По дате публикации
Эксплуатируемые и новые серьёзные CVE: март 2017 г.
158 записей · 17 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
Страница 1 из 2
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
47В плане | CVE-2017-6403Эксплойта нет | An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0.veritas · netbackup · CWE-798 | Критическая9,8 | — | 26,6 % | 2 мар. 2017 г. |
35Наблюдать | CVE-2015-8813Proof of concept | The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attackeumbraco · umbraco · CWE-918 | Высокая8,2 | — | 11,1 % | 3 мар. 2017 г. |
60На этой неделе | CVE-2016-6883Готовый эксплойт | MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher varianmatrixssl · matrixssl · CWE-200 | Средняя5,9 | — | 13,9 % | 3 мар. 2017 г. |
42В плане | CVE-2016-7406Эксплойта нет | Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers indropbear ssh project · dropbear ssh · CWE-20 | Критическая9,8 | — | 10,2 % | 3 мар. 2017 г. |
87Срочно | CVE-2017-6334Готовый эксплойт | dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands netgear · dgn2200 series firmware · CWE-78 | Высокая8,8 | KEV | 72,6 % | 5 мар. 2017 г. |
60На этой неделе | CVE-2017-6416Готовый эксплойт | An issue was discovered in SysGauge 1.5.18.flexense · sysgauge · CWE-119 | Критическая9,8 | — | 10,7 % | 5 мар. 2017 г. |
38Наблюдать | CVE-2016-6255Proof of concept | Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without debian · debian linux · CWE-284 | Высокая7,5 | — | 26,6 % | 7 мар. 2017 г. |
43В плане | CVE-2017-5178Эксплойта нет | An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and pschneider-electric · tableau desktop · CWE-1188 | Критическая9,8 | — | 13,6 % | 8 мар. 2017 г. |
45В плане | CVE-2017-6548Proof of concept | Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-ACasus · rt-ac53 firmware · CWE-119 | Критическая9,8 | — | 21,3 % | 9 мар. 2017 г. |
44В плане | CVE-2017-6558Proof of concept | iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allowiball · ib-wra150n firmware · CWE-798 | Критическая9,8 | — | 15,2 % | 9 мар. 2017 г. |
60На этой неделе | CVE-2017-6526Готовый эксплойт | An issue was discovered in dnaTools dnaLIMS 4-2015s13.dnatools · dnalims · CWE-287 | Критическая9,8 | — | 57,4 % | 9 мар. 2017 г. |
60На этой неделе | CVE-2017-6527Готовый эксплойт | An issue was discovered in dnaTools dnaLIMS 4-2015s13.dnatools · dnalims · CWE-22 | Высокая7,5 | — | 56,6 % | 9 мар. 2017 г. |
60На этой неделе | CVE-2017-6465Готовый эксплойт | Remote Code Execution was discovered in FTPShell Client 6.53.ftpshell · ftpshell client · CWE-119 | Критическая9,8 | — | 50,3 % | 9 мар. 2017 г. |
43В плане | CVE-2017-6506Proof of concept | In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leading to remote code exazure dex · data expert ultimate · CWE-119 | Критическая9,8 | — | 11,6 % | 10 мар. 2017 г. |
99Срочно | CVE-2017-5638Готовый эксплойт | The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mesapache · struts · CWE-755 | Критическая9,8 | KEV | 99,9 % | 10 мар. 2017 г. |
34Наблюдать | CVE-2017-6444Proof of concept | The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, whicmikrotik · routeros · CWE-400 | Высокая7,5 | — | 13,4 % | 12 мар. 2017 г. |
45В плане | CVE-2017-5674Эксплойта нет | A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker embedthis · goahead · CWE-200 | Критическая9,8 | — | 21,5 % | 13 мар. 2017 г. |
43В плане | CVE-2013-4659Proof of concept | Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916.asus · rt-ac66u firmware · CWE-119 | Критическая9,8 | — | 13,9 % | 14 мар. 2017 г. |
51В плане | CVE-2017-6398Готовый эксплойт | An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600.trendmicro · interscan messaging security virtual appliance · CWE-78 | Высокая8,8 | — | 54,0 % | 14 мар. 2017 г. |
40В плане | CVE-2017-6516Готовый эксплойт | A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker tomagnicomp · sysinfo · CWE-20 | Средняя6,7 | — | 5,2 % | 14 мар. 2017 г. |
35Наблюдать | CVE-2016-8020Proof of concept | Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote amcafee · virusscan enterprise · CWE-94 | Высокая8,0 | — | 11,0 % | 14 мар. 2017 г. |
34Наблюдать | CVE-2016-8022Proof of concept | Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthmcafee · virusscan enterprise · CWE-287 | Высокая7,5 | — | 13,2 % | 14 мар. 2017 г. |
42В плане | CVE-2016-10166Эксплойта нет | Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remlibgd · libgd · CWE-191 | Критическая9,8 | — | 10,6 % | 15 мар. 2017 г. |
43В плане | CVE-2017-5358Proof of concept | Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbitrary code via the seasycom-aura · easycom for php · CWE-119 | Критическая9,8 | — | 12,1 % | 15 мар. 2017 г. |
33Наблюдать | CVE-2016-7103Эксплойта нет | Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via jqueryui · jquery ui · CWE-79 | Средняя6,1 | — | 29,1 % | 15 мар. 2017 г. |
60На этой неделе | CVE-2017-6510Готовый эксплойт | Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download efssoft · easy file sharing ftp server · CWE-22 | Высокая7,5 | — | 15,3 % | 16 мар. 2017 г. |
62На этой неделе | CVE-2017-0001Готовый эксплойт | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows microsoft · windows 10 1507 | Высокая7,8 | KEV | 3,1 % | 16 мар. 2017 г. |
64На этой неделе | CVE-2017-0005Готовый эксплойт | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows microsoft · windows 10 1507 | Высокая7,8 | KEV | 11,0 % | 16 мар. 2017 г. |
36Наблюдать | CVE-2017-0006Эксплойта нет | Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackemicrosoft · excel · CWE-119 | Высокая7,8 | — | 16,6 % | 16 мар. 2017 г. |
25Наблюдать | CVE-2017-0007Эксплойта нет | Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without imicrosoft · windows 10 · CWE-20 | Средняя5,5 | — | 11,2 % | 16 мар. 2017 г. |
28Наблюдать | CVE-2017-0008Эксплойта нет | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, microsoft · internet explorer · CWE-200 | Средняя4,3 | — | 36,9 % | 16 мар. 2017 г. |
29Наблюдать | CVE-2017-0009Эксплойта нет | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, microsoft · internet explorer · CWE-200 | Средняя4,3 | — | 39,6 % | 16 мар. 2017 г. |
38Наблюдать | CVE-2017-0010Эксплойта нет | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge | Высокая7,5 | — | 27,0 % | 16 мар. 2017 г. |
30Наблюдать | CVE-2017-0011Эксплойта нет | Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure Vumicrosoft · edge · CWE-200 | Средняя4,3 | — | 42,3 % | 16 мар. 2017 г. |
35Наблюдать | CVE-2017-0014Эксплойта нет | The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Golmicrosoft · office | Высокая7,5 | — | 17,5 % | 16 мар. 2017 г. |
38Наблюдать | CVE-2017-0015Эксплойта нет | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 | Высокая7,5 | — | 26,3 % | 16 мар. 2017 г. |
31Наблюдать | CVE-2017-0016Эксплойта нет | Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handmicrosoft · windows 10 · CWE-476 | Средняя5,9 | — | 25,7 % | 16 мар. 2017 г. |
37Наблюдать | CVE-2017-0017Эксплойта нет | The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitimicrosoft · edge · CWE-79 | Средняя6,1 | — | 41,9 % | 16 мар. 2017 г. |
34Наблюдать | CVE-2017-0018Эксплойта нет | Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via microsoft · internet explorer · CWE-119 | Высокая7,5 | — | 13,5 % | 16 мар. 2017 г. |
36Наблюдать | CVE-2017-0019Эксплойта нет | Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted documenmicrosoft · word · CWE-119 | Высокая7,8 | — | 16,6 % | 16 мар. 2017 г. |
36Наблюдать | CVE-2017-0020Эксплойта нет | Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary codmicrosoft · excel · CWE-119 | Высокая7,8 | — | 16,3 % | 16 мар. 2017 г. |
61На этой неделе | CVE-2017-0022Готовый эксплойт | Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 microsoft · xml core services · CWE-119 | Средняя6,5 | KEV | 18,0 % | 16 мар. 2017 г. |
40В плане | CVE-2017-0023Эксплойта нет | The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attmicrosoft · edge · CWE-119 | Высокая7,5 | — | 34,0 % | 16 мар. 2017 г. |
25Наблюдать | CVE-2017-0027Эксплойта нет | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Sermicrosoft · excel · CWE-200 | Средняя4,7 | — | 22,5 % | 16 мар. 2017 г. |
27Наблюдать | CVE-2017-0029Эксплойта нет | Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application hmicrosoft · office | Средняя5,5 | — | 15,5 % | 16 мар. 2017 г. |
39Наблюдать | CVE-2017-0030Эксплойта нет | Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automationmicrosoft · office · CWE-119 | Высокая7,8 | — | 25,9 % | 16 мар. 2017 г. |
39Наблюдать | CVE-2017-0031Эксплойта нет | Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code microsoft · office · CWE-119 | Высокая7,8 | — | 26,3 % | 16 мар. 2017 г. |
35Наблюдать | CVE-2017-0032Эксплойта нет | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 | Высокая7,5 | — | 15,2 % | 16 мар. 2017 г. |
34Наблюдать | CVE-2017-0034Эксплойта нет | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.microsoft · edge · CWE-119 | Высокая7,5 | — | 12,7 % | 16 мар. 2017 г. |
35Наблюдать | CVE-2017-0035Эксплойта нет | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 | Высокая7,5 | — | 15,2 % | 16 мар. 2017 г. |
42В плане | CVE-2017-0039Эксплойта нет | Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges vimicrosoft · windows server 2008 | Высокая7,8 | — | 37,3 % | 16 мар. 2017 г. |
34Наблюдать | CVE-2017-0040Эксплойта нет | The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of servmicrosoft · internet explorer · CWE-119 | Высокая7,5 | — | 13,4 % | 16 мар. 2017 г. |
21Наблюдать | CVE-2017-0042Эксплойта нет | Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Smicrosoft · windows 10 · CWE-200 | Низкая3,1 | — | 29,5 % | 16 мар. 2017 г. |
29Наблюдать | CVE-2017-0049Эксплойта нет | The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafmicrosoft · internet explorer · CWE-200 | Средняя4,3 | — | 38,9 % | 16 мар. 2017 г. |
36Наблюдать | CVE-2017-0052Эксплойта нет | Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attackemicrosoft · excel · CWE-119 | Высокая7,8 | — | 16,6 % | 16 мар. 2017 г. |
36Наблюдать | CVE-2017-0053Эксплойта нет | Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Wordmicrosoft · office · CWE-119 | Высокая7,8 | — | 16,7 % | 16 мар. 2017 г. |
29Наблюдать | CVE-2017-0055Proof of concept | Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Servermicrosoft · windows 10 · CWE-79 | Средняя6,1 | — | 16,3 % | 16 мар. 2017 г. |
21Наблюдать | CVE-2017-0057Эксплойта нет | DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 fails microsoft · windows 10 · CWE-200 | Средняя4,3 | — | 13,9 % | 16 мар. 2017 г. |
66На этой неделе | CVE-2017-0059Готовый эксплойт | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, microsoft · internet explorer | Средняя4,3 | KEV | 61,9 % | 16 мар. 2017 г. |
27Наблюдать | CVE-2017-0060Proof of concept | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows microsoft · live meeting · CWE-200 | Средняя5,5 | — | 15,9 % | 16 мар. 2017 г. |
34Наблюдать | CVE-2017-0061Proof of concept | The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SPmicrosoft · windows 7 · CWE-200 | Средняя5,3 | — | 43,1 % | 16 мар. 2017 г. |
23Наблюдать | CVE-2017-0062Proof of concept | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows microsoft · windows 10 · CWE-200 | Средняя4,7 | — | 17,8 % | 16 мар. 2017 г. |
37Наблюдать | CVE-2017-0063Proof of concept | The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SPmicrosoft · windows 10 · CWE-200 | Средняя6,5 | — | 35,2 % | 16 мар. 2017 г. |
25Наблюдать | CVE-2017-0065Proof of concept | Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser Inmicrosoft · edge · CWE-200 | Средняя4,3 | — | 27,4 % | 16 мар. 2017 г. |
25Наблюдать | CVE-2017-0066Эксплойта нет | Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Secumicrosoft · edge | Средняя4,2 | — | 29,9 % | 16 мар. 2017 г. |
35Наблюдать | CVE-2017-0067Эксплойта нет | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 | Высокая7,5 | — | 15,2 % | 16 мар. 2017 г. |
22Наблюдать | CVE-2017-0068Эксплойта нет | Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoftmicrosoft · edge · CWE-200 | Средняя4,3 | — | 15,1 % | 16 мар. 2017 г. |
54В плане | CVE-2017-0070Proof of concept | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-416 | Высокая7,5 | — | 78,5 % | 16 мар. 2017 г. |
40В плане | CVE-2017-0071Эксплойта нет | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 | Высокая7,5 | — | 31,8 % | 16 мар. 2017 г. |
48В плане | CVE-2017-0072Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 | Высокая8,8 | — | 42,5 % | 16 мар. 2017 г. |
27Наблюдать | CVE-2017-0073Эксплойта нет | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows microsoft · live meeting · CWE-200 | Средняя4,3 | — | 33,3 % | 16 мар. 2017 г. |
34Наблюдать | CVE-2017-0075Proof of concept | Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windowsmicrosoft · windows 10 | Высокая7,6 | — | 12,6 % | 16 мар. 2017 г. |
48В плане | CVE-2017-0083Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 | Высокая8,8 | — | 42,5 % | 16 мар. 2017 г. |
46В плане | CVE-2017-0084Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Wmicrosoft · windows 10 · CWE-119 | Высокая8,8 | — | 36,5 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0085Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,4 % | 16 мар. 2017 г. |
48В плане | CVE-2017-0086Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 | Высокая8,8 | — | 42,5 % | 16 мар. 2017 г. |
48В плане | CVE-2017-0087Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 | Высокая8,8 | — | 42,5 % | 16 мар. 2017 г. |
48В плане | CVE-2017-0088Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 | Высокая8,8 | — | 41,8 % | 16 мар. 2017 г. |
52В плане | CVE-2017-0089Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 | Высокая8,8 | — | 57,3 % | 16 мар. 2017 г. |
48В плане | CVE-2017-0090Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrarymicrosoft · windows 7 · CWE-119 | Высокая8,8 | — | 42,5 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0091Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,4 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0092Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,4 % | 16 мар. 2017 г. |
40В плане | CVE-2017-0094Эксплойта нет | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micromicrosoft · edge · CWE-119 | Высокая7,5 | — | 31,6 % | 16 мар. 2017 г. |
78На этой неделе | CVE-2017-0101Готовый эксплойт | The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Wmicrosoft · windows 7 · CWE-119 | Высокая7,8 | KEV | 57,4 % | 16 мар. 2017 г. |
36Наблюдать | CVE-2017-0104Эксплойта нет | The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote microsoft · windows server 2008 · CWE-190 | Высокая8,1 | — | 13,8 % | 16 мар. 2017 г. |
31Наблюдать | CVE-2017-0105Эксплойта нет | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on Sharemicrosoft · office · CWE-200 | Средняя5,5 | — | 30,4 % | 16 мар. 2017 г. |
46В плане | CVE-2017-0108Proof of concept | The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lmicrosoft · live meeting · CWE-119 | Высокая7,8 | — | 50,4 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0111Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,4 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0112Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,4 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0113Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,4 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0114Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,4 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0115Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,4 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0116Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,4 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0117Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,4 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0118Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Wmicrosoft · windows 10 · CWE-200 | Средняя4,3 | — | 22,9 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0119Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,4 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0120Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,0 % | 16 мар. 2017 г. |
30Наблюдать | CVE-2017-0121Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Wmicrosoft · windows 10 · CWE-200 | Средняя4,3 | — | 42,1 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0122Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,4 % | 16 мар. 2017 г. |
24Наблюдать | CVE-2017-0123Proof of concept | Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive microsoft · windows 7 · CWE-200 | Средняя4,3 | — | 22,4 % | 16 мар. 2017 г. |
- CVE-2017-640347В плане
An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0.
КритическаяCVSS 9,8Эксплойта нетEPSS 26 %veritas · netbackup2 мар. 2017 г.
- CVE-2015-881335Наблюдать
The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attacke
ВысокаяCVSS 8,2Proof of conceptEPSS 11 %umbraco · umbraco3 мар. 2017 г.
- CVE-2016-688360На этой неделе
MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher varian
СредняяCVSS 5,9Готовый эксплойтEPSS 13 %matrixssl · matrixssl3 мар. 2017 г.
- CVE-2016-740642В плане
Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in
КритическаяCVSS 9,8Эксплойта нетEPSS 10 %dropbear ssh project · dropbear ssh3 мар. 2017 г.
- CVE-2017-633487Срочно
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands
ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 72 %netgear · dgn2200 series firmware5 мар. 2017 г.
- CVE-2017-641660На этой неделе
An issue was discovered in SysGauge 1.5.18.
КритическаяCVSS 9,8Готовый эксплойтEPSS 10 %flexense · sysgauge5 мар. 2017 г.
- CVE-2016-625538Наблюдать
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a POST request without
ВысокаяCVSS 7,5Proof of conceptEPSS 26 %debian · debian linux7 мар. 2017 г.
- CVE-2017-517843В плане
An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and p
КритическаяCVSS 9,8Эксплойта нетEPSS 13 %schneider-electric · tableau desktop8 мар. 2017 г.
- CVE-2017-654845В плане
Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC
КритическаяCVSS 9,8Proof of conceptEPSS 21 %asus · rt-ac53 firmware9 мар. 2017 г.
- CVE-2017-655844В плане
iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allow
КритическаяCVSS 9,8Proof of conceptEPSS 15 %iball · ib-wra150n firmware9 мар. 2017 г.
- CVE-2017-652660На этой неделе
An issue was discovered in dnaTools dnaLIMS 4-2015s13.
КритическаяCVSS 9,8Готовый эксплойтEPSS 57 %dnatools · dnalims9 мар. 2017 г.
- CVE-2017-652760На этой неделе
An issue was discovered in dnaTools dnaLIMS 4-2015s13.
ВысокаяCVSS 7,5Готовый эксплойтEPSS 56 %dnatools · dnalims9 мар. 2017 г.
- CVE-2017-646560На этой неделе
Remote Code Execution was discovered in FTPShell Client 6.53.
КритическаяCVSS 9,8Готовый эксплойтEPSS 50 %ftpshell · ftpshell client9 мар. 2017 г.
- CVE-2017-650643В плане
In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leading to remote code ex
КритическаяCVSS 9,8Proof of conceptEPSS 11 %azure dex · data expert ultimate10 мар. 2017 г.
- CVE-2017-563899Срочно
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mes
КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 99 %apache · struts10 мар. 2017 г.
- CVE-2017-644434Наблюдать
The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, whic
ВысокаяCVSS 7,5Proof of conceptEPSS 13 %mikrotik · routeros12 мар. 2017 г.
- CVE-2017-567445В плане
A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker
КритическаяCVSS 9,8Эксплойта нетEPSS 21 %embedthis · goahead13 мар. 2017 г.
- CVE-2013-465943В плане
Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916.
КритическаяCVSS 9,8Proof of conceptEPSS 13 %asus · rt-ac66u firmware14 мар. 2017 г.
- CVE-2017-639851В плане
An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600.
ВысокаяCVSS 8,8Готовый эксплойтEPSS 54 %trendmicro · interscan messaging security virtual appliance14 мар. 2017 г.
- CVE-2017-651640В плане
A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker to
СредняяCVSS 6,7Готовый эксплойтEPSS 5 %magnicomp · sysinfo14 мар. 2017 г.
- CVE-2016-802035Наблюдать
Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote a
ВысокаяCVSS 8,0Proof of conceptEPSS 11 %mcafee · virusscan enterprise14 мар. 2017 г.
- CVE-2016-802234Наблюдать
Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauth
ВысокаяCVSS 7,5Proof of conceptEPSS 13 %mcafee · virusscan enterprise14 мар. 2017 г.
- CVE-2016-1016642В плане
Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows rem
КритическаяCVSS 9,8Эксплойта нетEPSS 10 %libgd · libgd15 мар. 2017 г.
- CVE-2017-535843В плане
Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbitrary code via the s
КритическаяCVSS 9,8Proof of conceptEPSS 12 %easycom-aura · easycom for php15 мар. 2017 г.
- CVE-2016-710333Наблюдать
Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via
СредняяCVSS 6,1Эксплойта нетEPSS 29 %jqueryui · jquery ui15 мар. 2017 г.
- CVE-2017-651060На этой неделе
Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download
ВысокаяCVSS 7,5Готовый эксплойтEPSS 15 %efssoft · easy file sharing ftp server16 мар. 2017 г.
- CVE-2017-000162На этой неделе
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 3 %microsoft · windows 10 150716 мар. 2017 г.
- CVE-2017-000564На этой неделе
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 11 %microsoft · windows 10 150716 мар. 2017 г.
- CVE-2017-000636Наблюдать
Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attacke
ВысокаяCVSS 7,8Эксплойта нетEPSS 16 %microsoft · excel16 мар. 2017 г.
- CVE-2017-000725Наблюдать
Device Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote attackers to modify PowerShell script without i
СредняяCVSS 5,5Эксплойта нетEPSS 11 %microsoft · windows 1016 мар. 2017 г.
- CVE-2017-000828Наблюдать
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site,
СредняяCVSS 4,3Эксплойта нетEPSS 36 %microsoft · internet explorer16 мар. 2017 г.
- CVE-2017-000929Наблюдать
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site,
СредняяCVSS 4,3Эксплойта нетEPSS 39 %microsoft · internet explorer16 мар. 2017 г.
- CVE-2017-001038Наблюдать
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
ВысокаяCVSS 7,5Эксплойта нетEPSS 27 %microsoft · edge16 мар. 2017 г.
- CVE-2017-001130Наблюдать
Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure Vu
СредняяCVSS 4,3Эксплойта нетEPSS 42 %microsoft · edge16 мар. 2017 г.
- CVE-2017-001435Наблюдать
The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gol
ВысокаяCVSS 7,5Эксплойта нетEPSS 17 %microsoft · office16 мар. 2017 г.
- CVE-2017-001538Наблюдать
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
ВысокаяCVSS 7,5Эксплойта нетEPSS 26 %microsoft · edge16 мар. 2017 г.
- CVE-2017-001631Наблюдать
Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly hand
СредняяCVSS 5,9Эксплойта нетEPSS 25 %microsoft · windows 1016 мар. 2017 г.
- CVE-2017-001737Наблюдать
The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensiti
СредняяCVSS 6,1Эксплойта нетEPSS 41 %microsoft · edge16 мар. 2017 г.
- CVE-2017-001834Наблюдать
Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
ВысокаяCVSS 7,5Эксплойта нетEPSS 13 %microsoft · internet explorer16 мар. 2017 г.
- CVE-2017-001936Наблюдать
Microsoft Word 2016 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted documen
ВысокаяCVSS 7,8Эксплойта нетEPSS 16 %microsoft · word16 мар. 2017 г.
- CVE-2017-002036Наблюдать
Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary cod
ВысокаяCVSS 7,8Эксплойта нетEPSS 16 %microsoft · excel16 мар. 2017 г.
- CVE-2017-002261На этой неделе
Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2
СредняяCVSS 6,5KEVГотовый эксплойтEPSS 18 %microsoft · xml core services16 мар. 2017 г.
- CVE-2017-002340В плане
The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote att
ВысокаяCVSS 7,5Эксплойта нетEPSS 34 %microsoft · edge16 мар. 2017 г.
- CVE-2017-002725Наблюдать
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Services on SharePoint Ser
СредняяCVSS 4,7Эксплойта нетEPSS 22 %microsoft · excel16 мар. 2017 г.
- CVE-2017-002927Наблюдать
Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of service (application h
СредняяCVSS 5,5Эксплойта нетEPSS 15 %microsoft · office16 мар. 2017 г.
- CVE-2017-003039Наблюдать
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2, and Word Automation
ВысокаяCVSS 7,8Эксплойта нетEPSS 25 %microsoft · office16 мар. 2017 г.
- CVE-2017-003139Наблюдать
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, and Word 2010 SP2 allow remote attackers to execute arbitrary code
ВысокаяCVSS 7,8Эксплойта нетEPSS 26 %microsoft · office16 мар. 2017 г.
- CVE-2017-003235Наблюдать
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
ВысокаяCVSS 7,5Эксплойта нетEPSS 15 %microsoft · edge16 мар. 2017 г.
- CVE-2017-003434Наблюдать
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.
ВысокаяCVSS 7,5Эксплойта нетEPSS 12 %microsoft · edge16 мар. 2017 г.
- CVE-2017-003535Наблюдать
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
ВысокаяCVSS 7,5Эксплойта нетEPSS 15 %microsoft · edge16 мар. 2017 г.
- CVE-2017-003942В плане
Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle dynamic link library (DLL) loading, which allows local users to gain privileges vi
ВысокаяCVSS 7,8Эксплойта нетEPSS 37 %microsoft · windows server 200816 мар. 2017 г.
- CVE-2017-004034Наблюдать
The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of serv
ВысокаяCVSS 7,5Эксплойта нетEPSS 13 %microsoft · internet explorer16 мар. 2017 г.
- CVE-2017-004221Наблюдать
Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows S
НизкаяCVSS 3,1Эксплойта нетEPSS 29 %microsoft · windows 1016 мар. 2017 г.
- CVE-2017-004929Наблюдать
The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a craf
СредняяCVSS 4,3Эксплойта нетEPSS 38 %microsoft · internet explorer16 мар. 2017 г.
- CVE-2017-005236Наблюдать
Microsoft Office Compatibility Pack SP3, Excel 2007 SP3, Excel Viewer, and Excel Services on SharePoint Server 2007 SP3 allow remote attacke
ВысокаяCVSS 7,8Эксплойта нетEPSS 16 %microsoft · excel16 мар. 2017 г.
- CVE-2017-005336Наблюдать
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Word 2007 SP3, Word 2010 SP2, Word 2013 SP1, Word 2013 R2 SP1, Word 2016, and Word
ВысокаяCVSS 7,8Эксплойта нетEPSS 16 %microsoft · office16 мар. 2017 г.
- CVE-2017-005529Наблюдать
Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server
СредняяCVSS 6,1Proof of conceptEPSS 16 %microsoft · windows 1016 мар. 2017 г.
- CVE-2017-005721Наблюдать
DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 fails
СредняяCVSS 4,3Эксплойта нетEPSS 13 %microsoft · windows 1016 мар. 2017 г.
- CVE-2017-005966На этой неделе
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site,
СредняяCVSS 4,3KEVГотовый эксплойтEPSS 61 %microsoft · internet explorer16 мар. 2017 г.
- CVE-2017-006027Наблюдать
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
СредняяCVSS 5,5Proof of conceptEPSS 15 %microsoft · live meeting16 мар. 2017 г.
- CVE-2017-006134Наблюдать
The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2, Windows Server 2008 SP2 and R2, and Windows 7 SP
СредняяCVSS 5,3Proof of conceptEPSS 43 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-006223Наблюдать
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
СредняяCVSS 4,7Proof of conceptEPSS 17 %microsoft · windows 1016 мар. 2017 г.
- CVE-2017-006337Наблюдать
The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and R2; and Windows 7 SP
СредняяCVSS 6,5Proof of conceptEPSS 35 %microsoft · windows 1016 мар. 2017 г.
- CVE-2017-006525Наблюдать
Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser In
СредняяCVSS 4,3Proof of conceptEPSS 27 %microsoft · edge16 мар. 2017 г.
- CVE-2017-006625Наблюдать
Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Secu
СредняяCVSS 4,2Эксплойта нетEPSS 29 %microsoft · edge16 мар. 2017 г.
- CVE-2017-006735Наблюдать
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
ВысокаяCVSS 7,5Эксплойта нетEPSS 15 %microsoft · edge16 мар. 2017 г.
- CVE-2017-006822Наблюдать
Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft
СредняяCVSS 4,3Эксплойта нетEPSS 15 %microsoft · edge16 мар. 2017 г.
- CVE-2017-007054В плане
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
ВысокаяCVSS 7,5Proof of conceptEPSS 78 %microsoft · edge16 мар. 2017 г.
- CVE-2017-007140В плане
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
ВысокаяCVSS 7,5Эксплойта нетEPSS 31 %microsoft · edge16 мар. 2017 г.
- CVE-2017-007248В плане
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
ВысокаяCVSS 8,8Proof of conceptEPSS 42 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-007327Наблюдать
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows
СредняяCVSS 4,3Эксплойта нетEPSS 33 %microsoft · live meeting16 мар. 2017 г.
- CVE-2017-007534Наблюдать
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows
ВысокаяCVSS 7,6Proof of conceptEPSS 12 %microsoft · windows 1016 мар. 2017 г.
- CVE-2017-008348В плане
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
ВысокаяCVSS 8,8Proof of conceptEPSS 42 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-008446В плане
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W
ВысокаяCVSS 8,8Proof of conceptEPSS 36 %microsoft · windows 1016 мар. 2017 г.
- CVE-2017-008524Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-008648В плане
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
ВысокаяCVSS 8,8Proof of conceptEPSS 42 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-008748В плане
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
ВысокаяCVSS 8,8Proof of conceptEPSS 42 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-008848В плане
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
ВысокаяCVSS 8,8Proof of conceptEPSS 41 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-008952В плане
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
ВысокаяCVSS 8,8Proof of conceptEPSS 57 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-009048В плане
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary
ВысокаяCVSS 8,8Proof of conceptEPSS 42 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-009124Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-009224Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-009440В плане
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Micro
ВысокаяCVSS 7,5Эксплойта нетEPSS 31 %microsoft · edge16 мар. 2017 г.
- CVE-2017-010178На этой неделе
The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, W
ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 57 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-010436Наблюдать
The iSNS Server service in Microsoft Windows Server 2008 SP2 and R2, Windows Server 2012 Gold and R2, and Windows Server 2016 allows remote
ВысокаяCVSS 8,1Эксплойта нетEPSS 13 %microsoft · windows server 200816 мар. 2017 г.
- CVE-2017-010531Наблюдать
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on Share
СредняяCVSS 5,5Эксплойта нетEPSS 30 %microsoft · office16 мар. 2017 г.
- CVE-2017-010846В плане
The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; L
ВысокаяCVSS 7,8Proof of conceptEPSS 50 %microsoft · live meeting16 мар. 2017 г.
- CVE-2017-011124Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-011224Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-011324Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-011424Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-011524Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-011624Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-011724Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-011824Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 1016 мар. 2017 г.
- CVE-2017-011924Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-012024Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-012130Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, W
СредняяCVSS 4,3Proof of conceptEPSS 42 %microsoft · windows 1016 мар. 2017 г.
- CVE-2017-012224Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.
- CVE-2017-012324Наблюдать
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive
СредняяCVSS 4,3Proof of conceptEPSS 22 %microsoft · windows 716 мар. 2017 г.