 heap-buffer-overflow
HighCVSS 7.5Proof of conceptEPSS 32%
- Pre-auth
- Broken access control (IDOR)
- Denial of service
openssl · opensslMay 4, 2017
CVE-2017-3730
47Plan
Bad (EC)DHE parameters cause a client crash
HighCVSS 7.5Proof of conceptEPSS 55%
- Pre-auth
- Memory safety
- Denial of service
openssl · opensslMay 4, 2017
CVE-2017-3731
47Plan
Truncated packet could crash via OOB read
HighCVSS 7.5No exploitEPSS 57%
- Pre-auth
- Memory safety
- Denial of service
openssl · opensslMay 4, 2017
CVE-2017-3732
28Monitor
BN_mod_exp may produce incorrect results on x86_64
MediumCVSS 5.9No exploitEPSS 15%
- Pre-auth
- Info leak
openssl · opensslMay 4, 2017
CVE-2017-3733
34Monitor
Encrypt-Then-Mac renegotiation crash
HighCVSS 7.5No exploitEPSS 12%
- Pre-auth
- Denial of service
openssl · opensslMay 4, 2017
CVE-2016-7055
27Monitor
There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that
MediumCVSS 5.9No exploitEPSS 14%
- Pre-auth
- Denial of service
openssl · opensslMay 4, 2017
CVE-2017-8303
46Plan
An issue was discovered on Accellion FTA devices before FTA_9_12_180.
CriticalCVSS 9.8No exploitEPSS 24%
- pre-auth RCE
accellion · file transfer applianceMay 5, 2017
CVE-2017-7921
99Now
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I
CriticalCVSS 9.8KEVWeaponizedEPSS 99%
- Pre-auth
- Auth bypass
hikvision · ds-2cd2032-i firmwareMay 5, 2017
CVE-2017-7925
54Plan
A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-I
CriticalCVSS 9.8Proof of conceptEPSS 51%
- Pre-auth
dahuasecurity · dh-ipc-hdbw23a0rn-zs firmwareMay 5, 2017
CVE-2017-7927
40Plan
A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-
HighCVSS 7.3No exploitEPSS 36%
- Pre-auth
- Auth bypass
dahuasecurity · dh-ipc-hdbw23a0rn-zs firmwareMay 5, 2017
CVE-2017-0290
55Plan
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP
HighCVSS 7.8Proof of conceptEPSS 81%
- RCE
- Memory safety
microsoft · forefront securityMay 9, 2017
CVE-2017-3068
41Plan
Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine.
HighCVSS 8.8Proof of conceptEPSS 20%
- pre-auth RCE
- Memory safety
adobe · flash player desktop runtimeMay 9, 2017
CVE-2017-8895
60This week
In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulner
CriticalCVSS 9.8WeaponizedEPSS 71%
- pre-auth RCE
- Memory safety
veritas · backup execMay 10, 2017
CVE-2017-8798
46Plan
Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly h
CriticalCVSS 9.8Proof of conceptEPSS 24%
- Pre-auth
- Memory safety
miniupnp project · miniupnpdMay 10, 2017
CVE-2017-0190
30Monitor
The GDI component in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8
MediumCVSS 4.4No exploitEPSS 43%
- Info leak
microsoft · windows 10May 12, 2017
CVE-2017-0213
84Now
Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2
HighCVSS 7.3KEVWeaponizedEPSS 84%
- Local privilege escalation
microsoft · windows 10 1507May 12, 2017
CVE-2017-0222
74This week
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor
HighCVSS 8.8KEVWeaponizedEPSS 29%
- pre-auth RCE
- Memory safety
microsoft · internet explorerMay 12, 2017
CVE-2017-0224
33Monitor
A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "Sc
HighCVSS 7.5No exploitEPSS 11%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 12, 2017
CVE-2017-0227
34Monitor
A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects
HighCVSS 7.5No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 12, 2017
CVE-2017-0228
35Monitor
A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka
HighCVSS 7.5No exploitEPSS 16%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 12, 2017
CVE-2017-0229
33Monitor
A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Sc
HighCVSS 7.5No exploitEPSS 10%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 12, 2017
CVE-2017-0230
33Monitor
A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Sc
HighCVSS 7.5No exploitEPSS 10%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 12, 2017
CVE-2017-0234
41Plan
A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in
HighCVSS 7.5No exploitEPSS 38%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 12, 2017
CVE-2017-0235
33Monitor
A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in
HighCVSS 7.5No exploitEPSS 11%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 12, 2017
CVE-2017-0236
39Monitor
A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in
HighCVSS 7.5No exploitEPSS 31%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 12, 2017
CVE-2017-0238
35Monitor
A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka "Sc
HighCVSS 7.5No exploitEPSS 18%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 12, 2017
CVE-2017-0240
34Monitor
A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects
HighCVSS 7.5No exploitEPSS 14%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 12, 2017
CVE-2017-0247
35Monitor
A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests.
HighCVSS 7.5No exploitEPSS 16%
- Pre-auth
microsoft · asp.net model view controllerMay 12, 2017
CVE-2017-0254
37Monitor
Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Offi
HighCVSS 7.8No exploitEPSS 19%
- RCE
- Memory safety
microsoft · officeMay 12, 2017
CVE-2017-0261
84Now
Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly
HighCVSS 7.8KEVWeaponizedEPSS 78%
- RCE
- Memory safety
microsoft · officeMay 12, 2017
CVE-2017-0262
85Now
Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly
HighCVSS 7.8KEVWeaponizedEPSS 81%
- RCE
microsoft · officeMay 12, 2017
CVE-2017-0263
64This week
The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Window
HighCVSS 7.8KEVWeaponizedEPSS 10%
- Local privilege escalation
- Memory safety
microsoft · windows 10 1507May 12, 2017
CVE-2017-0264
35Monitor
Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory,
HighCVSS 7.8No exploitEPSS 13%
- RCE
- Memory safety
microsoft · powerpoint for macMay 12, 2017
CVE-2017-0265
37Monitor
Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory,
HighCVSS 7.8No exploitEPSS 18%
- RCE
- Memory safety
microsoft · powerpoint for macMay 12, 2017
CVE-2017-0266
41Plan
A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects
HighCVSS 7.5No exploitEPSS 35%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 12, 2017
CVE-2017-0267
27Monitor
Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2
MediumCVSS 5.9No exploitEPSS 12%
- Pre-auth
- Info leak
microsoft · windows 10May 12, 2017
CVE-2017-0271
27Monitor
Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2
MediumCVSS 5.9No exploitEPSS 13%
- Pre-auth
- Info leak
microsoft · windows 10May 12, 2017
CVE-2017-0272
37Monitor
The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows S
HighCVSS 8.1No exploitEPSS 17%
- pre-auth RCE
microsoft · windows 10May 12, 2017
CVE-2017-0277
31Monitor
The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows S
HighCVSS 7.0No exploitEPSS 10%
- pre-auth RCE
microsoft · windows 10May 12, 2017
CVE-2017-0278
31Monitor
The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows S
HighCVSS 7.0No exploitEPSS 10%
- pre-auth RCE
microsoft · windows 10May 12, 2017
CVE-2017-0279
31Monitor
The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows S
HighCVSS 7.0No exploitEPSS 10%
- pre-auth RCE
microsoft · windows 10May 12, 2017
CVE-2017-0281
36Monitor
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web App
HighCVSS 7.8No exploitEPSS 15%
- RCE
microsoft · officeMay 12, 2017
CVE-2016-10329
51Plan
Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code v
CriticalCVSS 9.8No exploitEPSS 40%
- pre-auth RCE
- Command injection
synology · photo stationMay 12, 2017
CVE-2017-0223
43Plan
A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory.
CriticalCVSS 9.8No exploitEPSS 14%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 15, 2017
CVE-2017-0252
43Plan
A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory.
CriticalCVSS 9.8No exploitEPSS 13%
- pre-auth RCE
- Memory safety
microsoft · edgeMay 15, 2017
CVE-2017-7478
34Monitor
OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet.
HighCVSS 7.5Proof of conceptEPSS 13%
- Pre-auth
- Denial of service
openvpn · openvpnMay 15, 2017
CVE-2016-10372
64This week
The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port
CriticalCVSS 9.8WeaponizedEPSS 81%
- pre-auth RCE
eir · d1000 modem firmwareMay 16, 2017
CVE-2017-6079
53Plan
The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such a
CriticalCVSS 9.8Proof of conceptEPSS 46%
- Pre-auth
ribboncommunications · edgemarc firmwareMay 16, 2017
CVE-2017-8917
69This week
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors.
CriticalCVSS 9.8WeaponizedEPSS 99%
- pre-auth RCE
- SQL injection
joomla · joomla\!May 17, 2017
CVE-2017-6622
58Plan
A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass au
CriticalCVSS 9.8Proof of conceptEPSS 62%
- pre-auth RCE
- Auth bypass
- Command injection
cisco · prime collaboration provisioningMay 18, 2017
CVE-2017-5173
48Plan
An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0
CriticalCVSS 9.8Proof of conceptEPSS 29%
- pre-auth RCE
- Command injection
geutebrueck · ip camera g-cam efd-2250 firmwareMay 18, 2017
CVE-2017-5174
55Plan
An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12.
CriticalCVSS 9.8Proof of conceptEPSS 52%
- pre-auth RCE
- Auth bypass
geutebruck · ip camera g-cam efd-2250 firmwareMay 18, 2017
CVE-2017-5177
35Monitor
A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior.
HighCVSS 7.5Proof of conceptEPSS 17%
- pre-auth RCE
- Memory safety
- Denial of service
vipa controls · winplc7 firmwareMay 18, 2017
CVE-2017-6048
40Plan
A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c a
HighCVSS 8.8WeaponizedEPSS 15%
- RCE
- Command injection
satel-iberia · sennet multitask meterMay 18, 2017
CVE-2017-9080
54Plan
PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed.
HighCVSS 8.8WeaponizedEPSS 62%
- RCE
- File upload
playsms · playsmsMay 19, 2017
CVE-2017-7504
51Plan
HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Appli
CriticalCVSS 9.8Proof of conceptEPSS 38%
- pre-auth RCE
- Deserialization
redhat · jboss enterprise application platformMay 19, 2017
CVE-2017-9100
61This week
login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spac
HighCVSS 8.8No exploitEPSS 85%
- Pre-auth
- Auth bypass
dlink · dir-600m firmwareMay 21, 2017
CVE-2017-9024
34Monitor
Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor (SCA) 3.0, has a Directory Traversal issue in its
HighCVSS 7.5Proof of conceptEPSS 12%
- Pre-auth
- Path traversal
secure-bytes · secure cisco auditorMay 21, 2017
CVE-2017-9101
62This week
import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header a
CriticalCVSS 9.8WeaponizedEPSS 76%
- pre-auth RCE
- File upload
playsms · playsmsMay 21, 2017
CVE-2017-2523
42Plan
An issue was discovered in certain Apple products.
CriticalCVSS 9.8Proof of conceptEPSS 11%
- pre-auth RCE
- Memory safety
apple · iphone osMay 22, 2017
CVE-2017-2536
38Monitor
An issue was discovered in certain Apple products.
HighCVSS 8.8Proof of conceptEPSS 10%
- pre-auth RCE
- Memory safety
apple · safariMay 22, 2017
CVE-2017-2547
40Plan
An issue was discovered in certain Apple products.
HighCVSS 8.8Proof of conceptEPSS 15%
- pre-auth RCE
- Memory safety
apple · safariMay 22, 2017
CVE-2017-4915
40Plan
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files.
HighCVSS 7.8WeaponizedEPSS 5%
- Local privilege escalation
- Broken access control (IDOR)
vmware · workstation playerMay 22, 2017
CVE-2017-1092
62This week
IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows serv
CriticalCVSS 9.8WeaponizedEPSS 75%
- pre-auth RCE
ibm · informix open admin toolMay 22, 2017
CVE-2015-4455
51Plan
Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPr
CriticalCVSS 9.8Proof of conceptEPSS 40%
- pre-auth RCE
- File upload
aviary image editor add-on for gravity forms project · aviary image editor add-on for gravity formsMay 23, 2017
CVE-2015-5468
37Monitor
Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrar
HighCVSS 7.5Proof of conceptEPSS 24%
- Pre-auth
- Path traversal
wpshopstyling · wp e-commerce shop stylingMay 23, 2017
CVE-2015-5469
33Monitor
Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary fil
HighCVSS 7.5Proof of conceptEPSS 10%
- Pre-auth
- Path traversal
mdc youtube downloader project · mdc youtube downloaderMay 23, 2017
CVE-2016-10073
60This week
The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent mes
HighCVSS 7.5WeaponizedEPSS 83%
- Pre-auth
- Info leak
vanillaforums · vanillaMay 23, 2017
CVE-2016-7979
41Plan
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code b
CriticalCVSS 9.8No exploitEPSS 6%
- pre-auth RCE
artifex · ghostscriptMay 23, 2017
CVE-2017-9217
35Monitor
systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty qu
HighCVSS 7.5No exploitEPSS 15%
- Pre-auth
- Memory safety
- Denial of service
systemd project · systemdMay 24, 2017
CVE-2017-2824
40Plan
An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X.
HighCVSS 8.1Proof of conceptEPSS 25%
- pre-auth RCE
- Command injection
zabbix · zabbixMay 24, 2017
CVE-2016-4977
59Plan
When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_t
HighCVSS 8.8Proof of conceptEPSS 79%
- RCE
pivotal · spring security oauthMay 25, 2017
CVE-2017-6862
83Now
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication byp
CriticalCVSS 9.8KEVWeaponizedEPSS 45%
- pre-auth RCE
- Auth bypass
- Memory safety
netgear · wnr2000 firmwareMay 26, 2017
CVE-2017-8535
27Monitor
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP
MediumCVSS 5.5Proof of conceptEPSS 16%
- Memory safety
- Denial of service
microsoft · windows defenderMay 26, 2017
CVE-2017-8536
27Monitor
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP
MediumCVSS 5.5Proof of conceptEPSS 16%
- Memory safety
- Denial of service
microsoft · windows defenderMay 26, 2017
CVE-2017-8537
27Monitor
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP
MediumCVSS 5.5Proof of conceptEPSS 16%
- Memory safety
- Denial of service
microsoft · windows defenderMay 26, 2017
CVE-2017-8538
46Plan
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP
HighCVSS 7.8Proof of conceptEPSS 50%
- RCE
- Memory safety
microsoft · forefront securityMay 26, 2017
CVE-2017-8540
83Now
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP
HighCVSS 7.8KEVWeaponizedEPSS 71%
- RCE
- Memory safety
microsoft · malware protection engineMay 26, 2017
CVE-2017-8541
45Plan
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP
HighCVSS 7.8Proof of conceptEPSS 48%
- RCE
- Memory safety
microsoft · forefront securityMay 26, 2017
CVE-2017-9232
60This week
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing
CriticalCVSS 9.8WeaponizedEPSS 48%
- Pre-auth
- Broken access control (IDOR)
canonical · jujuMay 27, 2017
CVE-2017-7494
99Now
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious cli
CriticalCVSS 9.8KEVWeaponizedEPSS 99%
- pre-auth RCE
samba · sambaMay 30, 2017