Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: February 2018

166 records · 3 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 2

  • CVE-2018-6580
    50Plan

    Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component requ

    CriticalCVSS 9.8Proof of conceptEPSS 36%

    janguo · jimtawlFeb 2, 2018

  • CVE-2018-6317
    60This week

    The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, all

    CriticalCVSS 9.1WeaponizedEPSS 43%

    claymore dual miner project · claymore dual minerFeb 2, 2018

  • CVE-2017-9414
    40Plan

    Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the

    HighCVSS 8.8Proof of conceptEPSS 15%

    subsonic · subsonicFeb 5, 2018

  • CVE-2018-6605
    56Plan

    SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText,

    CriticalCVSS 9.8Proof of conceptEPSS 57%

    zh baidumap project · zh baidumapFeb 5, 2018

  • CVE-2017-17663
    40Plan

    The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that can be exploited rem

    CriticalCVSS 9.8No exploitEPSS 2%

    acme · mini httpdFeb 6, 2018

  • CVE-2018-6389
    52Plan

    In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of regist

    HighCVSS 7.5Proof of conceptEPSS 72%

    wordpress · wordpressFeb 6, 2018

  • CVE-2017-7525
    50Plan

    A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthentica

    CriticalCVSS 9.8Proof of conceptEPSS 37%

    fasterxml · jackson-databindFeb 6, 2018

  • CVE-2018-4878
    88Now

    A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161.

    HighCVSS 7.8KEVWeaponizedEPSS 89%

    adobe · flash playerFeb 6, 2018

  • CVE-2018-6794
    28Monitor

    Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c.

    MediumCVSS 5.3Proof of conceptEPSS 23%

    suricata-ids · suricataFeb 7, 2018

  • CVE-2018-0125
    86Now

    A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unaut

    CriticalCVSS 9.8KEVWeaponizedEPSS 55%

    cisco · rv132w firmwareFeb 8, 2018

  • CVE-2018-0127
    62This week

    A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allo

    CriticalCVSS 9.8Proof of conceptEPSS 77%

    cisco · rv132w firmwareFeb 8, 2018

  • CVE-2017-17420
    53Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.

    CriticalCVSS 9.8No exploitEPSS 48%

    quest · netvault backupFeb 8, 2018

  • CVE-2018-1161
    59Plan

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13.

    CriticalCVSS 9.8No exploitEPSS 66%

    quest · netvault backupFeb 8, 2018

  • CVE-2018-1163
    44Plan

    This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backup 11.2.0.13.

    CriticalCVSS 9.8No exploitEPSS 16%

    quest · netvault backupFeb 8, 2018

  • CVE-2018-5550
    35Monitor

    Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerability, which can allow

    MediumCVSS 6.1No exploitEPSS 36%

    epson · airprintFeb 8, 2018

  • CVE-2018-6789
    94Now

    An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1.

    CriticalCVSS 9.8KEVWeaponizedEPSS 82%

    exim · eximFeb 8, 2018

  • CVE-2018-6871
    46Plan

    LibreOffice before 5.4.5 and 6.x before 6.0.1 allows remote attackers to read arbitrary files via =WEBSERVICE calls in a document, which use

    CriticalCVSS 9.8Proof of conceptEPSS 22%

    libreoffice · libreofficeFeb 9, 2018

  • CVE-2018-3604
    55Plan

    GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to

    HighCVSS 8.8No exploitEPSS 67%

    trendmicro · control managerFeb 9, 2018

  • CVE-2018-3605
    41Plan

    TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 co

    HighCVSS 8.8No exploitEPSS 19%

    trendmicro · control managerFeb 9, 2018

  • CVE-2018-3606
    50Plan

    XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Cont

    HighCVSS 8.8No exploitEPSS 49%

    trendmicro · control managerFeb 9, 2018

  • CVE-2018-3607
    39Monitor

    XXXTreeNode method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacke

    HighCVSS 8.8No exploitEPSS 14%

    trendmicro · control managerFeb 9, 2018

  • CVE-2018-1000027
    34Monitor

    The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in

    HighCVSS 7.5No exploitEPSS 12%

    squid-cache · squidFeb 9, 2018

  • CVE-2018-1000035
    40Plan

    A heap-based buffer overflow exists in Info-Zip UnZip version <= 6.00 in the processing of password-protected archives that allows an attack

    HighCVSS 7.8No exploitEPSS 30%

    unzip project · unzipFeb 9, 2018

  • CVE-2018-1000049
    53Plan

    Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API.

    HighCVSS 7.5WeaponizedEPSS 76%

    nanopool · claymore dual minerFeb 9, 2018

  • CVE-2018-6892
    67This week

    An issue was discovered in CloudMe before 1.11.0.

    CriticalCVSS 9.8WeaponizedEPSS 93%

    cloudme · syncFeb 11, 2018

  • CVE-2018-1297
    42Plan

    When using Distributed Test only (RMI based), Apache JMeter 2.x and 3.x uses an unsecured RMI connection.

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    apache · jmeterFeb 13, 2018

  • CVE-2018-6911
    43Plan

    The VBWinExec function in Node\AspVBObj.dll in Advantech WebAccess 8.3.0 allows remote attackers to execute arbitrary OS commands via a sing

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    advantech · webaccessFeb 13, 2018

  • CVE-2017-15709
    21Monitor

    When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel v

    LowCVSS 3.7No exploitEPSS 22%

    apache · activemqFeb 13, 2018

  • CVE-2018-6910
    36Monitor

    DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions

    HighCVSS 7.5Proof of conceptEPSS 18%

    dedecms · dedecmsFeb 13, 2018

  • CVE-2018-2392
    60This week

    Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropria

    HighCVSS 7.5WeaponizedEPSS 41%

    sap · internet graphics serverFeb 14, 2018

  • CVE-2018-2393
    60This week

    Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropria

    HighCVSS 7.5WeaponizedEPSS 15%

    sap · internet graphics serverFeb 14, 2018

  • CVE-2018-0825
    35Monitor

    StructuredQuery in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1

    HighCVSS 7.5No exploitEPSS 16%

    microsoft · windows 10Feb 14, 2018

  • CVE-2018-0833
    33Monitor

    The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of

    MediumCVSS 5.3Proof of conceptEPSS 39%

    microsoft · windows 8.1Feb 14, 2018

  • CVE-2018-0834
    46Plan

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, du

    HighCVSS 7.5Proof of conceptEPSS 54%

    microsoft · chakracoreFeb 14, 2018

  • CVE-2018-0835
    50Plan

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, du

    HighCVSS 7.5Proof of conceptEPSS 65%

    microsoft · chakracoreFeb 14, 2018

  • CVE-2018-0836
    35Monitor

    Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles ob

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · chakracoreFeb 14, 2018

  • CVE-2018-0837
    50Plan

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, du

    HighCVSS 7.5Proof of conceptEPSS 65%

    microsoft · chakracoreFeb 14, 2018

  • CVE-2018-0838
    50Plan

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, du

    HighCVSS 7.5Proof of conceptEPSS 65%

    microsoft · chakracoreFeb 14, 2018

  • CVE-2018-0840
    46Plan

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and In

    HighCVSS 7.5Proof of conceptEPSS 53%

    microsoft · internet explorerFeb 14, 2018

  • CVE-2018-0841
    41Plan

    Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote

    HighCVSS 8.8No exploitEPSS 20%

    microsoft · officeFeb 14, 2018

  • CVE-2018-0852
    41Plan

    Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office

    HighCVSS 8.8No exploitEPSS 19%

    microsoft · officeFeb 14, 2018

  • CVE-2018-0853
    17Monitor

    Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a

    LowCVSS 3.3No exploitEPSS 11%

    microsoft · officeFeb 14, 2018

  • CVE-2018-0856
    35Monitor

    Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles ob

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · chakracoreFeb 14, 2018

  • CVE-2018-0857
    35Monitor

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, du

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · chakracoreFeb 14, 2018

  • CVE-2018-0858
    34Monitor

    ChakraCore allows remote code execution, due to how the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · chakracoreFeb 14, 2018

  • CVE-2018-0859
    35Monitor

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, du

    HighCVSS 7.5No exploitEPSS 17%

    microsoft · chakracoreFeb 14, 2018

  • CVE-2018-0860
    50Plan

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, du

    HighCVSS 7.5Proof of conceptEPSS 65%

    microsoft · edgeFeb 14, 2018

  • CVE-2018-0861
    34Monitor

    Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows remote code execution, due to how the scripting engine han

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · edgeFeb 14, 2018

  • CVE-2018-0866
    43Plan

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Wi

    HighCVSS 7.5Proof of conceptEPSS 43%

    microsoft · internet explorerFeb 14, 2018

  • CVE-2018-0851
    41Plan

    Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2

    HighCVSS 8.8No exploitEPSS 19%

    microsoft · officeFeb 15, 2018

  • CVE-2017-12718
    36Monitor

    A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6.

    HighCVSS 8.1Proof of conceptEPSS 12%

    smiths-medical · medfusion 4000 wireless syringe infusion pumpFeb 15, 2018

  • CVE-2018-1041
    35Monitor

    A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions 3.3.10, reads from an empty buffer.

    HighCVSS 7.5Proof of conceptEPSS 15%

    jboss · jboss-remotingFeb 15, 2018

  • CVE-2016-8511
    44Plan

    A Remote Code Execution vulnerability in HPE Network Automation using RPCServlet and Java Deserialization version v9.1x, v9.2x, v10.00, v10.

    CriticalCVSS 9.8No exploitEPSS 15%

    hp · network automationFeb 15, 2018

  • CVE-2016-8519
    47Plan

    A remote code execution vulnerability in HPE Operations Orchestration Community edition and Enterprise edition prior to v10.70 was found.

    CriticalCVSS 9.8No exploitEPSS 27%

    hp · operations orchestrationFeb 15, 2018

  • CVE-2016-8523
    40Plan

    A Remote Arbitrary Code Execution vulnerability in HPE Smart Storage Administrator version before v2.60.18.0 was found.

    HighCVSS 8.8Proof of conceptEPSS 16%

    hp · smart storage administratorFeb 15, 2018

  • CVE-2016-8530
    44Plan

    A remote denial of service vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found.

    HighCVSS 7.5No exploitEPSS 48%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-12500
    39Monitor

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found.

    HighCVSS 8.8Proof of conceptEPSS 14%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-12542
    70This week

    A authentication bypass and execution of code vulnerability in HPE Integrated Lights-out 4 (iLO 4) version prior to 2.53 was found.

    CriticalCVSS 10.0WeaponizedEPSS 99%

    hp · integrated lights-out 4 firmwareFeb 15, 2018

  • CVE-2017-12556
    50Plan

    A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.

    CriticalCVSS 9.8No exploitEPSS 37%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-12557
    63This week

    A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.

    CriticalCVSS 9.8WeaponizedEPSS 79%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-12558
    50Plan

    A Remote Code Execution vulnerability in HPE intelligent Management Center (iMC) PLAT version IMC Plat 7.3 E0504P2 and earlier was found.

    CriticalCVSS 9.8No exploitEPSS 37%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-12561
    48Plan

    A remote code execution vulnerability in HPE intelligent Management Center (iMC) PLAT version Plat 7.3 E0504P4 and earlier was found.

    CriticalCVSS 9.8Proof of conceptEPSS 30%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5790
    44Plan

    A remote deserialization of untrusted data vulnerability in HPE Intelligent Management Center (IMC) PLAT version 7.2 E0403P06 was found.

    CriticalCVSS 9.8No exploitEPSS 18%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5792
    49Plan

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P2 was found.

    CriticalCVSS 9.8Proof of conceptEPSS 34%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5799
    40Plan

    A Remote Code Execution vulnerability in HPE OpenCall Media Platform (OCMP) was found.

    HighCVSS 8.8Proof of conceptEPSS 15%

    hp · opencall media platformFeb 15, 2018

  • CVE-2017-5804
    46Plan

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.

    CriticalCVSS 9.8No exploitEPSS 22%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5805
    46Plan

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.

    CriticalCVSS 9.8No exploitEPSS 22%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5806
    46Plan

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.

    CriticalCVSS 9.8No exploitEPSS 22%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5807
    46Plan

    A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.

    CriticalCVSS 9.8No exploitEPSS 21%

    hp · data protectorFeb 15, 2018

  • CVE-2017-5808
    35Monitor

    A Remote Arbitrary Code Execution vulnerability in HPE Data Protector version prior to 8.17 and 9.09 was found.

    HighCVSS 7.5No exploitEPSS 16%

    hp · data protectorFeb 15, 2018

  • CVE-2017-5811
    35Monitor

    A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found.

    HighCVSS 7.5No exploitEPSS 17%

    hp · network automationFeb 15, 2018

  • CVE-2017-5815
    49Plan

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

    CriticalCVSS 9.8Proof of conceptEPSS 33%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5816
    65This week

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

    CriticalCVSS 9.8WeaponizedEPSS 86%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5817
    64This week

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

    CriticalCVSS 9.8WeaponizedEPSS 82%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5818
    34Monitor

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

    HighCVSS 7.5No exploitEPSS 11%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5819
    44Plan

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

    CriticalCVSS 9.8No exploitEPSS 18%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5820
    44Plan

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

    CriticalCVSS 9.8No exploitEPSS 18%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5821
    44Plan

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

    CriticalCVSS 9.8No exploitEPSS 16%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5822
    34Monitor

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

    HighCVSS 7.5No exploitEPSS 11%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5823
    44Plan

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

    CriticalCVSS 9.8No exploitEPSS 18%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-5824
    45Plan

    An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found.

    CriticalCVSS 9.8No exploitEPSS 19%

    hp · aruba clearpass policy managerFeb 15, 2018

  • CVE-2017-8946
    36Monitor

    A Remote Code Execution vulnerability in HPE Aruba AirWave Glass version v1.0.0 and 1.0.1 was found.

    HighCVSS 8.3No exploitEPSS 10%

    hp · aruba airwave glassFeb 15, 2018

  • CVE-2017-8947
    48Plan

    A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found.

    CriticalCVSS 9.8No exploitEPSS 29%

    hp · ucmdb configuration managerFeb 15, 2018

  • CVE-2017-8954
    44Plan

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.

    CriticalCVSS 9.8No exploitEPSS 18%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-8955
    34Monitor

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.

    HighCVSS 7.5No exploitEPSS 11%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-8956
    42Plan

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.

    CriticalCVSS 9.8No exploitEPSS 10%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-8957
    44Plan

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.

    CriticalCVSS 9.8No exploitEPSS 18%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-8958
    38Monitor

    A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 and earlier was found.

    HighCVSS 8.8No exploitEPSS 11%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-8961
    41Plan

    A directory traversal vulnerability in HPE Intelligent Management Center (IMC) PLAT 7.3 E0504P02 could allow remote code execution.

    HighCVSS 8.8No exploitEPSS 19%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-8975
    44Plan

    A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found.

    CriticalCVSS 9.8No exploitEPSS 18%

    hp · moonshot provisioning manager applianceFeb 15, 2018

  • CVE-2017-8976
    44Plan

    A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found.

    CriticalCVSS 9.8No exploitEPSS 18%

    hp · moonshot provisioning manager applianceFeb 15, 2018

  • CVE-2017-8982
    34Monitor

    A Remote Authentication Restriction Bypass vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P4 was found.

    HighCVSS 7.5Proof of conceptEPSS 14%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2017-8984
    38Monitor

    A remote code execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0506P03 was found.

    HighCVSS 8.8No exploitEPSS 11%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2018-5767
    53Plan

    An issue was discovered on Tenda AC15 V15.03.1.16_multi devices.

    CriticalCVSS 9.8Proof of conceptEPSS 47%

    tendacn · ac15 firmwareFeb 15, 2018

  • CVE-2017-14535
    50Plan

    trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php.

    HighCVSS 8.8Proof of conceptEPSS 50%

    netfortris · trixboxFeb 16, 2018

  • CVE-2017-14537
    38Monitor

    trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/ho

    MediumCVSS 6.5Proof of conceptEPSS 39%

    netfortris · trixboxFeb 16, 2018

  • CVE-2018-7187
    54Plan

    The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import path (get/vcs.go only

    HighCVSS 8.8No exploitEPSS 63%

    golang · goFeb 16, 2018

  • CVE-2018-3609
    38Monitor

    A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticat

    HighCVSS 8.1No exploitEPSS 21%

    trendmicro · interscan messaging security virtual applianceFeb 16, 2018

  • CVE-2018-6006
    45Plan

    SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 19%

    joomsky · js autozFeb 17, 2018

  • CVE-2018-6396
    46Plan

    SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form_markers a

    CriticalCVSS 9.8Proof of conceptEPSS 23%

    google map landkarten project · google map landkartenFeb 17, 2018