İçeriğe atla
Noroxi

Yayın tarihine göre

Nisan 2017: sömürülen ve yeni ciddi CVE kayıtları

91 kayıt · 9 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2017-1001000
    60Bu hafta

    The register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before

    YüksekCVSS 7,5SilahlaştırılmışEPSS %84

    wordpress · wordpress2 Nis 2017

  • CVE-2014-1677
    35İzleyin

    Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    technicolor · tc7200 firmware3 Nis 2017

  • CVE-2017-7397
    33İzleyin

    BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packets with Martian sourc

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    backbox · backbox linux3 Nis 2017

  • CVE-2016-10229
    43Planlayın

    udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checks

    KritikCVSS 9,8İstismar yokEPSS %12

    linux · linux kernel4 Nis 2017

  • CVE-2017-7413
    47Planlayın

    In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an

    YüksekCVSS 8,8İstismar yokEPSS %39

    horde · groupware4 Nis 2017

  • CVE-2016-3740
    36İzleyin

    Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allows remote attackers to

    YüksekCVSS 7,8İstismar yokEPSS %15

    foxitsoftware · foxit reader4 Nis 2017

  • CVE-2017-6884
    75Bu hafta

    A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %32

    zyxel · emg2926 firmware6 Nis 2017

  • CVE-2016-8735
    96Hemen

    Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %90

    apache · tomcat6 Nis 2017

  • CVE-2017-7577
    47Planlayın

    XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request.

    KritikCVSS 9,8İstismar yokEPSS %28

    xiongmaitech · uc-httpd7 Nis 2017

  • CVE-2017-7581
    60Bu hafta

    SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arb

    KritikCVSS 9,8SilahlaştırılmışEPSS %48

    news system project · news system7 Nis 2017

  • CVE-2017-0561
    48Planlayın

    A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the con

    KritikCVSS 9,8Kavram kanıtıEPSS %29

    linux · linux kernel7 Nis 2017

  • CVE-2017-6019
    41Planlayın

    An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830.

    YüksekCVSS 7,5Kavram kanıtıEPSS %36

    schneider-electric · conext combox 865-1058 firmware7 Nis 2017

  • CVE-2017-6190
    36İzleyin

    Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows remote attackers to

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    dlink · dwr-116 firmware10 Nis 2017

  • CVE-2017-5983
    44Planlayın

    The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    atlassian · jira10 Nis 2017

  • CVE-2017-7185
    34İzleyin

    Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Libra

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    cesanta · mongoose embedded web server library10 Nis 2017

  • CVE-2017-7461
    22İzleyin

    Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows re

    OrtaCVSS 4,9Kavram kanıtıEPSS %10

    intellinet-network · nfc-30ir firmware11 Nis 2017

  • CVE-2017-7462
    43Planlayın

    Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web direc

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    intellinet-network · nfc-30ir firmware11 Nis 2017

  • CVE-2016-1908
    43Planlayın

    The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for acc

    KritikCVSS 9,8İstismar yokEPSS %13

    openbsd · openssh11 Nis 2017

  • CVE-2016-7547
    67Bu hafta

    A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.c

    KritikCVSS 9,8SilahlaştırılmışEPSS %92

    trendmicro · threat discovery appliance12 Nis 2017

  • CVE-2016-7552
    67Bu hafta

    On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthent

    KritikCVSS 9,8SilahlaştırılmışEPSS %93

    trendmicro · threat discovery appliance12 Nis 2017

  • CVE-2017-7588
    49Planlayın

    On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attemp

    KritikCVSS 9,8Kavram kanıtıEPSS %33

    brother · mfc firmware12 Nis 2017

  • CVE-2017-0093
    34İzleyin

    A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · edge12 Nis 2017

  • CVE-2017-0106
    40Planlayın

    Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execu

    YüksekCVSS 7,8Kavram kanıtıEPSS %28

    microsoft · outlook12 Nis 2017

  • CVE-2017-0158
    34İzleyin

    An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, an

    YüksekCVSS 7,5İstismar yokEPSS %12

    microsoft · windows 1012 Nis 2017

  • CVE-2017-0160
    36İzleyin

    Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious

    YüksekCVSS 7,8Kavram kanıtıEPSS %17

    microsoft · .net framework12 Nis 2017

  • CVE-2017-0194
    30İzleyin

    Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information

    OrtaCVSS 5,5İstismar yokEPSS %25

    microsoft · excel12 Nis 2017

  • CVE-2017-0197
    37İzleyin

    Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, aka "Micr

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · onenote12 Nis 2017

  • CVE-2017-0199
    91Hemen

    Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %99

    microsoft · office12 Nis 2017

  • CVE-2017-0200
    34İzleyin

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · edge12 Nis 2017

  • CVE-2017-0201
    34İzleyin

    A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines render when handling obje

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · internet explorer12 Nis 2017

  • CVE-2017-0202
    44Planlayın

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory.

    YüksekCVSS 7,5Kavram kanıtıEPSS %45

    microsoft · internet explorer12 Nis 2017

  • CVE-2017-0204
    28İzleyin

    Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to byp

    OrtaCVSS 5,5Kavram kanıtıEPSS %19

    microsoft · outlook12 Nis 2017

  • CVE-2017-0205
    37İzleyin

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory.

    YüksekCVSS 7,5İstismar yokEPSS %23

    microsoft · edge12 Nis 2017

  • CVE-2017-0207
    29İzleyin

    Microsoft Outlook for Mac 2011 allows remote attackers to spoof web content via a crafted email with specific HTML tags, aka "Microsoft Brow

    OrtaCVSS 6,5İstismar yokEPSS %10

    microsoft · outlook12 Nis 2017

  • CVE-2017-0208
    22İzleyin

    An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory

    OrtaCVSS 4,3İstismar yokEPSS %15

    microsoft · edge12 Nis 2017

  • CVE-2017-0210
    72Bu hafta

    An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %22

    microsoft · internet explorer12 Nis 2017

  • CVE-2017-0211
    26İzleyin

    An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and

    OrtaCVSS 5,5Kavram kanıtıEPSS %14

    microsoft · windows 1012 Nis 2017

  • CVE-2017-3006
    38İzleyin

    Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation o

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    adobe · creative cloud12 Nis 2017

  • CVE-2017-3022
    17İzleyin

    Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili

    DüşükCVSS 3,3İstismar yokEPSS %11

    adobe · acrobat12 Nis 2017

  • CVE-2017-3042
    35İzleyin

    Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vuln

    YüksekCVSS 7,8İstismar yokEPSS %14

    adobe · acrobat12 Nis 2017

  • CVE-2017-3044
    37İzleyin

    Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption

    YüksekCVSS 7,8İstismar yokEPSS %20

    adobe · acrobat12 Nis 2017

  • CVE-2017-3048
    35İzleyin

    Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vuln

    YüksekCVSS 7,8İstismar yokEPSS %13

    adobe · acrobat12 Nis 2017

  • CVE-2017-3055
    35İzleyin

    Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vuln

    YüksekCVSS 7,8İstismar yokEPSS %14

    adobe · acrobat12 Nis 2017

  • CVE-2017-3061
    46Planlayın

    Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser.

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    adobe · flash player12 Nis 2017

  • CVE-2017-3064
    35İzleyin

    Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline.

    YüksekCVSS 7,8Kavram kanıtıEPSS %13

    adobe · flash player12 Nis 2017

  • CVE-2017-7722
    60Bu hafta

    In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and

    KritikCVSS 10,0SilahlaştırılmışEPSS %12

    solarwinds · log \& event manager12 Nis 2017

  • CVE-2016-6808
    46Planlayın

    Buffer overflow in Apache Tomcat Connectors (mod_jk) before 1.2.42.

    KritikCVSS 9,8İstismar yokEPSS %22

    apache · tomcat jk connector12 Nis 2017

  • CVE-2016-2555
    63Bu hafta

    SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands v

    KritikCVSS 9,8SilahlaştırılmışEPSS %79

    atutor · atutor13 Nis 2017

  • CVE-2016-4970
    33İzleyin

    handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of

    YüksekCVSS 7,5İstismar yokEPSS %11

    netty · netty13 Nis 2017

  • CVE-2017-7857
    40Planlayın

    FreeType 2 before 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the TT_Get_MM_Var function in true

    KritikCVSS 9,8İstismar yokEPSS %3

    freetype · freetype14 Nis 2017

  • CVE-2017-7455
    35İzleyin

    Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    moxa · mxview14 Nis 2017

  • CVE-2017-7456
    39İzleyin

    Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView client login credent

    YüksekCVSS 7,5Kavram kanıtıEPSS %29

    moxa · mxview14 Nis 2017

  • CVE-2015-6567
    38İzleyin

    Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanage

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    wolfcms · wolf cms14 Nis 2017

  • CVE-2015-6568
    38İzleyin

    Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanage

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    wolfcms · wolf cms14 Nis 2017

  • CVE-2016-1713
    40Planlayın

    Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDeta

    YüksekCVSS 7,3SilahlaştırılmışEPSS %16

    vtiger · vtiger crm14 Nis 2017

  • CVE-2016-5312
    42Planlayın

    Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to

    OrtaCVSS 6,5Kavram kanıtıEPSS %53

    symantec · messaging gateway14 Nis 2017

  • CVE-2017-6554
    33İzleyin

    pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary fil

    YüksekCVSS 7,2Kavram kanıtıEPSS %15

    quest · privilege manager14 Nis 2017

  • CVE-2017-7696
    41Planlayın

    SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service (memory consumption) via large va

    YüksekCVSS 7,5İstismar yokEPSS %36

    sap · sso authentication library14 Nis 2017

  • CVE-2017-7615
    62Bu hafta

    MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %91

    mantisbt · mantisbt16 Nis 2017

  • CVE-2015-8256
    39İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.

    OrtaCVSS 6,1Kavram kanıtıEPSS %50

    axis · network camera firmware17 Nis 2017

  • CVE-2017-5647
    35İzleyin

    A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.7

    YüksekCVSS 7,5İstismar yokEPSS %16

    apache · tomcat17 Nis 2017

  • CVE-2017-5648
    40Planlayın

    While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.

    KritikCVSS 9,1İstismar yokEPSS %13

    apache · tomcat17 Nis 2017

  • CVE-2017-5645
    66Bu hafta

    In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another applic

    KritikCVSS 9,8Kavram kanıtıEPSS %89

    apache · log4j17 Nis 2017

  • CVE-2017-7896
    60Bu hafta

    Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.

    OrtaCVSS 6,1SilahlaştırılmışEPSS %4

    trendmicro · interscan messaging security virtual appliance18 Nis 2017

  • CVE-2017-5653
    24İzleyin

    JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypt

    OrtaCVSS 5,3İstismar yokEPSS %11

    apache · cxf18 Nis 2017

  • CVE-2017-7692
    45Planlayın

    SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file th

    YüksekCVSS 8,8Kavram kanıtıEPSS %32

    squirrelmail · squirrelmail20 Nis 2017

  • CVE-2016-1555
    98Hemen

    (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    netgear · wnap320 firmware21 Nis 2017

  • CVE-2017-8051
    44Planlayın

    Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI.

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    tenable · appliance21 Nis 2017

  • CVE-2016-1560
    61Bu hafta

    ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the

    KritikCVSS 9,8SilahlaştırılmışEPSS %72

    exagrid · ex3000 firmware21 Nis 2017

  • CVE-2016-1561
    60Bu hafta

    ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote atta

    YüksekCVSS 7,5SilahlaştırılmışEPSS %74

    exagrid · ex3000 firmware21 Nis 2017

  • CVE-2016-3109
    47Planlayın

    The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code.

    KritikCVSS 9,8İstismar yokEPSS %28

    shopware · shopware21 Nis 2017

  • CVE-2015-7245
    44Planlayın

    Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read

    YüksekCVSS 7,5Kavram kanıtıEPSS %45

    d-link · dvg-n5402sp firmware24 Nis 2017

  • CVE-2015-7246
    43Planlayın

    D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    d-link · dvg-n5402sp firmware24 Nis 2017

  • CVE-2015-7247
    42Planlayın

    D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    d-link · dvg-n5402sp firmware24 Nis 2017

  • CVE-2017-3506
    88Hemen

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

    YüksekCVSS 7,4KEVSilahlaştırılmışEPSS %95

    oracle · weblogic server24 Nis 2017

  • CVE-2017-3528
    25İzleyin

    Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datep

    OrtaCVSS 5,4Kavram kanıtıEPSS %14

    oracle · applications framework24 Nis 2017

  • CVE-2017-3548
    41Planlayın

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker).

    OrtaCVSS 6,5Kavram kanıtıEPSS %50

    oracle · peoplesoft enterprise peopletools24 Nis 2017

  • CVE-2017-3549
    41Planlayın

    Vulnerability in the Oracle Scripting component of Oracle E-Business Suite (subcomponent: Scripting Administration).

    KritikCVSS 9,1Kavram kanıtıEPSS %15

    oracle · scripting24 Nis 2017

  • CVE-2017-3599
    57Planlayın

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth).

    YüksekCVSS 7,5Kavram kanıtıEPSS %89

    oracle · mysql24 Nis 2017

  • CVE-2017-3622
    40Planlayın

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (CDE)).

    YüksekCVSS 7,8SilahlaştırılmışEPSS %5

    oracle · solaris24 Nis 2017

  • CVE-2017-3623
    47Planlayın

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC).

    KritikCVSS 10,0Kavram kanıtıEPSS %22

    oracle · solaris24 Nis 2017

  • CVE-2017-5030
    77Bu hafta

    Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %40

    google · chrome24 Nis 2017

  • CVE-2017-5040
    24İzleyin

    V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which all

    OrtaCVSS 4,3İstismar yokEPSS %23

    google · chrome24 Nis 2017

  • CVE-2017-8220
    50Planlayın

    TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP reques

    KritikCVSS 9,9İstismar yokEPSS %37

    tp-link · c2 firmware25 Nis 2017

  • CVE-2017-8225
    50Planlayın

    On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked.

    KritikCVSS 9,8Kavram kanıtıEPSS %35

    wificam · wireless ip camera \(p2p\) firmware25 Nis 2017

  • CVE-2017-8291
    90Hemen

    Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %96

    artifex · ghostscript26 Nis 2017

  • CVE-2017-3066
    96Hemen

    Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserializa

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %90

    adobe · coldfusion27 Nis 2017

  • CVE-2017-5135
    41Planlayın

    Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases.

    KritikCVSS 9,1Kavram kanıtıEPSS %17

    technicolor · dpc3928sl firmware27 Nis 2017

  • CVE-2017-7895
    42Planlayın

    The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows rem

    KritikCVSS 9,8İstismar yokEPSS %10

    linux · linux kernel28 Nis 2017

  • CVE-2017-6553
    60Bu hafta

    Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the polic

    KritikCVSS 9,8SilahlaştırılmışEPSS %42

    quest · privilege manager for unix29 Nis 2017

  • CVE-2017-7981
    40Planlayın

    Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin.

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    enalean · tuleap29 Nis 2017