Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: November 2017

50 records · 2 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2017-16352
    39Monitor

    GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of t

    HighCVSS 8.8Proof of conceptEPSS 14%

    graphicsmagick · graphicsmagickNov 1, 2017

  • CVE-2017-16353
    30Monitor

    GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/descr

    MediumCVSS 6.5Proof of conceptEPSS 13%

    graphicsmagick · graphicsmagickNov 1, 2017

  • CVE-2017-12243
    54Plan

    A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco

    HighCVSS 7.8Proof of conceptEPSS 77%

    cisco · unified computing system manager firmwareNov 2, 2017

  • CVE-2017-3736
    29Monitor

    There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g.

    MediumCVSS 6.5No exploitEPSS 10%

    openssl · opensslNov 2, 2017

  • CVE-2017-16524
    44Plan

    Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows re

    HighCVSS 8.8WeaponizedEPSS 30%

    samsung · srn-1670dNov 6, 2017

  • CVE-2017-14016
    60This week

    A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817.

    MediumCVSS 6.3WeaponizedEPSS 16%

    advantech · webaccessNov 6, 2017

  • CVE-2017-2893
    37Monitor

    An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8.

    HighCVSS 7.5No exploitEPSS 24%

    cesanta · mongooseNov 7, 2017

  • CVE-2017-2894
    48Plan

    An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8.

    CriticalCVSS 9.8No exploitEPSS 31%

    cesanta · mongooseNov 7, 2017

  • CVE-2017-16642
    38Monitor

    In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' a

    HighCVSS 7.5Proof of conceptEPSS 26%

    php · phpNov 7, 2017

  • CVE-2017-11512
    54Plan

    The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the nam

    HighCVSS 7.5Proof of conceptEPSS 79%

    manageengine · servicedeskNov 8, 2017

  • CVE-2017-16651
    75This week

    Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's file

    HighCVSS 7.8KEVWeaponizedEPSS 45%

    roundcube · webmailNov 9, 2017

  • CVE-2015-7501
    65This week

    Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Appli

    CriticalCVSS 9.8Proof of conceptEPSS 85%

    redhat · data gridNov 9, 2017

  • CVE-2017-12969
    38Monitor

    Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to c

    HighCVSS 8.8Proof of conceptEPSS 10%

    avaya · ip office contact centerNov 9, 2017

  • CVE-2017-16249
    60This week

    The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the se

    HighCVSS 7.5WeaponizedEPSS 59%

    brother · dcp-j132w firmwareNov 9, 2017

  • CVE-2017-16562
    47Plan

    The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote attackers to bypass authentic

    CriticalCVSS 9.8Proof of conceptEPSS 27%

    userproplugin · userproNov 9, 2017

  • CVE-2017-16780
    41Plan

    The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file.

    CriticalCVSS 9.8Proof of conceptEPSS 5%

    mybb · mybbNov 10, 2017

  • CVE-2017-16806
    60This week

    The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal.

    HighCVSS 7.5WeaponizedEPSS 91%

    ulterius · ulterius serverNov 13, 2017

  • CVE-2016-8610
    42Plan

    A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processi

    HighCVSS 7.5Proof of conceptEPSS 39%

    openssl · opensslNov 13, 2017

  • CVE-2017-12635
    69This week

    Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x b

    CriticalCVSS 9.8WeaponizedEPSS 99%

    apache · couchdbNov 14, 2017

  • CVE-2017-12636
    55Plan

    CouchDB administrative users can configure the database server via HTTP(S).

    HighCVSS 7.2WeaponizedEPSS 90%

    apache · couchdbNov 14, 2017

  • CVE-2017-11834
    25Monitor

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2

    MediumCVSS 5.3No exploitEPSS 12%

    microsoft · internet explorerNov 14, 2017

  • CVE-2017-11839
    49Plan

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take c

    HighCVSS 7.5Proof of conceptEPSS 62%

    microsoft · edgeNov 14, 2017

  • CVE-2017-11840
    48Plan

    ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an att

    HighCVSS 7.5Proof of conceptEPSS 59%

    microsoft · chakracoreNov 14, 2017

  • CVE-2017-11841
    48Plan

    ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an att

    HighCVSS 7.5Proof of conceptEPSS 59%

    microsoft · chakracoreNov 14, 2017

  • CVE-2017-11853
    25Monitor

    Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Server 2012 and R2, Windows 10 Gold, 1511, 1607

    MediumCVSS 5.5No exploitEPSS 10%

    microsoft · windows 10Nov 14, 2017

  • CVE-2017-11855
    45Plan

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2

    HighCVSS 7.5Proof of conceptEPSS 48%

    microsoft · internet explorerNov 14, 2017

  • CVE-2017-11861
    49Plan

    Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user

    HighCVSS 7.5Proof of conceptEPSS 64%

    microsoft · chakracoreNov 14, 2017

  • CVE-2017-11870
    48Plan

    ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as

    HighCVSS 7.5Proof of conceptEPSS 59%

    microsoft · chakracoreNov 14, 2017

  • CVE-2017-11873
    51Plan

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker

    HighCVSS 7.5Proof of conceptEPSS 69%

    microsoft · chakracoreNov 14, 2017

  • CVE-2017-11882
    91Now

    Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016

    HighCVSS 7.8KEVWeaponizedEPSS 99%

    microsoft · officeNov 14, 2017

  • CVE-2017-8700
    33Monitor

    ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restric

    HighCVSS 7.5No exploitEPSS 10%

    microsoft · asp.net coreNov 14, 2017

  • CVE-2017-15806
    35Monitor

    The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters use

    HighCVSS 8.1Proof of conceptEPSS 10%

    zetacomponents · mailNov 15, 2017

  • CVE-2017-16844
    43Plan

    Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of ser

    CriticalCVSS 9.8No exploitEPSS 12%

    procmail · procmailNov 16, 2017

  • CVE-2017-16846
    44Plan

    Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /manageApplications.do?method=AddSubGroup haid par

    CriticalCVSS 9.8No exploitEPSS 16%

    zohocorp · manageengine applications managerNov 16, 2017

  • CVE-2017-16847
    44Plan

    Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPla

    CriticalCVSS 9.8No exploitEPSS 16%

    zohocorp · manageengine applications managerNov 16, 2017

  • CVE-2017-16848
    44Plan

    Zoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do groupname parameter.

    CriticalCVSS 9.8No exploitEPSS 15%

    zohocorp · manageengine applications managerNov 16, 2017

  • CVE-2017-16849
    44Plan

    Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter.

    CriticalCVSS 9.8No exploitEPSS 16%

    zohocorp · manageengine applications managerNov 16, 2017

  • CVE-2017-16850
    44Plan

    Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a getReso

    CriticalCVSS 9.8No exploitEPSS 16%

    zohocorp · manageengine applications managerNov 16, 2017

  • CVE-2017-16851
    44Plan

    Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do widgetid parameter.

    CriticalCVSS 9.8No exploitEPSS 16%

    zohocorp · manageengine applications managerNov 16, 2017

  • CVE-2017-16877
    34Monitor

    ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive inf

    HighCVSS 7.5Proof of conceptEPSS 14%

    zeit · next.jsNov 17, 2017

  • CVE-2017-1000170
    48Plan

    jqueryFileTree 2.1.5 and older Directory Traversal

    HighCVSS 7.5Proof of conceptEPSS 59%

    jqueryfiletree project · jqueryfiletreeNov 17, 2017

  • CVE-2017-6168
    60This week

    On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3)

    HighCVSS 7.4WeaponizedEPSS 19%

    f5 · big-ip ltmNov 17, 2017

  • CVE-2017-16894
    60This week

    In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct re

    HighCVSS 7.5WeaponizedEPSS 86%

    laravel · laravelNov 19, 2017

  • CVE-2017-16934
    43Plan

    The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin password via a frame.ht

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    dbltek · web serverNov 24, 2017

  • CVE-2017-16943
    53Plan

    The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a

    CriticalCVSS 9.8Proof of conceptEPSS 47%

    exim · eximNov 25, 2017

  • CVE-2017-16944
    49Plan

    The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service (infinit

    HighCVSS 7.5Proof of conceptEPSS 63%

    exim · eximNov 25, 2017

  • CVE-2017-15275
    36Monitor

    Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap

    HighCVSS 7.5No exploitEPSS 21%

    samba · sambaNov 27, 2017

  • CVE-2017-17058
    37Monitor

    The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/ema

    HighCVSS 7.5Proof of conceptEPSS 23%

    automattic · woocommerceNov 29, 2017

  • CVE-2017-13872
    60This week

    An issue was discovered in certain Apple products.

    HighCVSS 8.1WeaponizedEPSS 36%

    apple · mac os xNov 29, 2017

  • CVE-2017-8817
    42Plan

    The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and app

    CriticalCVSS 9.8No exploitEPSS 11%

    haxx · curlNov 29, 2017