By publication date

Exploited and new serious CVEs: December 2017

87 records · 2 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
49Plan	CVE-2017-11281Proof of concept	Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function.adobe · flash player · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	33.8%	Dec 1, 2017
49Plan	CVE-2017-11282Proof of concept	Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser.adobe · flash player · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	34.0%	Dec 1, 2017
52Plan	CVE-2017-11283No exploit	Adobe ColdFusion has an Untrusted Data Deserialization vulnerability.adobe · coldfusion · CWE-502 Pre-auth Deserialization	Critical9.8	—	42.7%	Dec 1, 2017
52Plan	CVE-2017-11284No exploit	Adobe ColdFusion has an Untrusted Data Deserialization vulnerability.adobe · coldfusion · CWE-502 Pre-auth Deserialization	Critical9.8	—	42.7%	Dec 1, 2017
35Monitor	CVE-2017-17085Proof of concept	In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash.wireshark · wireshark · CWE-754 Pre-auth Denial of service	High7.5	—	16.6%	Dec 1, 2017
33Monitor	CVE-2017-16953Proof of concept	connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE confizte · zxdsl 831cii firmware · CWE-287 Pre-auth Auth bypass	High7.5	—	11.2%	Dec 1, 2017
55Plan	CVE-2017-17090Proof of concept	An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asdigium · certified asterisk · CWE-459 Pre-auth Denial of service	High7.5	—	82.1%	Dec 1, 2017
38Monitor	CVE-2017-17095Proof of concept	tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflowlibtiff · libtiff · CWE-119 Pre-auth Memory safety	High8.8	—	10.6%	Dec 2, 2017
35Monitor	CVE-2017-17099Proof of concept	There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16.flexense · syncbreeze · CWE-119 Memory safety	High7.8	—	11.8%	Dec 3, 2017
57Plan	CVE-2017-15889Weaponized	Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to exsynology · diskstation manager · CWE-77 RCE Command injection	High8.8	—	73.6%	Dec 4, 2017
36Monitor	CVE-2017-16929Proof of concept	The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability explclaymore dual miner project · claymore dual miner · CWE-22 Path traversal	High8.1	—	12.8%	Dec 5, 2017
49Plan	CVE-2017-16930Proof of concept	The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due claymore dual miner project · claymore dual miner · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	34.3%	Dec 5, 2017
40Plan	CVE-2017-13156Weaponized	An elevation of privilege vulnerability in the Android system (art).google · android · CWE-434 File upload Local privilege escalation	High7.8	—	20.4%	Dec 6, 2017
47Plan	CVE-2017-3737No exploit	OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism.openssl · openssl · CWE-125 Pre-auth Memory safety	Medium5.9	—	78.6%	Dec 7, 2017
27Monitor	CVE-2017-3738No exploit	There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli.openssl · openssl · CWE-200 Pre-auth Info leak	Medium5.9	—	13.4%	Dec 7, 2017
39Monitor	CVE-2017-11937No exploit	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1,microsoft · malware protection engine · CWE-119 RCE Memory safety	High7.8	—	28.3%	Dec 7, 2017
37Monitor	CVE-2017-11940No exploit	The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1,microsoft · malware protection engine · CWE-119 RCE Memory safety	High7.8	—	19.7%	Dec 8, 2017
41Plan	CVE-2017-16921Proof of concept	In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who iotrs · otrs · CWE-78 RCE Command injection	High8.8	—	19.9%	Dec 8, 2017
39Monitor	CVE-2017-16368No exploit	An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035adobe · acrobat · CWE-119 pre-auth RCE Memory safety	High8.8	—	13.2%	Dec 9, 2017
39Monitor	CVE-2017-16381No exploit	An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035adobe · acrobat · CWE-119 pre-auth RCE Memory safety	High8.8	—	12.8%	Dec 9, 2017
38Monitor	CVE-2017-16383No exploit	An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035adobe · acrobat · CWE-119 Pre-auth Memory safety	High8.8	—	10.6%	Dec 9, 2017
39Monitor	CVE-2017-16385No exploit	An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035adobe · acrobat · CWE-119 pre-auth RCE Memory safety	High8.8	—	12.8%	Dec 9, 2017
39Monitor	CVE-2017-16392No exploit	An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035adobe · acrobat · CWE-119 pre-auth RCE Memory safety	High8.8	—	12.8%	Dec 9, 2017
40Plan	CVE-2017-16393No exploit	An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035adobe · acrobat · CWE-416 pre-auth RCE Memory safety	High8.8	—	16.9%	Dec 9, 2017
39Monitor	CVE-2017-16395No exploit	An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035adobe · acrobat · CWE-119 pre-auth RCE Memory safety	High8.8	—	12.8%	Dec 9, 2017
39Monitor	CVE-2017-16396No exploit	An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035adobe · acrobat · CWE-119 pre-auth RCE Memory safety	High8.8	—	12.8%	Dec 9, 2017
38Monitor	CVE-2017-16413No exploit	An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035adobe · acrobat · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.2%	Dec 9, 2017
38Monitor	CVE-2017-16415No exploit	An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035adobe · acrobat · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.2%	Dec 9, 2017
38Monitor	CVE-2017-16416No exploit	An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035adobe · acrobat · CWE-787 pre-auth RCE Memory safety	High8.8	—	11.2%	Dec 9, 2017
44Plan	CVE-2017-15708Proof of concept	In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI).apache · synapse · CWE-74 pre-auth RCE	Critical9.8	—	17.8%	Dec 11, 2017
99Now	CVE-2017-15944Weaponized	Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to executepaloaltonetworks · pan-os · CWE-20 pre-auth RCE	Critical9.8	KEV	98.3%	Dec 11, 2017
61This week	CVE-2017-17560Weaponized	An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices.westerndigital · my cloud pr4100 firmware · CWE-287 pre-auth RCE Auth bypass	Critical9.8	—	73.4%	Dec 12, 2017
91Now	CVE-2017-17562Weaponized	Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.embedthis · goahead pre-auth RCE	High8.1	KEV	97.1%	Dec 12, 2017
60This week	CVE-2017-1000385Weaponized	The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding.erlang · erlang\/otp · CWE-203 Pre-auth	Medium5.9	—	22.0%	Dec 12, 2017
40Plan	CVE-2017-11885Proof of concept	Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 andmicrosoft · windows 10 · CWE-20 RCE	Medium6.6	—	45.5%	Dec 12, 2017
45Plan	CVE-2017-11890Proof of concept	Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, microsoft · internet explorer · CWE-119 pre-auth RCE Memory safety	High7.5	—	50.0%	Dec 12, 2017
51Plan	CVE-2017-11893Proof of concept	ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in microsoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	68.4%	Dec 12, 2017
44Plan	CVE-2017-11903Proof of concept	Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Wimicrosoft · internet explorer · CWE-119 Pre-auth Memory safety	High7.5	—	46.8%	Dec 12, 2017
29Monitor	CVE-2017-11906Proof of concept	Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, anmicrosoft · internet explorer · CWE-200 Pre-auth Info leak	Medium5.3	—	25.1%	Dec 12, 2017
49Plan	CVE-2017-11907Proof of concept	Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Wimicrosoft · internet explorer · CWE-119 Pre-auth Memory safety	High7.5	—	64.7%	Dec 12, 2017
50Plan	CVE-2017-11909Proof of concept	ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of themicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	65.4%	Dec 12, 2017
50Plan	CVE-2017-11911Proof of concept	ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of themicrosoft · edge · CWE-119 pre-auth RCE Memory safety	High7.5	—	65.4%	Dec 12, 2017
49Plan	CVE-2017-11914Proof of concept	ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights microsoft · edge · CWE-119 Pre-auth Memory safety	High7.5	—	62.6%	Dec 12, 2017
49Plan	CVE-2017-11918Proof of concept	ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rmicrosoft · edge · CWE-119 Pre-auth Memory safety	High7.5	—	62.6%	Dec 12, 2017
26Monitor	CVE-2017-11934No exploit	Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the microsoft · office · CWE-200 Info leak	Medium5.5	—	12.5%	Dec 12, 2017
37Monitor	CVE-2017-11935No exploit	Microsoft Office 2016 Click-to-Run (C2R) allows a remote code execution vulnerability due to the way files are handled in memory, aka "Micromicrosoft · office · CWE-119 RCE Memory safety	High7.8	—	18.8%	Dec 12, 2017
60This week	CVE-2017-13098Weaponized	BouncyCastle JCE TLS Bleichenbacher/ROBOTbouncycastle · bc-java · CWE-203 Pre-auth	Medium5.9	—	24.2%	Dec 12, 2017
60This week	CVE-2017-13099Weaponized	wolfSSL Bleichenbacher/ROBOTwolfssl · wolfssl · CWE-203 Pre-auth	Medium5.9	—	27.3%	Dec 12, 2017
60This week	CVE-2017-17382Weaponized	Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before bcitrix · application delivery controller firmware · CWE-327 Pre-auth Weak crypto	Medium5.9	—	13.8%	Dec 13, 2017
60This week	CVE-2017-17427Weaponized	Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertext attack ("Bleichenbaradware · alteon firmware · CWE-203 Pre-auth	Medium5.9	—	15.5%	Dec 13, 2017
33Monitor	CVE-2017-17664No exploit	A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified Asdigium · asterisk · CWE-119 Pre-auth Memory safety Denial of service	Medium5.9	—	32.4%	Dec 13, 2017
44Plan	CVE-2017-17672Proof of concept	In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certavbulletin · vbulletin · CWE-502 Pre-auth Deserialization	Critical9.8	—	15.1%	Dec 13, 2017
18Monitor	CVE-2017-16355No exploit	In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if phusion · passenger · CWE-200 Info leak	Medium4.7	—	0.3%	Dec 14, 2017
57Plan	CVE-2017-17405Proof of concept	Ruby before 2.4.3 allows Net::FTP command injection.ruby-lang · ruby · CWE-78 pre-auth RCE Command injection	High8.8	—	73.8%	Dec 15, 2017
60This week	CVE-2017-12373Weaponized	A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550) devices could allocisco · adaptive security appliance 5505 firmware · CWE-200 Pre-auth Info leak	Medium5.9	—	12.7%	Dec 15, 2017
58Plan	CVE-2017-3191No exploit	D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page.d-link · dir-130 firmware · CWE-294 Pre-auth Auth bypass	Critical9.8	—	62.5%	Dec 15, 2017
51Plan	CVE-2017-3192No exploit	D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials.d-link · dir-130 firmware · CWE-522 Pre-auth Auth bypass Info leak	Critical9.8	—	39.4%	Dec 15, 2017
45Plan	CVE-2017-3195Proof of concept	Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflcommvault · edge · CWE-121 pre-auth RCE Memory safety	Critical9.8	—	21.3%	Dec 15, 2017
43Plan	CVE-2017-17731Proof of concept	DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.dedecms · dedecms · CWE-89 Pre-auth SQL injection	Critical9.8	—	13.1%	Dec 18, 2017
52Plan	CVE-2017-17733No exploit	Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request.maccms · maccms pre-auth RCE	Critical9.8	—	44.0%	Dec 18, 2017
43Plan	CVE-2017-17739Proof of concept	The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowibrightsign · 4k242 firmware · CWE-22 Pre-auth Path traversal	Critical9.8	—	11.8%	Dec 18, 2017
45Plan	CVE-2017-16949Proof of concept	An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress.accesspressthemes · anonymous post pro · CWE-434 Pre-auth File upload	Critical9.8	—	19.1%	Dec 18, 2017
64This week	CVE-2017-17105Weaponized	Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remzivif · pr115-204-p-rs firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	84.5%	Dec 18, 2017
44Plan	CVE-2017-17106No exploit	Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-binzivif · pr115-204-p-rs firmware · CWE-522 Pre-auth Info leak	Critical9.8	—	15.2%	Dec 18, 2017
42Plan	CVE-2017-17759Proof of concept	Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deletingconarc · ichannel Pre-auth	Critical9.8	—	11.2%	Dec 19, 2017
38Monitor	CVE-2017-15048Proof of concept	Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to executzoom · zoom · CWE-119 pre-auth RCE Memory safety	High8.8	—	10.1%	Dec 19, 2017
40Plan	CVE-2017-15049Proof of concept	The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell zoom · zoom · CWE-78 pre-auth RCE Command injection	High8.8	—	17.0%	Dec 19, 2017
60This week	CVE-2012-2576Weaponized	SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, asolarwinds · backup profiler · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	59.4%	Dec 20, 2017
51Plan	CVE-2017-5254Weaponized	In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the capability of changcambiumnetworks · epmp 1000 firmware · CWE-284 Broken access control (IDOR)	High8.8	—	53.7%	Dec 20, 2017
57Plan	CVE-2017-5255Weaponized	In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console cambiumnetworks · epmp 1000 firmware · CWE-78 RCE Command injection	High8.8	—	74.2%	Dec 20, 2017
45Plan	CVE-2017-5259Weaponized	In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available ucambiumnetworks · cnpilot r190v firmware · CWE-489	High8.8	—	32.3%	Dec 20, 2017
40Plan	CVE-2017-5260Weaponized	In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available icambiumnetworks · cnpilot r190v firmware · CWE-472	High8.8	—	8.1%	Dec 20, 2017
40Plan	CVE-2017-5261Weaponized	In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative consolecambiumnetworks · cnpilot r190v firmware · CWE-472 Path traversal	High8.8	—	8.8%	Dec 20, 2017
40Plan	CVE-2017-5262Weaponized	In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive informcambiumnetworks · cnpilot r190v firmware · CWE-200 Info leak	High8.0	—	4.8%	Dec 20, 2017
65This week	CVE-2017-17411Weaponized	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0.linksys · wvbr0 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	87.9%	Dec 21, 2017
60This week	CVE-2017-17692Weaponized	Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted Javasamsung · internet browser · CWE-200 Pre-auth Info leak	High7.5	—	78.8%	Dec 21, 2017
40Plan	CVE-2017-13861Weaponized	An issue was discovered in certain Apple products.apple · iphone os · CWE-119 RCE Local privilege escalation Memory safety	High7.8	—	14.8%	Dec 25, 2017
40Plan	CVE-2017-16995Weaponized	The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory clinux · linux kernel · CWE-119 Memory safety	High7.8	—	30.0%	Dec 27, 2017
45Plan	CVE-2017-17849Proof of concept	A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code ogetgosoft · getgo download manager · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	19.0%	Dec 27, 2017
53Plan	CVE-2017-17850No exploit	An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older.digium · asterisk · CWE-20 Pre-auth Denial of service	High7.5	—	75.3%	Dec 27, 2017
43Plan	CVE-2017-17888No exploit	cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001, hoytech · antiweb · CWE-78 RCE Command injection	High8.8	—	27.5%	Dec 27, 2017
54Plan	CVE-2014-8389No exploit	cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-airlive · bu-3026 firmware · CWE-78 pre-auth RCE Hard-coded credentials Command injection	Critical9.8	—	51.4%	Dec 27, 2017
60This week	CVE-2017-17932Weaponized	A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to allmediaserver · allmediaserver · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	54.2%	Dec 28, 2017
45Plan	CVE-2017-5641No exploit	Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by apache · flex blazeds · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	20.7%	Dec 28, 2017
60This week	CVE-2017-17968Weaponized	A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to exxi-soft · nettransport download manager · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	39.3%	Dec 29, 2017
37Monitor	CVE-2015-3302Proof of concept	The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remotethecartpress · thecartpress ecommerce shopping cart · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	22.2%	Dec 29, 2017
43Plan	CVE-2017-18001Proof of concept	Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorizetrustwave · secure web gateway · CWE-306 Pre-auth Auth bypass	Critical9.8	—	14.0%	Dec 31, 2017

CVE-2017-11281
49Plan
Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function.
CriticalCVSS 9.8Proof of conceptEPSS 33%
- pre-auth RCE
- Memory safety
adobe · flash playerDec 1, 2017
CVE-2017-11282
49Plan
Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser.
CriticalCVSS 9.8Proof of conceptEPSS 34%
- pre-auth RCE
- Memory safety
adobe · flash playerDec 1, 2017
CVE-2017-11283
52Plan
Adobe ColdFusion has an Untrusted Data Deserialization vulnerability.
CriticalCVSS 9.8No exploitEPSS 42%
- Pre-auth
- Deserialization
adobe · coldfusionDec 1, 2017
CVE-2017-11284
52Plan
Adobe ColdFusion has an Untrusted Data Deserialization vulnerability.
CriticalCVSS 9.8No exploitEPSS 42%
- Pre-auth
- Deserialization
adobe · coldfusionDec 1, 2017
CVE-2017-17085
35Monitor
In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash.
HighCVSS 7.5Proof of conceptEPSS 16%
- Pre-auth
- Denial of service
wireshark · wiresharkDec 1, 2017
CVE-2017-16953
33Monitor
connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE confi
HighCVSS 7.5Proof of conceptEPSS 11%
- Pre-auth
- Auth bypass
zte · zxdsl 831cii firmwareDec 1, 2017
CVE-2017-17090
55Plan
An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified As
HighCVSS 7.5Proof of conceptEPSS 82%
- Pre-auth
- Denial of service
digium · certified asteriskDec 1, 2017
CVE-2017-17095
38Monitor
tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow
HighCVSS 8.8Proof of conceptEPSS 10%
- Pre-auth
- Memory safety
libtiff · libtiffDec 2, 2017
CVE-2017-17099
35Monitor
There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16.
HighCVSS 7.8Proof of conceptEPSS 11%
- Memory safety
flexense · syncbreezeDec 3, 2017
CVE-2017-15889
57Plan
Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to ex
HighCVSS 8.8WeaponizedEPSS 73%
- RCE
- Command injection
synology · diskstation managerDec 4, 2017
CVE-2017-16929
36Monitor
The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability expl
HighCVSS 8.1Proof of conceptEPSS 12%
- Path traversal
claymore dual miner project · claymore dual minerDec 5, 2017
CVE-2017-16930
49Plan
The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due
CriticalCVSS 9.8Proof of conceptEPSS 34%
- pre-auth RCE
- Memory safety
claymore dual miner project · claymore dual minerDec 5, 2017
CVE-2017-13156
40Plan
An elevation of privilege vulnerability in the Android system (art).
HighCVSS 7.8WeaponizedEPSS 20%
- File upload
- Local privilege escalation
google · androidDec 6, 2017
CVE-2017-3737
47Plan
OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism.
MediumCVSS 5.9No exploitEPSS 78%
- Pre-auth
- Memory safety
openssl · opensslDec 7, 2017
CVE-2017-3738
27Monitor
There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli.
MediumCVSS 5.9No exploitEPSS 13%
- Pre-auth
- Info leak
openssl · opensslDec 7, 2017
CVE-2017-11937
39Monitor
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1,
HighCVSS 7.8No exploitEPSS 28%
- RCE
- Memory safety
microsoft · malware protection engineDec 7, 2017
CVE-2017-11940
37Monitor
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1,
HighCVSS 7.8No exploitEPSS 19%
- RCE
- Memory safety
microsoft · malware protection engineDec 8, 2017
CVE-2017-16921
41Plan
In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who i
HighCVSS 8.8Proof of conceptEPSS 19%
- RCE
- Command injection
otrs · otrsDec 8, 2017
CVE-2017-16368
39Monitor
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035
HighCVSS 8.8No exploitEPSS 13%
- pre-auth RCE
- Memory safety
adobe · acrobatDec 9, 2017
CVE-2017-16381
39Monitor
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035
HighCVSS 8.8No exploitEPSS 12%
- pre-auth RCE
- Memory safety
adobe · acrobatDec 9, 2017
CVE-2017-16383
38Monitor
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035
HighCVSS 8.8No exploitEPSS 10%
- Pre-auth
- Memory safety
adobe · acrobatDec 9, 2017
CVE-2017-16385
39Monitor
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035
HighCVSS 8.8No exploitEPSS 12%
- pre-auth RCE
- Memory safety
adobe · acrobatDec 9, 2017
CVE-2017-16392
39Monitor
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035
HighCVSS 8.8No exploitEPSS 12%
- pre-auth RCE
- Memory safety
adobe · acrobatDec 9, 2017
CVE-2017-16393
40Plan
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035
HighCVSS 8.8No exploitEPSS 16%
- pre-auth RCE
- Memory safety
adobe · acrobatDec 9, 2017
CVE-2017-16395
39Monitor
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035
HighCVSS 8.8No exploitEPSS 12%
- pre-auth RCE
- Memory safety
adobe · acrobatDec 9, 2017
CVE-2017-16396
39Monitor
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035
HighCVSS 8.8No exploitEPSS 12%
- pre-auth RCE
- Memory safety
adobe · acrobatDec 9, 2017
CVE-2017-16413
38Monitor
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobatDec 9, 2017
CVE-2017-16415
38Monitor
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobatDec 9, 2017
CVE-2017-16416
38Monitor
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035
HighCVSS 8.8No exploitEPSS 11%
- pre-auth RCE
- Memory safety
adobe · acrobatDec 9, 2017
CVE-2017-15708
44Plan
In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI).
CriticalCVSS 9.8Proof of conceptEPSS 17%
- pre-auth RCE
apache · synapseDec 11, 2017
CVE-2017-15944
99Now
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute
CriticalCVSS 9.8KEVWeaponizedEPSS 98%
- pre-auth RCE
paloaltonetworks · pan-osDec 11, 2017
CVE-2017-17560
61This week
An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices.
CriticalCVSS 9.8WeaponizedEPSS 73%
- pre-auth RCE
- Auth bypass
westerndigital · my cloud pr4100 firmwareDec 12, 2017
CVE-2017-17562
91Now
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.
HighCVSS 8.1KEVWeaponizedEPSS 97%
- pre-auth RCE
embedthis · goaheadDec 12, 2017
CVE-2017-1000385
60This week
The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding.
MediumCVSS 5.9WeaponizedEPSS 22%
- Pre-auth
erlang · erlang\/otpDec 12, 2017
CVE-2017-11885
40Plan
Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and
MediumCVSS 6.6Proof of conceptEPSS 45%
- RCE
microsoft · windows 10Dec 12, 2017
CVE-2017-11890
45Plan
Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511,
HighCVSS 7.5Proof of conceptEPSS 50%
- pre-auth RCE
- Memory safety
microsoft · internet explorerDec 12, 2017
CVE-2017-11893
51Plan
ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in
HighCVSS 7.5Proof of conceptEPSS 68%
- pre-auth RCE
- Memory safety
microsoft · edgeDec 12, 2017
CVE-2017-11903
44Plan
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Wi
HighCVSS 7.5Proof of conceptEPSS 46%
- Pre-auth
- Memory safety
microsoft · internet explorerDec 12, 2017
CVE-2017-11906
29Monitor
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, an
MediumCVSS 5.3Proof of conceptEPSS 25%
- Pre-auth
- Info leak
microsoft · internet explorerDec 12, 2017
CVE-2017-11907
49Plan
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Wi
HighCVSS 7.5Proof of conceptEPSS 64%
- Pre-auth
- Memory safety
microsoft · internet explorerDec 12, 2017
CVE-2017-11909
50Plan
ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the
HighCVSS 7.5Proof of conceptEPSS 65%
- pre-auth RCE
- Memory safety
microsoft · edgeDec 12, 2017
CVE-2017-11911
50Plan
ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the
HighCVSS 7.5Proof of conceptEPSS 65%
- pre-auth RCE
- Memory safety
microsoft · edgeDec 12, 2017
CVE-2017-11914
49Plan
ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights
HighCVSS 7.5Proof of conceptEPSS 62%
- Pre-auth
- Memory safety
microsoft · edgeDec 12, 2017
CVE-2017-11918
49Plan
ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user r
HighCVSS 7.5Proof of conceptEPSS 62%
- Pre-auth
- Memory safety
microsoft · edgeDec 12, 2017
CVE-2017-11934
26Monitor
Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the
MediumCVSS 5.5No exploitEPSS 12%
- Info leak
microsoft · officeDec 12, 2017
CVE-2017-11935
37Monitor
Microsoft Office 2016 Click-to-Run (C2R) allows a remote code execution vulnerability due to the way files are handled in memory, aka "Micro
HighCVSS 7.8No exploitEPSS 18%
- RCE
- Memory safety
microsoft · officeDec 12, 2017
CVE-2017-13098
60This week
BouncyCastle JCE TLS Bleichenbacher/ROBOT
MediumCVSS 5.9WeaponizedEPSS 24%
- Pre-auth
bouncycastle · bc-javaDec 12, 2017
CVE-2017-13099
60This week
wolfSSL Bleichenbacher/ROBOT
MediumCVSS 5.9WeaponizedEPSS 27%
- Pre-auth
wolfssl · wolfsslDec 12, 2017
CVE-2017-17382
60This week
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before b
MediumCVSS 5.9WeaponizedEPSS 13%
- Pre-auth
- Weak crypto
citrix · application delivery controller firmwareDec 13, 2017
CVE-2017-17427
60This week
Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertext attack ("Bleichenba
MediumCVSS 5.9WeaponizedEPSS 15%
- Pre-auth
radware · alteon firmwareDec 13, 2017
CVE-2017-17664
33Monitor
A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified As
MediumCVSS 5.9No exploitEPSS 32%
- Pre-auth
- Memory safety
- Denial of service
digium · asteriskDec 13, 2017
CVE-2017-17672
44Plan
In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certa
CriticalCVSS 9.8Proof of conceptEPSS 15%
- Pre-auth
- Deserialization
vbulletin · vbulletinDec 13, 2017
CVE-2017-16355
18Monitor
In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if
MediumCVSS 4.7No exploitEPSS 0%
- Info leak
phusion · passengerDec 14, 2017
CVE-2017-17405
57Plan
Ruby before 2.4.3 allows Net::FTP command injection.
HighCVSS 8.8Proof of conceptEPSS 73%
- pre-auth RCE
- Command injection
ruby-lang · rubyDec 15, 2017
CVE-2017-12373
60This week
A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550) devices could allo
MediumCVSS 5.9WeaponizedEPSS 12%
- Pre-auth
- Info leak
cisco · adaptive security appliance 5505 firmwareDec 15, 2017
CVE-2017-3191
58Plan
D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page.
CriticalCVSS 9.8No exploitEPSS 62%
- Pre-auth
- Auth bypass
d-link · dir-130 firmwareDec 15, 2017
CVE-2017-3192
51Plan
D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials.
CriticalCVSS 9.8No exploitEPSS 39%
- Pre-auth
- Auth bypass
- Info leak
d-link · dir-130 firmwareDec 15, 2017
CVE-2017-3195
45Plan
Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overfl
CriticalCVSS 9.8Proof of conceptEPSS 21%
- pre-auth RCE
- Memory safety
commvault · edgeDec 15, 2017
CVE-2017-17731
43Plan
DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.
CriticalCVSS 9.8Proof of conceptEPSS 13%
- Pre-auth
- SQL injection
dedecms · dedecmsDec 18, 2017
CVE-2017-17733
52Plan
Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request.
CriticalCVSS 9.8No exploitEPSS 44%
- pre-auth RCE
maccms · maccmsDec 18, 2017
CVE-2017-17739
43Plan
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowi
CriticalCVSS 9.8Proof of conceptEPSS 11%
- Pre-auth
- Path traversal
brightsign · 4k242 firmwareDec 18, 2017
CVE-2017-16949
45Plan
An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress.
CriticalCVSS 9.8Proof of conceptEPSS 19%
- Pre-auth
- File upload
accesspressthemes · anonymous post proDec 18, 2017
CVE-2017-17105
64This week
Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind rem
CriticalCVSS 9.8WeaponizedEPSS 84%
- pre-auth RCE
- Command injection
zivif · pr115-204-p-rs firmwareDec 18, 2017
CVE-2017-17106
44Plan
Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin
CriticalCVSS 9.8No exploitEPSS 15%
- Pre-auth
- Info leak
zivif · pr115-204-p-rs firmwareDec 18, 2017
CVE-2017-17759
42Plan
Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deleting
CriticalCVSS 9.8Proof of conceptEPSS 11%
- Pre-auth
conarc · ichannelDec 19, 2017
CVE-2017-15048
38Monitor
Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execut
HighCVSS 8.8Proof of conceptEPSS 10%
- pre-auth RCE
- Memory safety
zoom · zoomDec 19, 2017
CVE-2017-15049
40Plan
The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell
HighCVSS 8.8Proof of conceptEPSS 17%
- pre-auth RCE
- Command injection
zoom · zoomDec 19, 2017
CVE-2012-2576
60This week
SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, a
CriticalCVSS 9.8WeaponizedEPSS 59%
- pre-auth RCE
- SQL injection
solarwinds · backup profilerDec 20, 2017
CVE-2017-5254
51Plan
In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the capability of chang
HighCVSS 8.8WeaponizedEPSS 53%
- Broken access control (IDOR)
cambiumnetworks · epmp 1000 firmwareDec 20, 2017
CVE-2017-5255
57Plan
In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console
HighCVSS 8.8WeaponizedEPSS 74%
- RCE
- Command injection
cambiumnetworks · epmp 1000 firmwareDec 20, 2017
CVE-2017-5259
45Plan
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available u
HighCVSS 8.8WeaponizedEPSS 32%
cambiumnetworks · cnpilot r190v firmwareDec 20, 2017
CVE-2017-5260
40Plan
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available i
HighCVSS 8.8WeaponizedEPSS 8%
cambiumnetworks · cnpilot r190v firmwareDec 20, 2017
CVE-2017-5261
40Plan
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console
HighCVSS 8.8WeaponizedEPSS 8%
- Path traversal
cambiumnetworks · cnpilot r190v firmwareDec 20, 2017
CVE-2017-5262
40Plan
In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive inform
HighCVSS 8.0WeaponizedEPSS 4%
- Info leak
cambiumnetworks · cnpilot r190v firmwareDec 20, 2017
CVE-2017-17411
65This week
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0.
CriticalCVSS 9.8WeaponizedEPSS 87%
- pre-auth RCE
- Command injection
linksys · wvbr0 firmwareDec 21, 2017
CVE-2017-17692
60This week
Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted Java
HighCVSS 7.5WeaponizedEPSS 78%
- Pre-auth
- Info leak
samsung · internet browserDec 21, 2017
CVE-2017-13861
40Plan
An issue was discovered in certain Apple products.
HighCVSS 7.8WeaponizedEPSS 14%
- RCE
- Local privilege escalation
- Memory safety
apple · iphone osDec 25, 2017
CVE-2017-16995
40Plan
The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory c
HighCVSS 7.8WeaponizedEPSS 30%
- Memory safety
linux · linux kernelDec 27, 2017
CVE-2017-17849
45Plan
A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code o
CriticalCVSS 9.8Proof of conceptEPSS 19%
- pre-auth RCE
- Memory safety
getgosoft · getgo download managerDec 27, 2017
CVE-2017-17850
53Plan
An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older.
HighCVSS 7.5No exploitEPSS 75%
- Pre-auth
- Denial of service
digium · asteriskDec 27, 2017
CVE-2017-17888
43Plan
cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001,
HighCVSS 8.8No exploitEPSS 27%
- RCE
- Command injection
hoytech · antiwebDec 27, 2017
CVE-2014-8389
54Plan
cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-
CriticalCVSS 9.8No exploitEPSS 51%
- pre-auth RCE
- Hard-coded credentials
- Command injection
airlive · bu-3026 firmwareDec 27, 2017
CVE-2017-17932
60This week
A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to
CriticalCVSS 9.8WeaponizedEPSS 54%
- pre-auth RCE
- Memory safety
allmediaserver · allmediaserverDec 28, 2017
CVE-2017-5641
45Plan
Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by
CriticalCVSS 9.8No exploitEPSS 20%
- pre-auth RCE
- Deserialization
apache · flex blazedsDec 28, 2017
CVE-2017-17968
60This week
A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to ex
CriticalCVSS 9.8WeaponizedEPSS 39%
- pre-auth RCE
- Memory safety
xi-soft · nettransport download managerDec 29, 2017
CVE-2015-3302
37Monitor
The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote
HighCVSS 7.5Proof of conceptEPSS 22%
- Pre-auth
- Broken access control (IDOR)
thecartpress · thecartpress ecommerce shopping cartDec 29, 2017
CVE-2017-18001
43Plan
Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorize
CriticalCVSS 9.8Proof of conceptEPSS 14%
- Pre-auth
- Auth bypass
trustwave · secure web gatewayDec 31, 2017