İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2017: sömürülen ve yeni ciddi CVE kayıtları

88 kayıt · 10 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2015-8257
    40Planlayın

    The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell metacharacters in t

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    axis · network camera firmware2 May 2017

  • CVE-2016-5810
    40Planlayın

    upAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated administrators to obtain sensitive password information

    OrtaCVSS 4,9SilahlaştırılmışEPSS %15

    advantech · webaccess2 May 2017

  • CVE-2017-5689
    97Hemen

    An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (A

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %92

    intel · active management technology firmware2 May 2017

  • CVE-2016-10367
    35İzleyin

    In Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    opsview · opsview3 May 2017

  • CVE-2017-8295
    31İzleyin

    WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to re

    OrtaCVSS 5,9Kavram kanıtıEPSS %26

    wordpress · wordpress4 May 2017

  • CVE-2017-8779
    60Bu hafta

    rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data

    YüksekCVSS 7,5SilahlaştırılmışEPSS %81

    rpcbind project · rpcbind4 May 2017

  • CVE-2016-7053
    37İzleyin

    CMS Null dereference

    YüksekCVSS 7,5İstismar yokEPSS %21

    openssl · openssl4 May 2017

  • CVE-2016-7054
    40Planlayın

    ChaCha20/Poly1305 heap-buffer-overflow

    YüksekCVSS 7,5Kavram kanıtıEPSS %32

    openssl · openssl4 May 2017

  • CVE-2017-3730
    47Planlayın

    Bad (EC)DHE parameters cause a client crash

    YüksekCVSS 7,5Kavram kanıtıEPSS %55

    openssl · openssl4 May 2017

  • CVE-2017-3731
    47Planlayın

    Truncated packet could crash via OOB read

    YüksekCVSS 7,5İstismar yokEPSS %57

    openssl · openssl4 May 2017

  • CVE-2017-3732
    28İzleyin

    BN_mod_exp may produce incorrect results on x86_64

    OrtaCVSS 5,9İstismar yokEPSS %15

    openssl · openssl4 May 2017

  • CVE-2017-3733
    34İzleyin

    Encrypt-Then-Mac renegotiation crash

    YüksekCVSS 7,5İstismar yokEPSS %12

    openssl · openssl4 May 2017

  • CVE-2016-7055
    27İzleyin

    There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that

    OrtaCVSS 5,9İstismar yokEPSS %14

    openssl · openssl4 May 2017

  • CVE-2017-8303
    46Planlayın

    An issue was discovered on Accellion FTA devices before FTA_9_12_180.

    KritikCVSS 9,8İstismar yokEPSS %24

    accellion · file transfer appliance5 May 2017

  • CVE-2017-7921
    99Hemen

    An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    hikvision · ds-2cd2032-i firmware5 May 2017

  • CVE-2017-7925
    54Planlayın

    A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-I

    KritikCVSS 9,8Kavram kanıtıEPSS %51

    dahuasecurity · dh-ipc-hdbw23a0rn-zs firmware5 May 2017

  • CVE-2017-7927
    40Planlayın

    A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-

    YüksekCVSS 7,3İstismar yokEPSS %36

    dahuasecurity · dh-ipc-hdbw23a0rn-zs firmware5 May 2017

  • CVE-2017-0290
    55Planlayın

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP

    YüksekCVSS 7,8Kavram kanıtıEPSS %81

    microsoft · forefront security9 May 2017

  • CVE-2017-3068
    41Planlayın

    Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine.

    YüksekCVSS 8,8Kavram kanıtıEPSS %20

    adobe · flash player desktop runtime9 May 2017

  • CVE-2017-8895
    60Bu hafta

    In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a use-after-free vulner

    KritikCVSS 9,8SilahlaştırılmışEPSS %71

    veritas · backup exec10 May 2017

  • CVE-2017-8798
    46Planlayın

    Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly h

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    miniupnp project · miniupnpd10 May 2017

  • CVE-2017-0190
    30İzleyin

    The GDI component in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8

    OrtaCVSS 4,4İstismar yokEPSS %43

    microsoft · windows 1012 May 2017

  • CVE-2017-0213
    84Hemen

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2

    YüksekCVSS 7,3KEVSilahlaştırılmışEPSS %84

    microsoft · windows 10 150712 May 2017

  • CVE-2017-0222
    74Bu hafta

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %29

    microsoft · internet explorer12 May 2017

  • CVE-2017-0224
    33İzleyin

    A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "Sc

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · edge12 May 2017

  • CVE-2017-0227
    34İzleyin

    A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects

    YüksekCVSS 7,5İstismar yokEPSS %13

    microsoft · edge12 May 2017

  • CVE-2017-0228
    35İzleyin

    A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · edge12 May 2017

  • CVE-2017-0229
    33İzleyin

    A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Sc

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · edge12 May 2017

  • CVE-2017-0230
    33İzleyin

    A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Sc

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · edge12 May 2017

  • CVE-2017-0234
    41Planlayın

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in

    YüksekCVSS 7,5İstismar yokEPSS %38

    microsoft · edge12 May 2017

  • CVE-2017-0235
    33İzleyin

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · edge12 May 2017

  • CVE-2017-0236
    39İzleyin

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in

    YüksekCVSS 7,5İstismar yokEPSS %31

    microsoft · edge12 May 2017

  • CVE-2017-0238
    35İzleyin

    A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka "Sc

    YüksekCVSS 7,5İstismar yokEPSS %18

    microsoft · edge12 May 2017

  • CVE-2017-0240
    34İzleyin

    A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · edge12 May 2017

  • CVE-2017-0247
    35İzleyin

    A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests.

    YüksekCVSS 7,5İstismar yokEPSS %16

    microsoft · asp.net model view controller12 May 2017

  • CVE-2017-0254
    37İzleyin

    Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Offi

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · office12 May 2017

  • CVE-2017-0261
    84Hemen

    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %78

    microsoft · office12 May 2017

  • CVE-2017-0262
    85Hemen

    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %81

    microsoft · office12 May 2017

  • CVE-2017-0263
    64Bu hafta

    The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Window

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %10

    microsoft · windows 10 150712 May 2017

  • CVE-2017-0264
    35İzleyin

    Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory,

    YüksekCVSS 7,8İstismar yokEPSS %13

    microsoft · powerpoint for mac12 May 2017

  • CVE-2017-0265
    37İzleyin

    Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory,

    YüksekCVSS 7,8İstismar yokEPSS %18

    microsoft · powerpoint for mac12 May 2017

  • CVE-2017-0266
    41Planlayın

    A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects

    YüksekCVSS 7,5İstismar yokEPSS %35

    microsoft · edge12 May 2017

  • CVE-2017-0267
    27İzleyin

    Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2

    OrtaCVSS 5,9İstismar yokEPSS %12

    microsoft · windows 1012 May 2017

  • CVE-2017-0271
    27İzleyin

    Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2

    OrtaCVSS 5,9İstismar yokEPSS %13

    microsoft · windows 1012 May 2017

  • CVE-2017-0272
    37İzleyin

    The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows S

    YüksekCVSS 8,1İstismar yokEPSS %17

    microsoft · windows 1012 May 2017

  • CVE-2017-0277
    31İzleyin

    The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows S

    YüksekCVSS 7,0İstismar yokEPSS %10

    microsoft · windows 1012 May 2017

  • CVE-2017-0278
    31İzleyin

    The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows S

    YüksekCVSS 7,0İstismar yokEPSS %10

    microsoft · windows 1012 May 2017

  • CVE-2017-0279
    31İzleyin

    The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows S

    YüksekCVSS 7,0İstismar yokEPSS %10

    microsoft · windows 1012 May 2017

  • CVE-2017-0281
    36İzleyin

    Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web App

    YüksekCVSS 7,8İstismar yokEPSS %15

    microsoft · office12 May 2017

  • CVE-2016-10329
    51Planlayın

    Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code v

    KritikCVSS 9,8İstismar yokEPSS %40

    synology · photo station12 May 2017

  • CVE-2017-0223
    43Planlayın

    A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory.

    KritikCVSS 9,8İstismar yokEPSS %14

    microsoft · edge15 May 2017

  • CVE-2017-0252
    43Planlayın

    A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory.

    KritikCVSS 9,8İstismar yokEPSS %13

    microsoft · edge15 May 2017

  • CVE-2017-7478
    34İzleyin

    OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet.

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    openvpn · openvpn15 May 2017

  • CVE-2016-10372
    64Bu hafta

    The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port

    KritikCVSS 9,8SilahlaştırılmışEPSS %81

    eir · d1000 modem firmware16 May 2017

  • CVE-2017-6079
    53Planlayın

    The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such a

    KritikCVSS 9,8Kavram kanıtıEPSS %46

    ribboncommunications · edgemarc firmware16 May 2017

  • CVE-2017-8917
    69Bu hafta

    SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors.

    KritikCVSS 9,8SilahlaştırılmışEPSS %99

    joomla · joomla\!17 May 2017

  • CVE-2017-6622
    58Planlayın

    A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass au

    KritikCVSS 9,8Kavram kanıtıEPSS %62

    cisco · prime collaboration provisioning18 May 2017

  • CVE-2017-5173
    48Planlayın

    An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0

    KritikCVSS 9,8Kavram kanıtıEPSS %29

    geutebrueck · ip camera g-cam efd-2250 firmware18 May 2017

  • CVE-2017-5174
    55Planlayın

    An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12.

    KritikCVSS 9,8Kavram kanıtıEPSS %52

    geutebruck · ip camera g-cam efd-2250 firmware18 May 2017

  • CVE-2017-5177
    35İzleyin

    A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior.

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    vipa controls · winplc7 firmware18 May 2017

  • CVE-2017-6048
    40Planlayın

    A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c a

    YüksekCVSS 8,8SilahlaştırılmışEPSS %15

    satel-iberia · sennet multitask meter18 May 2017

  • CVE-2017-9080
    54Planlayın

    PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %62

    playsms · playsms19 May 2017

  • CVE-2017-7504
    51Planlayın

    HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Appli

    KritikCVSS 9,8Kavram kanıtıEPSS %38

    redhat · jboss enterprise application platform19 May 2017

  • CVE-2017-9100
    61Bu hafta

    login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spac

    YüksekCVSS 8,8İstismar yokEPSS %85

    dlink · dir-600m firmware21 May 2017

  • CVE-2017-9024
    34İzleyin

    Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor (SCA) 3.0, has a Directory Traversal issue in its

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    secure-bytes · secure cisco auditor21 May 2017

  • CVE-2017-9101
    62Bu hafta

    import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header a

    KritikCVSS 9,8SilahlaştırılmışEPSS %76

    playsms · playsms21 May 2017

  • CVE-2017-2523
    42Planlayın

    An issue was discovered in certain Apple products.

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    apple · iphone os22 May 2017

  • CVE-2017-2536
    38İzleyin

    An issue was discovered in certain Apple products.

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    apple · safari22 May 2017

  • CVE-2017-2547
    40Planlayın

    An issue was discovered in certain Apple products.

    YüksekCVSS 8,8Kavram kanıtıEPSS %15

    apple · safari22 May 2017

  • CVE-2017-4915
    40Planlayın

    VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %5

    vmware · workstation player22 May 2017

  • CVE-2017-1092
    62Bu hafta

    IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows serv

    KritikCVSS 9,8SilahlaştırılmışEPSS %75

    ibm · informix open admin tool22 May 2017

  • CVE-2015-4455
    51Planlayın

    Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPr

    KritikCVSS 9,8Kavram kanıtıEPSS %40

    aviary image editor add-on for gravity forms project · aviary image editor add-on for gravity forms23 May 2017

  • CVE-2015-5468
    37İzleyin

    Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrar

    YüksekCVSS 7,5Kavram kanıtıEPSS %24

    wpshopstyling · wp e-commerce shop styling23 May 2017

  • CVE-2015-5469
    33İzleyin

    Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary fil

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    mdc youtube downloader project · mdc youtube downloader23 May 2017

  • CVE-2016-10073
    60Bu hafta

    The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent mes

    YüksekCVSS 7,5SilahlaştırılmışEPSS %83

    vanillaforums · vanilla23 May 2017

  • CVE-2016-7979
    41Planlayın

    Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code b

    KritikCVSS 9,8İstismar yokEPSS %6

    artifex · ghostscript23 May 2017

  • CVE-2017-9217
    35İzleyin

    systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS response with an empty qu

    YüksekCVSS 7,5İstismar yokEPSS %15

    systemd project · systemd24 May 2017

  • CVE-2017-2824
    40Planlayın

    An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X.

    YüksekCVSS 8,1Kavram kanıtıEPSS %25

    zabbix · zabbix24 May 2017

  • CVE-2016-4977
    59Planlayın

    When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_t

    YüksekCVSS 8,8Kavram kanıtıEPSS %79

    pivotal · spring security oauth25 May 2017

  • CVE-2017-6862
    83Hemen

    NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication byp

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %45

    netgear · wnr2000 firmware26 May 2017

  • CVE-2017-8535
    27İzleyin

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP

    OrtaCVSS 5,5Kavram kanıtıEPSS %16

    microsoft · windows defender26 May 2017

  • CVE-2017-8536
    27İzleyin

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP

    OrtaCVSS 5,5Kavram kanıtıEPSS %16

    microsoft · windows defender26 May 2017

  • CVE-2017-8537
    27İzleyin

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP

    OrtaCVSS 5,5Kavram kanıtıEPSS %16

    microsoft · windows defender26 May 2017

  • CVE-2017-8538
    46Planlayın

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP

    YüksekCVSS 7,8Kavram kanıtıEPSS %50

    microsoft · forefront security26 May 2017

  • CVE-2017-8540
    83Hemen

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %71

    microsoft · malware protection engine26 May 2017

  • CVE-2017-8541
    45Planlayın

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP

    YüksekCVSS 7,8Kavram kanıtıEPSS %48

    microsoft · forefront security26 May 2017

  • CVE-2017-9232
    60Bu hafta

    Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing

    KritikCVSS 9,8SilahlaştırılmışEPSS %48

    canonical · juju27 May 2017

  • CVE-2017-7494
    99Hemen

    Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious cli

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    samba · samba30 May 2017