По дате публикации
Эксплуатируемые и новые серьёзные CVE: февраль 2017 г.
41 записей · 2 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
60На этой неделе | CVE-2017-3823Готовый эксплойт | An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mcisco · activetouch general plugin container · CWE-119 | Высокая8,8 | — | 27,2 % | 1 февр. 2017 г. |
34Наблюдать | CVE-2017-5630Proof of concept | PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect,php · pear · CWE-74 | Высокая7,5 | — | 12,5 % | 1 февр. 2017 г. |
42В плане | CVE-2016-10150Эксплойта нет | Use-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in the Linux kernel before 4.8.13 allows host OSlinux · linux kernel · CWE-264 | Критическая9,8 | — | 10,1 % | 6 февр. 2017 г. |
62На этой неделе | CVE-2015-2794Proof of concept | The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via dnnsoftware · dotnetnuke · CWE-264 | Критическая9,8 | — | 75,1 % | 6 февр. 2017 г. |
45В плане | CVE-2016-6175Proof of concept | Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural fophp-gettext project · php-gettext · CWE-94 | Критическая9,8 | — | 19,6 % | 7 февр. 2017 г. |
32Наблюдать | CVE-2015-6023Proof of concept | ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote attackers to bypasnetcommwireless · hspa 3g10wve firmware · CWE-284 | Высокая7,3 | — | 10,9 % | 9 февр. 2017 г. |
47В плане | CVE-2015-6024Proof of concept | ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated usernetcommwireless · hspa 3g10wve firmware · CWE-77 | Критическая9,8 | — | 26,1 % | 9 февр. 2017 г. |
47В плане | CVE-2016-2148Эксплойта нет | Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectobusybox · busybox · CWE-119 | Критическая9,8 | — | 27,1 % | 9 февр. 2017 г. |
52В плане | CVE-2016-9244Proof of concept | A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytesf5 · big-ip local traffic manager · CWE-200 | Высокая7,5 | — | 74,0 % | 9 февр. 2017 г. |
39Наблюдать | CVE-2017-3807Proof of concept | A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software, Major Releases 9.0-cisco · adaptive security appliance software · CWE-119 | Высокая8,8 | — | 14,7 % | 9 февр. 2017 г. |
57В плане | CVE-2017-5941Proof of concept | An issue was discovered in the node-serialize package 0.0.4 for Node.js.node-serialize project · node-serialize · CWE-502 | Критическая9,8 | — | 61,0 % | 9 февр. 2017 г. |
60На этой неделе | CVE-2016-6210Готовый эксплойт | sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the usopenbsd · openssh · CWE-200 | Средняя5,9 | — | 88,9 % | 13 февр. 2017 г. |
43В плане | CVE-2016-9343Эксплойта нет | An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware rockwellautomation · softlogix 5800 controller firmware · CWE-787 | Критическая10,0 | — | 10,4 % | 13 февр. 2017 г. |
60На этой неделе | CVE-2016-9361Готовый эксплойт | An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pmoxa · nport 5100 series firmware · CWE-287 | Критическая9,8 | — | 20,3 % | 13 февр. 2017 г. |
60На этой неделе | CVE-2017-5146Готовый эксплойт | An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17.carlosgavazzi · vmu-c em firmware · CWE-200 | Высокая7,5 | — | 9,3 % | 13 февр. 2017 г. |
60На этой неделе | CVE-2017-5162Готовый эксплойт | An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter.binom3 · universal multifunctional electric power quality meter firmware · CWE-306 | Критическая9,8 | — | 12,6 % | 13 февр. 2017 г. |
37Наблюдать | CVE-2017-5972Proof of concept | The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connectiolinux · linux kernel · CWE-400 | Высокая7,5 | — | 23,8 % | 14 февр. 2017 г. |
40В плане | CVE-2017-2984Эксплойта нет | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine.adobe · flash player · CWE-787 | Высокая8,8 | — | 18,2 % | 15 февр. 2017 г. |
42В плане | CVE-2017-2985Proof of concept | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class.adobe · flash player · CWE-416 | Высокая8,8 | — | 21,8 % | 15 февр. 2017 г. |
44В плане | CVE-2017-2986Proof of concept | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec.adobe · flash player · CWE-787 | Высокая8,8 | — | 30,8 % | 15 февр. 2017 г. |
40В плане | CVE-2017-2988Proof of concept | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection.adobe · flash player · CWE-787 | Высокая8,8 | — | 18,0 % | 15 февр. 2017 г. |
45В плане | CVE-2017-2992Proof of concept | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header.adobe · flash player · CWE-787 | Высокая8,8 | — | 32,6 % | 15 февр. 2017 г. |
35Наблюдать | CVE-2017-5991Proof of concept | An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465.artifex · mupdf · CWE-476 | Высокая7,5 | — | 15,1 % | 15 февр. 2017 г. |
64На этой неделе | CVE-2016-10134Готовый эксплойт | SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the tzabbix · zabbix · CWE-89 | Критическая9,8 | — | 83,4 % | 16 февр. 2017 г. |
23Наблюдать | CVE-2016-4314Proof of concept | Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbwso2 · carbon · CWE-22 | Средняя4,9 | — | 12,3 % | 16 февр. 2017 г. |
37Наблюдать | CVE-2016-8652Эксплойта нет | The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) dovecot · dovecot · CWE-20 | Средняя5,9 | — | 48,1 % | 16 февр. 2017 г. |
40В плане | CVE-2016-4669Готовый эксплойт | An issue was discovered in certain Apple products.apple · iphone os · CWE-20 | Высокая7,8 | — | 3,7 % | 20 февр. 2017 г. |
29Наблюдать | CVE-2017-2361Proof of concept | An issue was discovered in certain Apple products.apple · mac os x · CWE-79 | Средняя6,1 | — | 17,1 % | 20 февр. 2017 г. |
34Наблюдать | CVE-2017-2370Proof of concept | An issue was discovered in certain Apple products.apple · iphone os · CWE-119 | Высокая7,8 | — | 11,2 % | 20 февр. 2017 г. |
47В плане | CVE-2017-0038Proof of concept | gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,microsoft · windows 10 · CWE-200 | Средняя5,5 | — | 82,1 % | 20 февр. 2017 г. |
43В плане | CVE-2016-9269Proof of concept | Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) versiontrendmicro · interscan web security virtual appliance · CWE-264 | Критическая9,9 | — | 13,4 % | 21 февр. 2017 г. |
46В плане | CVE-2016-9682Proof of concept | The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web addell · sonicwall secure remote access server · CWE-77 | Критическая9,8 | — | 23,2 % | 22 февр. 2017 г. |
42В плане | CVE-2016-9683Proof of concept | The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web adminidell · sonicwall secure remote access server · CWE-77 | Критическая9,8 | — | 11,5 % | 22 февр. 2017 г. |
47В плане | CVE-2017-5586Proof of concept | OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java opentext · documentum d2 · CWE-20 | Критическая9,8 | — | 25,3 % | 22 февр. 2017 г. |
90Срочно | CVE-2017-6077Готовый эксплойт | ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via snetgear · dgn2200 firmware · CWE-78 | Критическая9,8 | KEV | 68,7 % | 22 февр. 2017 г. |
60На этой неделе | CVE-2017-6187Готовый эксплойт | Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI idisksavvy · disksavvy enterprise · CWE-119 | Критическая9,8 | — | 33,0 % | 22 февр. 2017 г. |
35Наблюдать | CVE-2017-6206Proof of concept | D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware bedlink · websmart dgs-1510 series firmware · CWE-200 | Высокая7,5 | — | 16,2 % | 23 февр. 2017 г. |
86Срочно | CVE-2017-0037Готовый эксплойт | Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakmicrosoft · edge · CWE-843 | Высокая8,1 | KEV | 80,3 % | 26 февр. 2017 г. |
43В плане | CVE-2017-6342Эксплойта нет | An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-0dahuasecurity · camera firmware · CWE-269 | Критическая9,8 | — | 12,7 % | 27 февр. 2017 г. |
50В плане | CVE-2017-6343Эксплойта нет | The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, dahuasecurity · camera firmware · CWE-287 | Высокая8,1 | — | 60,3 % | 27 февр. 2017 г. |
60На этой неделе | CVE-2017-5982Готовый эксплойт | Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (enkodi · kodi · CWE-22 | Высокая7,5 | — | 77,9 % | 28 февр. 2017 г. |
- CVE-2017-382360На этой неделе
An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on M
ВысокаяCVSS 8,8Готовый эксплойтEPSS 27 %cisco · activetouch general plugin container1 февр. 2017 г.
- CVE-2017-563034Наблюдать
PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect,
ВысокаяCVSS 7,5Proof of conceptEPSS 12 %php · pear1 февр. 2017 г.
- CVE-2016-1015042В плане
Use-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in the Linux kernel before 4.8.13 allows host OS
КритическаяCVSS 9,8Эксплойта нетEPSS 10 %linux · linux kernel6 февр. 2017 г.
- CVE-2015-279462На этой неделе
The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via
КритическаяCVSS 9,8Proof of conceptEPSS 75 %dnnsoftware · dotnetnuke6 февр. 2017 г.
- CVE-2016-617545В плане
Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural fo
КритическаяCVSS 9,8Proof of conceptEPSS 19 %php-gettext project · php-gettext7 февр. 2017 г.
- CVE-2015-602332Наблюдать
ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote attackers to bypas
ВысокаяCVSS 7,3Proof of conceptEPSS 10 %netcommwireless · hspa 3g10wve firmware9 февр. 2017 г.
- CVE-2015-602447В плане
ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated user
КритическаяCVSS 9,8Proof of conceptEPSS 26 %netcommwireless · hspa 3g10wve firmware9 февр. 2017 г.
- CVE-2016-214847В плане
Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vecto
КритическаяCVSS 9,8Эксплойта нетEPSS 27 %busybox · busybox9 февр. 2017 г.
- CVE-2016-924452В плане
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes
ВысокаяCVSS 7,5Proof of conceptEPSS 74 %f5 · big-ip local traffic manager9 февр. 2017 г.
- CVE-2017-380739Наблюдать
A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software, Major Releases 9.0-
ВысокаяCVSS 8,8Proof of conceptEPSS 14 %cisco · adaptive security appliance software9 февр. 2017 г.
- CVE-2017-594157В плане
An issue was discovered in the node-serialize package 0.0.4 for Node.js.
КритическаяCVSS 9,8Proof of conceptEPSS 61 %node-serialize project · node-serialize9 февр. 2017 г.
- CVE-2016-621060На этой неделе
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the us
СредняяCVSS 5,9Готовый эксплойтEPSS 88 %openbsd · openssh13 февр. 2017 г.
- CVE-2016-934343В плане
An issue was discovered in Rockwell Automation Logix5000 Programmable Automation Controller FRN 16.00 through 21.00 (excluding all firmware
КритическаяCVSS 10,0Эксплойта нетEPSS 10 %rockwellautomation · softlogix 5800 controller firmware13 февр. 2017 г.
- CVE-2016-936160На этой неделе
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p
КритическаяCVSS 9,8Готовый эксплойтEPSS 20 %moxa · nport 5100 series firmware13 февр. 2017 г.
- CVE-2017-514660На этой неделе
An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17.
ВысокаяCVSS 7,5Готовый эксплойтEPSS 9 %carlosgavazzi · vmu-c em firmware13 февр. 2017 г.
- CVE-2017-516260На этой неделе
An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter.
КритическаяCVSS 9,8Готовый эксплойтEPSS 12 %binom3 · universal multifunctional electric power quality meter firmware13 февр. 2017 г.
- CVE-2017-597237Наблюдать
The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connectio
ВысокаяCVSS 7,5Proof of conceptEPSS 23 %linux · linux kernel14 февр. 2017 г.
- CVE-2017-298440В плане
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine.
ВысокаяCVSS 8,8Эксплойта нетEPSS 18 %adobe · flash player15 февр. 2017 г.
- CVE-2017-298542В плане
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class.
ВысокаяCVSS 8,8Proof of conceptEPSS 21 %adobe · flash player15 февр. 2017 г.
- CVE-2017-298644В плане
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec.
ВысокаяCVSS 8,8Proof of conceptEPSS 30 %adobe · flash player15 февр. 2017 г.
- CVE-2017-298840В плане
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection.
ВысокаяCVSS 8,8Proof of conceptEPSS 18 %adobe · flash player15 февр. 2017 г.
- CVE-2017-299245В плане
Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header.
ВысокаяCVSS 8,8Proof of conceptEPSS 32 %adobe · flash player15 февр. 2017 г.
- CVE-2017-599135Наблюдать
An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465.
ВысокаяCVSS 7,5Proof of conceptEPSS 15 %artifex · mupdf15 февр. 2017 г.
- CVE-2016-1013464На этой неделе
SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the t
КритическаяCVSS 9,8Готовый эксплойтEPSS 83 %zabbix · zabbix16 февр. 2017 г.
- CVE-2016-431423Наблюдать
Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arb
СредняяCVSS 4,9Proof of conceptEPSS 12 %wso2 · carbon16 февр. 2017 г.
- CVE-2016-865237Наблюдать
The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash)
СредняяCVSS 5,9Эксплойта нетEPSS 48 %dovecot · dovecot16 февр. 2017 г.
- CVE-2016-466940В плане
An issue was discovered in certain Apple products.
ВысокаяCVSS 7,8Готовый эксплойтEPSS 3 %apple · iphone os20 февр. 2017 г.
- CVE-2017-236129Наблюдать
An issue was discovered in certain Apple products.
СредняяCVSS 6,1Proof of conceptEPSS 17 %apple · mac os x20 февр. 2017 г.
- CVE-2017-237034Наблюдать
An issue was discovered in certain Apple products.
ВысокаяCVSS 7,8Proof of conceptEPSS 11 %apple · iphone os20 февр. 2017 г.
- CVE-2017-003847В плане
gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,
СредняяCVSS 5,5Proof of conceptEPSS 82 %microsoft · windows 1020 февр. 2017 г.
- CVE-2016-926943В плане
Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version
КритическаяCVSS 9,9Proof of conceptEPSS 13 %trendmicro · interscan web security virtual appliance21 февр. 2017 г.
- CVE-2016-968246В плане
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web ad
КритическаяCVSS 9,8Proof of conceptEPSS 23 %dell · sonicwall secure remote access server22 февр. 2017 г.
- CVE-2016-968342В плане
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web admini
КритическаяCVSS 9,8Proof of conceptEPSS 11 %dell · sonicwall secure remote access server22 февр. 2017 г.
- CVE-2017-558647В плане
OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java
КритическаяCVSS 9,8Proof of conceptEPSS 25 %opentext · documentum d222 февр. 2017 г.
- CVE-2017-607790Срочно
ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via s
КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 68 %netgear · dgn2200 firmware22 февр. 2017 г.
- CVE-2017-618760На этой неделе
Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI i
КритическаяCVSS 9,8Готовый эксплойтEPSS 33 %disksavvy · disksavvy enterprise22 февр. 2017 г.
- CVE-2017-620635Наблюдать
D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware be
ВысокаяCVSS 7,5Proof of conceptEPSS 16 %dlink · websmart dgs-1510 series firmware23 февр. 2017 г.
- CVE-2017-003786Срочно
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreak
ВысокаяCVSS 8,1KEVГотовый эксплойтEPSS 80 %microsoft · edge26 февр. 2017 г.
- CVE-2017-634243В плане
An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-0
КритическаяCVSS 9,8Эксплойта нетEPSS 12 %dahuasecurity · camera firmware27 февр. 2017 г.
- CVE-2017-634350В плане
The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29,
ВысокаяCVSS 8,1Эксплойта нетEPSS 60 %dahuasecurity · camera firmware27 февр. 2017 г.
- CVE-2017-598260На этой неделе
Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (en
ВысокаяCVSS 7,5Готовый эксплойтEPSS 77 %kodi · kodi28 февр. 2017 г.