Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: July 2017

59 records · 13 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2017-5943
    35Monitor

    Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain sensitive information

    HighCVSS 8.8No exploitEPSS 0%

    bestpractical · request trackerJul 3, 2017

  • CVE-2017-9248
    92Now

    Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Te

    CriticalCVSS 9.8KEVWeaponizedEPSS 75%

    progress · sitefinityJul 3, 2017

  • CVE-2017-10974
    54Plan

    Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080.

    HighCVSS 7.5Proof of conceptEPSS 81%

    yaws · yawsJul 7, 2017

  • CVE-2017-9791
    99Now

    The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message t

    CriticalCVSS 9.8KEVWeaponizedEPSS 98%

    apache · strutsJul 10, 2017

  • CVE-2017-0243
    37Monitor

    Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote

    HighCVSS 7.8No exploitEPSS 21%

    microsoft · business productivity serversJul 11, 2017

  • CVE-2017-8463
    37Monitor

    Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10

    HighCVSS 7.8No exploitEPSS 20%

    microsoft · windows 10Jul 11, 2017

  • CVE-2017-8501
    38Monitor

    Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory

    HighCVSS 7.8No exploitEPSS 22%

    microsoft · excelJul 11, 2017

  • CVE-2017-8502
    38Monitor

    Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory

    HighCVSS 7.8No exploitEPSS 23%

    microsoft · excelJul 11, 2017

  • CVE-2017-8565
    38Monitor

    Windows PowerShell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windo

    HighCVSS 8.1No exploitEPSS 18%

    microsoft · windows 10Jul 11, 2017

  • CVE-2017-8570
    88Now

    Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote

    HighCVSS 7.8KEVWeaponizedEPSS 89%

    microsoft · officeJul 11, 2017

  • CVE-2017-8588
    33Monitor

    Microsoft WordPad in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Window

    HighCVSS 7.0No exploitEPSS 17%

    microsoft · windows 10Jul 11, 2017

  • CVE-2017-8589
    47Plan

    Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15

    CriticalCVSS 9.8No exploitEPSS 26%

    microsoft · windows 10Jul 11, 2017

  • CVE-2017-8594
    45Plan

    Internet Explorer on Microsoft Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows an attacker to execute arbitrary code in th

    HighCVSS 7.5Proof of conceptEPSS 50%

    microsoft · internet explorerJul 11, 2017

  • CVE-2017-8601
    50Plan

    Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in th

    HighCVSS 7.5Proof of conceptEPSS 66%

    microsoft · edgeJul 11, 2017

  • CVE-2017-8611
    29Monitor

    Microsoft Edge on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows remote attackers to spoof web content via

    MediumCVSS 6.5No exploitEPSS 11%

    microsoft · edgeJul 11, 2017

  • CVE-2017-8617
    33Monitor

    Microsoft Edge in Windows 10 1703 Microsoft Edge allows a remote code execution vulnerability in the way affected Microsoft scripting engine

    HighCVSS 7.5No exploitEPSS 10%

    microsoft · edgeJul 11, 2017

  • CVE-2017-8618
    47Plan

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Window

    HighCVSS 7.5Proof of conceptEPSS 58%

    microsoft · internet explorerJul 11, 2017

  • CVE-2017-8619
    35Monitor

    Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way aff

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · edgeJul 11, 2017

  • CVE-2017-11165
    58Plan

    dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for th

    CriticalCVSS 9.8Proof of conceptEPSS 63%

    thermofisher · dt80 dex firmwareJul 12, 2017

  • CVE-2017-7529
    49Plan

    Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resultin

    HighCVSS 7.5Proof of conceptEPSS 62%

    f5 · nginxJul 13, 2017

  • CVE-2017-9787
    33Monitor

    When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack.

    HighCVSS 7.5No exploitEPSS 10%

    apache · strutsJul 13, 2017

  • CVE-2017-9788
    53Plan

    In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initi

    CriticalCVSS 9.1No exploitEPSS 56%

    apache · http serverJul 13, 2017

  • CVE-2017-0028
    45Plan

    A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory.

    CriticalCVSS 9.8No exploitEPSS 18%

    microsoft · edgeJul 17, 2017

  • CVE-2017-0152
    35Monitor

    A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Micros

    HighCVSS 8.1No exploitEPSS 10%

    microsoft · edgeJul 17, 2017

  • CVE-2017-0196
    31Monitor

    An information disclosure vulnerability in Microsoft scripting engine allows remote attackers to obtain sensitive information from process m

    MediumCVSS 6.5No exploitEPSS 18%

    microsoft · edgeJul 17, 2017

  • CVE-2017-1000002
    48Plan

    ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting

    CriticalCVSS 9.8WeaponizedEPSS 30%

    atutor · atutorJul 17, 2017

  • CVE-2017-1000028
    60This week

    Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Traversal vulnerability,

    HighCVSS 7.5WeaponizedEPSS 99%

    oracle · glassfish serverJul 17, 2017

  • CVE-2017-11346
    52Plan

    Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of

    CriticalCVSS 9.8Proof of conceptEPSS 43%

    zohocorp · manageengine desktop centralJul 17, 2017

  • CVE-2017-8011
    43Plan

    EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX

    CriticalCVSS 9.8No exploitEPSS 14%

    dell · emc m\&rJul 17, 2017

  • CVE-2017-6736
    86Now

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow

    HighCVSS 8.8KEVWeaponizedEPSS 70%

    cisco · iosJul 17, 2017

  • CVE-2017-6737
    79This week

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to r

    HighCVSS 8.8KEVWeaponizedEPSS 45%

    cisco · iosJul 17, 2017

  • CVE-2017-6738
    68This week

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow

    HighCVSS 8.8KEVWeaponizedEPSS 10%

    cisco · iosJul 17, 2017

  • CVE-2017-6739
    68This week

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to r

    HighCVSS 8.8KEVWeaponizedEPSS 10%

    cisco · iosJul 17, 2017

  • CVE-2017-6740
    68This week

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow

    HighCVSS 8.8KEVWeaponizedEPSS 11%

    cisco · iosJul 17, 2017

  • CVE-2017-6742
    71This week

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to r

    HighCVSS 8.8KEVWeaponizedEPSS 21%

    cisco · iosJul 17, 2017

  • CVE-2017-6743
    68This week

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow

    HighCVSS 8.8KEVWeaponizedEPSS 10%

    cisco · iosJul 17, 2017

  • CVE-2017-6744
    67This week

    The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow

    HighCVSS 8.8KEVWeaponizedEPSS 7%

    cisco · iosJul 17, 2017

  • CVE-2017-9811
    42Plan

    The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critic

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    kaspersky · anti-virus for linux serverJul 17, 2017

  • CVE-2017-9812
    33Monitor

    The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server

    HighCVSS 7.5Proof of conceptEPSS 11%

    kaspersky · anti-virus for linux serverJul 17, 2017

  • CVE-2017-11403
    43Plan

    The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a c

    HighCVSS 8.8No exploitEPSS 28%

    graphicsmagick · graphicsmagickJul 17, 2017

  • CVE-2017-6320
    38Monitor

    A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (2015-11-26) and v6.0.1

    HighCVSS 8.8Proof of conceptEPSS 11%

    barracuda · load balancer adcJul 18, 2017

  • CVE-2017-11435
    42Plan

    The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the managem

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    humaxdigital · hg100r firmwareJul 19, 2017

  • CVE-2017-11444
    43Plan

    Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    intelliants · subrion cmsJul 19, 2017

  • CVE-2017-11467
    61This week

    OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attacke

    CriticalCVSS 9.8WeaponizedEPSS 73%

    orientdb · orientdbJul 19, 2017

  • CVE-2017-9765
    39Monitor

    Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows

    HighCVSS 8.1No exploitEPSS 24%

    genivia · gsoapJul 19, 2017

  • CVE-2017-6316
    91Now

    Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID

    CriticalCVSS 9.8KEVWeaponizedEPSS 73%

    citrix · netscaler sd-wanJul 20, 2017

  • CVE-2017-9822
    93Now

    DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN site

    HighCVSS 8.8KEVWeaponizedEPSS 94%

    dnnsoftware · dotnetnukeJul 20, 2017

  • CVE-2017-11517
    48Plan

    Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute a

    CriticalCVSS 9.8WeaponizedEPSS 29%

    geutebrueck · gcoreJul 21, 2017

  • CVE-2017-9554
    44Plan

    An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers

    MediumCVSS 5.3WeaponizedEPSS 76%

    synology · diskstation managerJul 24, 2017

  • CVE-2015-2279
    44Plan

    cgi_test.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allows remote attackers to

    CriticalCVSS 9.8Proof of conceptEPSS 17%

    airlive · bu-2015 firmwareJul 24, 2017

  • CVE-2015-2280
    40Plan

    snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows re

    HighCVSS 8.8Proof of conceptEPSS 16%

    airlink101 · skyipcam1620w wireless n mpeg4 3gpp firmwareJul 24, 2017

  • CVE-2016-10401
    39Monitor

    ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root accou

    HighCVSS 8.8Proof of conceptEPSS 12%

    zyxel · pk5001z firmwareJul 25, 2017

  • CVE-2017-7659
    46Plan

    A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash

    HighCVSS 7.5No exploitEPSS 53%

    apache · http serverJul 26, 2017

  • CVE-2017-8869
    36Monitor

    Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a crafted .m3u file.

    HighCVSS 7.8WeaponizedEPSS 15%

    mediacoder · mediacoderJul 27, 2017

  • CVE-2016-10402
    34Monitor

    Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large r

    HighCVSS 7.8No exploitEPSS 10%

    avira · antivirusJul 27, 2017

  • CVE-2017-8870
    35Monitor

    Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file.

    HighCVSS 7.8WeaponizedEPSS 13%

    mediacoderhq · audiocoderJul 27, 2017

  • CVE-2016-0736
    45Plan

    In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured ciphers with possibly

    HighCVSS 7.5Proof of conceptEPSS 49%

    apache · http serverJul 27, 2017

  • CVE-2016-2161
    36Monitor

    In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continue

    HighCVSS 7.5No exploitEPSS 20%

    apache · http serverJul 27, 2017

  • CVE-2016-8743
    34Monitor

    Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response li

    HighCVSS 7.5No exploitEPSS 13%

    apache · http serverJul 27, 2017