Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: январь 2017 г.

71 записей · 3 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2016-10105
    40В плане

    admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files.

    КритическаяCVSS 9,8Эксплойта нетEPSS 2 %

    piwigo · piwigo3 янв. 2017 г.

  • CVE-2016-10107
    42В плане

    Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 index.php page via a modified Cookie hea

    КритическаяCVSS 9,8Эксплойта нетEPSS 11 %

    western digital · mycloud nas3 янв. 2017 г.

  • CVE-2016-10108
    68На этой неделе

    Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modi

    КритическаяCVSS 9,8Готовый эксплойтEPSS 97 %

    western digital · mycloud nas3 янв. 2017 г.

  • CVE-2016-10009
    40В плане

    Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKC

    ВысокаяCVSS 7,3Proof of conceptEPSS 37 %

    openbsd · openssh4 янв. 2017 г.

  • CVE-2016-8334
    19Наблюдать

    A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure.

    НизкаяCVSS 3,3Эксплойта нетEPSS 18 %

    foxitsoftware · reader6 янв. 2017 г.

  • CVE-2016-8704
    46В плане

    An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcac

    КритическаяCVSS 9,8Эксплойта нетEPSS 23 %

    memcached · memcached6 янв. 2017 г.

  • CVE-2016-8705
    45В плане

    Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached b

    КритическаяCVSS 9,8Эксплойта нетEPSS 19 %

    memcached · memcached6 янв. 2017 г.

  • CVE-2016-8706
    46В плане

    An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary pro

    ВысокаяCVSS 8,1Proof of conceptEPSS 45 %

    memcached · memcached6 янв. 2017 г.

  • CVE-2017-0002
    39Наблюдать

    Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka "Micro

    ВысокаяCVSS 8,8Эксплойта нетEPSS 14 %

    microsoft · edge10 янв. 2017 г.

  • CVE-2017-0003
    38Наблюдать

    Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafted document, aka "Micr

    ВысокаяCVSS 7,8Эксплойта нетEPSS 24 %

    microsoft · sharepoint enterprise server10 янв. 2017 г.

  • CVE-2017-0004
    57В плане

    The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1

    ВысокаяCVSS 7,5Эксплойта нетEPSS 91 %

    microsoft · windows 710 янв. 2017 г.

  • CVE-2017-2930
    43В плане

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurrency error when manip

    ВысокаяCVSS 8,8Proof of conceptEPSS 25 %

    adobe · flash player11 янв. 2017 г.

  • CVE-2017-2931
    41В плане

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the parsing of SWF metadat

    ВысокаяCVSS 8,8Proof of conceptEPSS 21 %

    adobe · flash player11 янв. 2017 г.

  • CVE-2017-2932
    42В плане

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript MovieClip class.

    ВысокаяCVSS 8,8Proof of conceptEPSS 24 %

    adobe · flash player11 янв. 2017 г.

  • CVE-2017-2933
    44В плане

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture compression.

    ВысокаяCVSS 8,8Proof of conceptEPSS 29 %

    adobe · flash player11 янв. 2017 г.

  • CVE-2017-2934
    44В плане

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when parsing Adobe Texture Format files.

    ВысокаяCVSS 8,8Proof of conceptEPSS 29 %

    adobe · flash player11 янв. 2017 г.

  • CVE-2017-2935
    44В плане

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the Flash Video container

    ВысокаяCVSS 8,8Proof of conceptEPSS 29 %

    adobe · flash player11 янв. 2017 г.

  • CVE-2017-2946
    38Наблюдать

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vuln

    ВысокаяCVSS 7,8Эксплойта нетEPSS 24 %

    adobe · acrobat11 янв. 2017 г.

  • CVE-2017-2949
    37Наблюдать

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vuln

    ВысокаяCVSS 7,8Эксплойта нетEPSS 20 %

    adobe · acrobat11 янв. 2017 г.

  • CVE-2017-2959
    34Наблюдать

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vuln

    ВысокаяCVSS 7,8Эксплойта нетEPSS 11 %

    adobe · acrobat11 янв. 2017 г.

  • CVE-2017-2960
    37Наблюдать

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption

    ВысокаяCVSS 7,8Эксплойта нетEPSS 18 %

    adobe · acrobat11 янв. 2017 г.

  • CVE-2017-2966
    34Наблюдать

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vuln

    ВысокаяCVSS 7,8Эксплойта нетEPSS 10 %

    adobe · acrobat11 янв. 2017 г.

  • CVE-2016-7478
    43В плане

    Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infin

    ВысокаяCVSS 7,5Эксплойта нетEPSS 42 %

    php · php11 янв. 2017 г.

  • CVE-2017-5340
    44В плане

    Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocations, which allows rem

    КритическаяCVSS 9,8Эксплойта нетEPSS 16 %

    php · php11 янв. 2017 г.

  • CVE-2016-7480
    51В плане

    The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a key is an object, whic

    КритическаяCVSS 9,8Эксплойта нетEPSS 41 %

    php · php11 янв. 2017 г.

  • CVE-2016-4806
    33Наблюдать

    Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended user to read/access w

    ВысокаяCVSS 7,5Proof of conceptEPSS 10 %

    web2py · web2py11 янв. 2017 г.

  • CVE-2016-7479
    52В плане

    In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-af

    КритическаяCVSS 9,8Эксплойта нетEPSS 41 %

    php · php11 янв. 2017 г.

  • CVE-2016-9131
    42В плане

    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of ser

    ВысокаяCVSS 7,5Эксплойта нетEPSS 40 %

    isc · bind12 янв. 2017 г.

  • CVE-2016-9147
    37Наблюдать

    named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and d

    ВысокаяCVSS 7,5Эксплойта нетEPSS 24 %

    isc · bind12 янв. 2017 г.

  • CVE-2016-9444
    35Наблюдать

    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of ser

    ВысокаяCVSS 7,5Эксплойта нетEPSS 18 %

    isc · bind12 янв. 2017 г.

  • CVE-2016-9299
    68На этой неделе

    The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized

    КритическаяCVSS 9,8Готовый эксплойтEPSS 96 %

    jenkins · jenkins12 янв. 2017 г.

  • CVE-2015-3188
    43В плане

    The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecified vectors.

    КритическаяCVSS 9,8Эксплойта нетEPSS 14 %

    apache · storm13 янв. 2017 г.

  • CVE-2016-7426
    34Наблюдать

    NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allo

    ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %

    ntp · ntp13 янв. 2017 г.

  • CVE-2016-7434
    46В плане

    The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.

    ВысокаяCVSS 7,5Proof of conceptEPSS 53 %

    ntp · ntp13 янв. 2017 г.

  • CVE-2016-9310
    29Наблюдать

    The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mo

    СредняяCVSS 6,5Эксплойта нетEPSS 11 %

    ntp · ntp13 янв. 2017 г.

  • CVE-2016-9311
    26Наблюдать

    ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference

    СредняяCVSS 5,9Эксплойта нетEPSS 11 %

    ntp · ntp13 янв. 2017 г.

  • CVE-2016-9312
    40В плане

    ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of service via a large UDP packet.

    ВысокаяCVSS 7,5Эксплойта нетEPSS 31 %

    ntp · ntp13 янв. 2017 г.

  • CVE-2016-8205
    43В плане

    A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 1

    КритическаяCVSS 9,8Эксплойта нетEPSS 13 %

    brocade · network advisor14 янв. 2017 г.

  • CVE-2016-8206
    34Наблюдать

    A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 1

    ВысокаяCVSS 7,5Эксплойта нетEPSS 14 %

    brocade · network advisor14 янв. 2017 г.

  • CVE-2016-8207
    35Наблюдать

    A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.

    ВысокаяCVSS 7,5Эксплойта нетEPSS 15 %

    brocade · network advisor14 янв. 2017 г.

  • CVE-2017-5487
    47В плане

    wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not prop

    СредняяCVSS 5,3Proof of conceptEPSS 87 %

    wordpress · wordpress14 янв. 2017 г.

  • CVE-2017-5521
    89Срочно

    An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R80

    ВысокаяCVSS 8,1KEVГотовый эксплойтEPSS 89 %

    netgear · r6200 firmware17 янв. 2017 г.

  • CVE-2016-2233
    40В плане

    Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial

    ВысокаяCVSS 7,5Proof of conceptEPSS 34 %

    hexchat project · hexchat18 янв. 2017 г.

  • CVE-2016-7982
    36Наблюдать

    Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on

    ВысокаяCVSS 7,5Proof of conceptEPSS 20 %

    spip · spip18 янв. 2017 г.

  • CVE-2016-7998
    39Наблюдать

    The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading a

    ВысокаяCVSS 8,8Proof of conceptEPSS 13 %

    spip · spip18 янв. 2017 г.

  • CVE-2016-6896
    39Наблюдать

    Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remo

    ВысокаяCVSS 7,1Proof of conceptEPSS 38 %

    wordpress · wordpress18 янв. 2017 г.

  • CVE-2016-6897
    60На этой неделе

    Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress bef

    СредняяCVSS 6,5Готовый эксплойтEPSS 28 %

    wordpress · wordpress18 янв. 2017 г.

  • CVE-2016-5198
    75На этой неделе

    V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect o

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 34 %

    google · chrome19 янв. 2017 г.

  • CVE-2016-5725
    30Наблюдать

    Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP server

    СредняяCVSS 5,9Proof of conceptEPSS 24 %

    jcraft · jsch19 янв. 2017 г.

  • CVE-2016-6253
    40В плане

    mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbi

    ВысокаяCVSS 7,8Готовый эксплойтEPSS 3 %

    netbsd · netbsd20 янв. 2017 г.

  • CVE-2016-4010
    67На этой неделе

    Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary PHP code via crafted

    КритическаяCVSS 9,8Готовый эксплойтEPSS 92 %

    magento · magento23 янв. 2017 г.

  • CVE-2016-4338
    38Наблюдать

    The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.

    ВысокаяCVSS 8,1Proof of conceptEPSS 21 %

    zabbix · zabbix23 янв. 2017 г.

  • CVE-2016-4340
    38Наблюдать

    The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through 8.3.8, and 8.2.0 thro

    ВысокаяCVSS 8,8Proof of conceptEPSS 10 %

    gitlab · gitlab23 янв. 2017 г.

  • CVE-2016-6600
    66На этой неделе

    Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to uploa

    КритическаяCVSS 9,8Готовый эксплойтEPSS 90 %

    zohocorp · webnms framework23 янв. 2017 г.

  • CVE-2016-6601
    60На этой неделе

    Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to rea

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 97 %

    zohocorp · webnms framework23 янв. 2017 г.

  • CVE-2016-6602
    60На этой неделе

    ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtai

    КритическаяCVSS 9,8Готовый эксплойтEPSS 55 %

    zohocorp · webnms framework23 янв. 2017 г.

  • CVE-2016-6603
    65На этой неделе

    ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP

    КритическаяCVSS 9,8Proof of conceptEPSS 86 %

    zohocorp · webnms framework23 янв. 2017 г.

  • CVE-2016-7567
    43В плане

    Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact

    КритическаяCVSS 9,8Proof of conceptEPSS 12 %

    openslp · openslp23 янв. 2017 г.

  • CVE-2017-5495
    36Наблюдать

    All versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in the telnet 'vty' CLI, leading to a Denial-of

    ВысокаяCVSS 7,5Эксплойта нетEPSS 18 %

    quagga · quagga24 янв. 2017 г.

  • CVE-2016-10161
    34Наблюдать

    The object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remo

    ВысокаяCVSS 7,5Эксплойта нетEPSS 13 %

    php · php24 янв. 2017 г.

  • CVE-2017-3241
    46В плане

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI).

    КритическаяCVSS 9,0Proof of conceptEPSS 32 %

    oracle · jdk27 янв. 2017 г.

  • CVE-2017-3248
    68На этой неделе

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components).

    КритическаяCVSS 9,8Готовый эксплойтEPSS 97 %

    oracle · weblogic server27 янв. 2017 г.

  • CVE-2016-9553
    34Наблюдать

    The Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection vulnerabilities affecting its web administrative in

    ВысокаяCVSS 7,2Proof of conceptEPSS 19 %

    sophos · web appliance28 янв. 2017 г.

  • CVE-2016-9554
    36Наблюдать

    The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in i

    ВысокаяCVSS 7,2Proof of conceptEPSS 25 %

    sophos · web appliance28 янв. 2017 г.

  • CVE-2016-10174
    94Срочно

    The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html.

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 83 %

    netgear · d6100 firmware30 янв. 2017 г.

  • CVE-2016-10175
    60На этой неделе

    The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI.

    КритическаяCVSS 9,8Готовый эксплойтEPSS 65 %

    netgear · wnr2000v5 firmware30 янв. 2017 г.

  • CVE-2016-10176
    62На этой неделе

    The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the dev

    КритическаяCVSS 9,8Готовый эксплойтEPSS 77 %

    netgear · wnr2000v5 firmware30 янв. 2017 г.

  • CVE-2017-5611
    42В плане

    SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbit

    КритическаяCVSS 9,8Эксплойта нетEPSS 10 %

    wordpress · wordpress30 янв. 2017 г.

  • CVE-2015-7979
    34Наблюдать

    NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sen

    ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %

    ntp · ntp30 янв. 2017 г.

  • CVE-2016-2518
    26Наблюдать

    The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference v

    СредняяCVSS 5,3Эксплойта нетEPSS 15 %

    ntp · ntp30 янв. 2017 г.

  • CVE-2016-6267
    51В плане

    SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authe

    ВысокаяCVSS 8,8Готовый эксплойтEPSS 54 %

    trendmicro · smart protection server30 янв. 2017 г.