Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: June 2017

82 records · 4 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2015-0936
    62This week

    Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtai

    CriticalCVSS 9.8WeaponizedEPSS 78%

    ceragon · fibeair ip-10 firmwareJun 1, 2017

  • CVE-2015-5473
    43Plan

    Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecifi

    CriticalCVSS 9.8No exploitEPSS 12%

    samsung · syncthru 6Jun 1, 2017

  • CVE-2017-8386
    39Monitor

    git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x b

    HighCVSS 8.8Proof of conceptEPSS 12%

    git · git-shellJun 1, 2017

  • CVE-2017-9347
    34Monitor

    In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference.

    HighCVSS 7.5Proof of conceptEPSS 13%

    wireshark · wiresharkJun 2, 2017

  • CVE-2017-9353
    34Monitor

    In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash.

    HighCVSS 7.5Proof of conceptEPSS 14%

    wireshark · wiresharkJun 2, 2017

  • CVE-2017-9380
    40Plan

    OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within th

    HighCVSS 8.8Proof of conceptEPSS 15%

    open-emr · openemrJun 2, 2017

  • CVE-2017-9416
    28Monitor

    Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local fi

    MediumCVSS 6.5Proof of conceptEPSS 5%

    odoo · odooJun 4, 2017

  • CVE-2017-9417
    58Plan

    Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue.

    CriticalCVSS 9.8Proof of conceptEPSS 63%

    broadcom · bcm43xx wi-fi chipset firmwareJun 4, 2017

  • CVE-2017-9430
    42Plan

    Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unsp

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    dnstracer project · dnstracerJun 5, 2017

  • CVE-2017-8835
    60This week

    SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350

    CriticalCVSS 9.8WeaponizedEPSS 61%

    peplink · b305hw2 firmwareJun 5, 2017

  • CVE-2017-5664
    35Monitor

    The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error

    HighCVSS 7.5No exploitEPSS 16%

    apache · tomcatJun 6, 2017

  • CVE-2017-9462
    42Plan

    In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbi

    HighCVSS 8.8WeaponizedEPSS 21%

    mercurial · mercurialJun 6, 2017

  • CVE-2017-9355
    37Monitor

    XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side

    HighCVSS 7.4Proof of conceptEPSS 26%

    subsonic · subsonicJun 7, 2017

  • CVE-2015-5175
    33Monitor

    Application plugins in Apache CXF Fediz before 1.1.3 and 1.2.x before 1.2.1 allow remote attackers to cause a denial of service.

    HighCVSS 7.5No exploitEPSS 10%

    apache · cxf fedizJun 7, 2017

  • CVE-2017-4901
    45Plan

    The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds m

    CriticalCVSS 9.9Proof of conceptEPSS 19%

    vmware · fusionJun 8, 2017

  • CVE-2017-6639
    50Plan

    A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unaut

    CriticalCVSS 9.8No exploitEPSS 35%

    cisco · prime data center network managerJun 8, 2017

  • CVE-2017-6640
    42Plan

    A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    cisco · prime data center network managerJun 8, 2017

  • CVE-2014-8687
    60This week

    Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by levera

    CriticalCVSS 9.8WeaponizedEPSS 43%

    seagate · business nas firmwareJun 8, 2017

  • CVE-2016-7836
    75This week

    SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with

    CriticalCVSS 9.8KEVWeaponizedEPSS 19%

    skygroup · skysea client viewJun 9, 2017

  • CVE-2017-8871
    30Monitor

    The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite

    MediumCVSS 6.5Proof of conceptEPSS 12%

    gnome · libcrocoJun 12, 2017

  • CVE-2017-9544
    60This week

    There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1.

    CriticalCVSS 9.8WeaponizedEPSS 24%

    echatserver · easy chat serverJun 12, 2017

  • CVE-2017-4971
    27Monitor

    An issue was discovered in Pivotal Spring Web Flow through 2.4.4.

    MediumCVSS 5.9Proof of conceptEPSS 14%

    broadcom · spring web flowJun 13, 2017

  • CVE-2017-0215
    32Monitor

    Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that

    MediumCVSS 5.3No exploitEPSS 35%

    microsoft · windows 10Jun 14, 2017

  • CVE-2017-0260
    37Monitor

    A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · officeJun 14, 2017

  • CVE-2017-0283
    47Plan

    Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gol

    HighCVSS 8.8Proof of conceptEPSS 39%

    microsoft · lyncJun 14, 2017

  • CVE-2017-0291
    37Monitor

    Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allo

    HighCVSS 7.8No exploitEPSS 20%

    microsoft · windows 10Jun 14, 2017

  • CVE-2017-0292
    38Monitor

    Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allo

    HighCVSS 7.8No exploitEPSS 24%

    microsoft · wordJun 14, 2017

  • CVE-2017-0294
    36Monitor

    Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15

    HighCVSS 7.8No exploitEPSS 17%

    microsoft · windows 10Jun 14, 2017

  • CVE-2017-8464
    92Now

    Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windo

    HighCVSS 8.8KEVWeaponizedEPSS 90%

    microsoft · windows 10 1511Jun 14, 2017

  • CVE-2017-8496
    45Plan

    Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user wh

    HighCVSS 7.5Proof of conceptEPSS 51%

    microsoft · edgeJun 14, 2017

  • CVE-2017-8506
    38Monitor

    A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R

    HighCVSS 7.8No exploitEPSS 24%

    microsoft · outlookJun 14, 2017

  • CVE-2017-8507
    37Monitor

    A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka "Microsoft Of

    HighCVSS 7.8No exploitEPSS 19%

    microsoft · outlookJun 14, 2017

  • CVE-2017-8510
    42Plan

    A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R

    HighCVSS 8.8No exploitEPSS 22%

    microsoft · excelJun 14, 2017

  • CVE-2017-8511
    37Monitor

    A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R

    HighCVSS 7.8No exploitEPSS 20%

    microsoft · officeJun 14, 2017

  • CVE-2017-8513
    36Monitor

    A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Micr

    HighCVSS 7.8No exploitEPSS 17%

    microsoft · powerpointJun 14, 2017

  • CVE-2017-8527
    41Plan

    Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold

    HighCVSS 8.8No exploitEPSS 19%

    microsoft · lyncJun 14, 2017

  • CVE-2017-8528
    41Plan

    Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gol

    HighCVSS 8.8No exploitEPSS 19%

    microsoft · officeJun 14, 2017

  • CVE-2017-8543
    91Now

    Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Win

    CriticalCVSS 9.8KEVWeaponizedEPSS 74%

    microsoft · windows 10 1507Jun 14, 2017

  • CVE-2017-8548
    50Plan

    Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to furth

    HighCVSS 7.5Proof of conceptEPSS 67%

    microsoft · edgeJun 14, 2017

  • CVE-2017-8550
    28Monitor

    A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skype

    MediumCVSS 5.4Proof of conceptEPSS 22%

    microsoft · officeJun 14, 2017

  • CVE-2017-8555
    21Monitor

    Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a page with malicious content when the Edge Cont

    MediumCVSS 4.3No exploitEPSS 12%

    microsoft · edgeJun 14, 2017

  • CVE-2017-8509
    40Plan

    A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R

    HighCVSS 8.8No exploitEPSS 18%

    microsoft · officeJun 15, 2017

  • CVE-2017-8512
    42Plan

    A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R

    HighCVSS 8.8No exploitEPSS 22%

    microsoft · officeJun 15, 2017

  • CVE-2017-8529
    30Monitor

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 all

    MediumCVSS 6.5Proof of conceptEPSS 14%

    microsoft · internet explorerJun 15, 2017

  • CVE-2017-9675
    34Monitor

    On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot.

    HighCVSS 7.5Proof of conceptEPSS 12%

    dlink · dir-605l firmwareJun 15, 2017

  • CVE-2017-8461
    40Plan

    Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RP

    HighCVSS 7.8WeaponizedEPSS 20%

    microsoft · windows server 2003Jun 15, 2017

  • CVE-2017-8487
    47Plan

    Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program

    HighCVSS 7.8Proof of conceptEPSS 54%

    microsoft · windows server 2003Jun 15, 2017

  • CVE-2017-9757
    46Plan

    IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell.

    HighCVSS 8.8WeaponizedEPSS 37%

    ipfire · ipfireJun 19, 2017

  • CVE-2017-1000364
    40Plan

    An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can b

    HighCVSS 7.4WeaponizedEPSS 5%

    linux · linux kernelJun 19, 2017

  • CVE-2017-1000373
    30Monitor

    The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that cause

    MediumCVSS 6.5Proof of conceptEPSS 13%

    openbsd · openbsdJun 19, 2017

  • CVE-2017-1000375
    45Plan

    NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily ma

    CriticalCVSS 9.8Proof of conceptEPSS 18%

    netbsd · netbsdJun 19, 2017

  • CVE-2017-3167
    45Plan

    In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authent

    CriticalCVSS 9.8No exploitEPSS 20%

    apache · http serverJun 19, 2017

  • CVE-2017-3169
    45Plan

    In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_pr

    CriticalCVSS 9.8No exploitEPSS 19%

    apache · http serverJun 19, 2017

  • CVE-2017-7668
    47Plan

    The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token()

    HighCVSS 7.5No exploitEPSS 57%

    apache · http serverJun 19, 2017

  • CVE-2017-7679
    51Plan

    In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Co

    CriticalCVSS 9.8Proof of conceptEPSS 39%

    apache · http serverJun 19, 2017

  • CVE-2017-3076
    46Plan

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module.

    CriticalCVSS 9.8Proof of conceptEPSS 24%

    adobe · flash playerJun 20, 2017

  • CVE-2017-3077
    46Plan

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser.

    CriticalCVSS 9.8Proof of conceptEPSS 22%

    adobe · flash playerJun 20, 2017

  • CVE-2017-3078
    48Plan

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) mod

    CriticalCVSS 9.8Proof of conceptEPSS 30%

    adobe · flash playerJun 20, 2017

  • CVE-2017-3081
    43Plan

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by mu

    CriticalCVSS 9.8No exploitEPSS 14%

    adobe · flash playerJun 20, 2017

  • CVE-2017-3082
    42Plan

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class.

    CriticalCVSS 9.8No exploitEPSS 11%

    adobe · flash playerJun 20, 2017

  • CVE-2017-3083
    43Plan

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality relat

    CriticalCVSS 9.8No exploitEPSS 14%

    adobe · flash playerJun 20, 2017

  • CVE-2017-2805
    47Plan

    An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera.

    CriticalCVSS 9.8No exploitEPSS 26%

    foscam · c1 hd indoor camera firmwareJun 21, 2017

  • CVE-2017-7918
    40Plan

    An Improper Access Control issue was discovered in Cambium Networks ePMP.

    MediumCVSS 6.8WeaponizedEPSS 6%

    cambium networks · epmp 1000 firmwareJun 21, 2017

  • CVE-2017-7922
    40Plan

    An Improper Privilege Management issue was discovered in Cambium Networks ePMP.

    HighCVSS 7.6WeaponizedEPSS 9%

    cambium networks · epmp 1000 firmwareJun 21, 2017

  • CVE-2012-6706
    42Plan

    A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and

    CriticalCVSS 9.8No exploitEPSS 10%

    sophos · threat detection engineJun 22, 2017

  • CVE-2017-3629
    40Plan

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).

    HighCVSS 7.8WeaponizedEPSS 5%

    oracle · solarisJun 22, 2017

  • CVE-2017-3630
    40Plan

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).

    MediumCVSS 5.3WeaponizedEPSS 4%

    oracle · solarisJun 22, 2017

  • CVE-2017-3631
    40Plan

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).

    MediumCVSS 5.3WeaponizedEPSS 5%

    oracle · solarisJun 22, 2017

  • CVE-2017-0176
    46Plan

    A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a r

    HighCVSS 8.1No exploitEPSS 45%

    microsoft · windows server 2003Jun 22, 2017

  • CVE-2015-9098
    43Plan

    In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Monitor, resulting in t

    CriticalCVSS 9.8Proof of conceptEPSS 14%

    red-gate · sql monitorJun 22, 2017

  • CVE-2017-9828
    64This week

    '/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which al

    CriticalCVSS 9.8No exploitEPSS 82%

    vivotek · network camera ib8369 firmwareJun 23, 2017

  • CVE-2017-9829
    51Plan

    '/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers t

    HighCVSS 7.5No exploitEPSS 68%

    vivotek · network camera ib8369 firmwareJun 23, 2017

  • CVE-2017-9833
    51Plan

    /cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root priv

    HighCVSS 7.5Proof of conceptEPSS 68%

    boa · boaJun 23, 2017

  • CVE-2015-3315
    40Plan

    Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files

    HighCVSS 7.8WeaponizedEPSS 4%

    redhat · automatic bug reporting toolJun 26, 2017

  • CVE-2017-6326
    62This week

    The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain

    CriticalCVSS 10.0WeaponizedEPSS 72%

    symantec · messaging gatewayJun 26, 2017

  • CVE-2017-9841
    99Now

    Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST da

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    phpunit project · phpunitJun 27, 2017

  • CVE-2014-6354
    34Monitor

    Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 allows re

    HighCVSS 7.5No exploitEPSS 12%

    microsoft · internet explorerJun 27, 2017

  • CVE-2015-7780
    29Monitor

    Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.

    MediumCVSS 6.5Proof of conceptEPSS 10%

    zohocorp · manageengine firewall analyzerJun 27, 2017

  • CVE-2017-9445
    46Plan

    In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small.

    HighCVSS 7.5No exploitEPSS 54%

    systemd project · systemdJun 28, 2017

  • CVE-2017-9993
    35Monitor

    FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streamin

    HighCVSS 7.5No exploitEPSS 16%

    ffmpeg · ffmpegJun 28, 2017

  • CVE-2017-8558
    44Plan

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server

    HighCVSS 7.8Proof of conceptEPSS 43%

    microsoft · windows defenderJun 29, 2017

  • CVE-2017-6026
    46Plan

    A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Versi

    CriticalCVSS 9.1Proof of conceptEPSS 31%

    schneider-electric · modicon m251 firmwareJun 29, 2017