Yayın tarihine göre
Haziran 2017: sömürülen ve yeni ciddi CVE kayıtları
82 kayıt · 4 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
62Bu hafta | CVE-2015-0936Silahlaştırılmış | Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtaiceragon · fibeair ip-10 firmware · CWE-320 | Kritik9,8 | — | %78,0 | 1 Haz 2017 |
43Planlayın | CVE-2015-5473İstismar yok | Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecifisamsung · syncthru 6 · CWE-22 | Kritik9,8 | — | %12,6 | 1 Haz 2017 |
39İzleyin | CVE-2017-8386Kavram kanıtı | git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x bgit · git-shell | Yüksek8,8 | — | %12,3 | 1 Haz 2017 |
34İzleyin | CVE-2017-9347Kavram kanıtı | In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference.wireshark · wireshark · CWE-476 | Yüksek7,5 | — | %13,8 | 2 Haz 2017 |
34İzleyin | CVE-2017-9353Kavram kanıtı | In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash.wireshark · wireshark · CWE-20 | Yüksek7,5 | — | %14,0 | 2 Haz 2017 |
40Planlayın | CVE-2017-9380Kavram kanıtı | OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within thopen-emr · openemr · CWE-434 | Yüksek8,8 | — | %15,1 | 2 Haz 2017 |
28İzleyin | CVE-2017-9416Kavram kanıtı | Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local fiodoo · odoo · CWE-22 | Orta6,5 | — | %5,6 | 4 Haz 2017 |
58Planlayın | CVE-2017-9417Kavram kanıtı | Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue.broadcom · bcm43xx wi-fi chipset firmware | Kritik9,8 | — | %63,9 | 4 Haz 2017 |
42Planlayın | CVE-2017-9430Kavram kanıtı | Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspdnstracer project · dnstracer · CWE-119 | Kritik9,8 | — | %11,3 | 5 Haz 2017 |
60Bu hafta | CVE-2017-8835Silahlaştırılmış | SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350peplink · b305hw2 firmware · CWE-89 | Kritik9,8 | — | %61,5 | 5 Haz 2017 |
35İzleyin | CVE-2017-5664İstismar yok | The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the errorapache · tomcat · CWE-755 | Yüksek7,5 | — | %16,5 | 6 Haz 2017 |
42Planlayın | CVE-2017-9462Silahlaştırılmış | In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbimercurial · mercurial · CWE-732 | Yüksek8,8 | — | %21,6 | 6 Haz 2017 |
37İzleyin | CVE-2017-9355Kavram kanıtı | XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-sidesubsonic · subsonic · CWE-918 | Yüksek7,4 | — | %26,9 | 7 Haz 2017 |
33İzleyin | CVE-2015-5175İstismar yok | Application plugins in Apache CXF Fediz before 1.1.3 and 1.2.x before 1.2.1 allow remote attackers to cause a denial of service.apache · cxf fediz · CWE-20 | Yüksek7,5 | — | %10,8 | 7 Haz 2017 |
45Planlayın | CVE-2017-4901Kavram kanıtı | The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds mvmware · fusion · CWE-119 | Kritik9,9 | — | %19,9 | 8 Haz 2017 |
50Planlayın | CVE-2017-6639İstismar yok | A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unautcisco · prime data center network manager · CWE-16 | Kritik9,8 | — | %35,3 | 8 Haz 2017 |
42Planlayın | CVE-2017-6640Kavram kanıtı | A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the cisco · prime data center network manager · CWE-264 | Kritik9,8 | — | %10,7 | 8 Haz 2017 |
60Bu hafta | CVE-2014-8687Silahlaştırılmış | Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by leveraseagate · business nas firmware · CWE-327 | Kritik9,8 | — | %43,8 | 8 Haz 2017 |
75Bu hafta | CVE-2016-7836Silahlaştırılmış | SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection withskygroup · skysea client view · CWE-287 | Kritik9,8 | KEV | %19,2 | 9 Haz 2017 |
30İzleyin | CVE-2017-8871Kavram kanıtı | The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite gnome · libcroco · CWE-835 | Orta6,5 | — | %12,9 | 12 Haz 2017 |
60Bu hafta | CVE-2017-9544Silahlaştırılmış | There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1.echatserver · easy chat server · CWE-787 | Kritik9,8 | — | %24,1 | 12 Haz 2017 |
27İzleyin | CVE-2017-4971Kavram kanıtı | An issue was discovered in Pivotal Spring Web Flow through 2.4.4.broadcom · spring web flow · CWE-1188 | Orta5,9 | — | %14,6 | 13 Haz 2017 |
32İzleyin | CVE-2017-0215İstismar yok | Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that microsoft · windows 10 · CWE-668 | Orta5,3 | — | %35,7 | 14 Haz 2017 |
37İzleyin | CVE-2017-0260İstismar yok | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Rmicrosoft · office | Yüksek7,8 | — | %19,9 | 14 Haz 2017 |
47Planlayın | CVE-2017-0283Kavram kanıtı | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Golmicrosoft · lync | Yüksek8,8 | — | %39,0 | 14 Haz 2017 |
37İzleyin | CVE-2017-0291İstismar yok | Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allomicrosoft · windows 10 | Yüksek7,8 | — | %20,4 | 14 Haz 2017 |
38İzleyin | CVE-2017-0292İstismar yok | Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allomicrosoft · word | Yüksek7,8 | — | %24,2 | 14 Haz 2017 |
36İzleyin | CVE-2017-0294İstismar yok | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15microsoft · windows 10 | Yüksek7,8 | — | %17,3 | 14 Haz 2017 |
92Hemen | CVE-2017-8464Silahlaştırılmış | Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windomicrosoft · windows 10 1511 | Yüksek8,8 | KEV | %90,0 | 14 Haz 2017 |
45Planlayın | CVE-2017-8496Kavram kanıtı | Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user whmicrosoft · edge · CWE-119 | Yüksek7,5 | — | %51,4 | 14 Haz 2017 |
38İzleyin | CVE-2017-8506İstismar yok | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Rmicrosoft · outlook | Yüksek7,8 | — | %24,1 | 14 Haz 2017 |
37İzleyin | CVE-2017-8507İstismar yok | A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka "Microsoft Ofmicrosoft · outlook · CWE-119 | Yüksek7,8 | — | %19,6 | 14 Haz 2017 |
42Planlayın | CVE-2017-8510İstismar yok | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Rmicrosoft · excel | Yüksek8,8 | — | %22,1 | 14 Haz 2017 |
37İzleyin | CVE-2017-8511İstismar yok | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Rmicrosoft · office | Yüksek7,8 | — | %20,6 | 14 Haz 2017 |
36İzleyin | CVE-2017-8513İstismar yok | A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Micrmicrosoft · powerpoint · CWE-119 | Yüksek7,8 | — | %17,1 | 14 Haz 2017 |
41Planlayın | CVE-2017-8527İstismar yok | Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Goldmicrosoft · lync · CWE-119 | Yüksek8,8 | — | %19,0 | 14 Haz 2017 |
41Planlayın | CVE-2017-8528İstismar yok | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Golmicrosoft · office · CWE-119 | Yüksek8,8 | — | %19,8 | 14 Haz 2017 |
91Hemen | CVE-2017-8543Silahlaştırılmış | Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Winmicrosoft · windows 10 1507 · CWE-281 | Kritik9,8 | KEV | %74,1 | 14 Haz 2017 |
50Planlayın | CVE-2017-8548Kavram kanıtı | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to furthmicrosoft · edge · CWE-119 | Yüksek7,5 | — | %67,5 | 14 Haz 2017 |
28İzleyin | CVE-2017-8550Kavram kanıtı | A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skypemicrosoft · office · CWE-79 | Orta5,4 | — | %22,4 | 14 Haz 2017 |
21İzleyin | CVE-2017-8555İstismar yok | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a page with malicious content when the Edge Contmicrosoft · edge · CWE-20 | Orta4,3 | — | %12,5 | 14 Haz 2017 |
40Planlayın | CVE-2017-8509İstismar yok | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Rmicrosoft · office | Yüksek8,8 | — | %18,2 | 15 Haz 2017 |
42Planlayın | CVE-2017-8512İstismar yok | A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office Rmicrosoft · office | Yüksek8,8 | — | %22,1 | 15 Haz 2017 |
30İzleyin | CVE-2017-8529Kavram kanıtı | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 allmicrosoft · internet explorer · CWE-119 | Orta6,5 | — | %14,2 | 15 Haz 2017 |
34İzleyin | CVE-2017-9675Kavram kanıtı | On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot.dlink · dir-605l firmware · CWE-20 | Yüksek7,5 | — | %12,0 | 15 Haz 2017 |
40Planlayın | CVE-2017-8461Silahlaştırılmış | Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RPmicrosoft · windows server 2003 | Yüksek7,8 | — | %20,4 | 15 Haz 2017 |
47Planlayın | CVE-2017-8487Kavram kanıtı | Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or programmicrosoft · windows server 2003 | Yüksek7,8 | — | %54,1 | 15 Haz 2017 |
46Planlayın | CVE-2017-9757Silahlaştırılmış | IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell.ipfire · ipfire · CWE-78 | Yüksek8,8 | — | %37,4 | 19 Haz 2017 |
40Planlayın | CVE-2017-1000364Silahlaştırılmış | An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can blinux · linux kernel · CWE-119 | Yüksek7,4 | — | %5,1 | 19 Haz 2017 |
30İzleyin | CVE-2017-1000373Kavram kanıtı | The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causeopenbsd · openbsd · CWE-400 | Orta6,5 | — | %13,3 | 19 Haz 2017 |
45Planlayın | CVE-2017-1000375Kavram kanıtı | NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manetbsd · netbsd · CWE-119 | Kritik9,8 | — | %18,9 | 19 Haz 2017 |
45Planlayın | CVE-2017-3167İstismar yok | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentapache · http server · CWE-287 | Kritik9,8 | — | %20,2 | 19 Haz 2017 |
45Planlayın | CVE-2017-3169İstismar yok | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_prapache · http server · CWE-476 | Kritik9,8 | — | %19,9 | 19 Haz 2017 |
47Planlayın | CVE-2017-7668İstismar yok | The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token()apache · http server · CWE-126 | Yüksek7,5 | — | %57,4 | 19 Haz 2017 |
51Planlayın | CVE-2017-7679Kavram kanıtı | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Coapache · http server · CWE-126 | Kritik9,8 | — | %39,3 | 19 Haz 2017 |
46Planlayın | CVE-2017-3076Kavram kanıtı | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module.adobe · flash player · CWE-119 | Kritik9,8 | — | %24,7 | 20 Haz 2017 |
46Planlayın | CVE-2017-3077Kavram kanıtı | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser.adobe · flash player · CWE-119 | Kritik9,8 | — | %22,2 | 20 Haz 2017 |
48Planlayın | CVE-2017-3078Kavram kanıtı | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) modadobe · flash player · CWE-119 | Kritik9,8 | — | %30,8 | 20 Haz 2017 |
43Planlayın | CVE-2017-3081İstismar yok | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by muadobe · flash player · CWE-416 | Kritik9,8 | — | %14,4 | 20 Haz 2017 |
42Planlayın | CVE-2017-3082İstismar yok | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class.adobe · flash player · CWE-119 | Kritik9,8 | — | %11,6 | 20 Haz 2017 |
43Planlayın | CVE-2017-3083İstismar yok | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality relatadobe · flash player · CWE-416 | Kritik9,8 | — | %14,4 | 20 Haz 2017 |
47Planlayın | CVE-2017-2805İstismar yok | An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera.foscam · c1 hd indoor camera firmware · CWE-787 | Kritik9,8 | — | %26,2 | 21 Haz 2017 |
40Planlayın | CVE-2017-7918Silahlaştırılmış | An Improper Access Control issue was discovered in Cambium Networks ePMP.cambium networks · epmp 1000 firmware · CWE-284 | Orta6,8 | — | %6,6 | 21 Haz 2017 |
40Planlayın | CVE-2017-7922Silahlaştırılmış | An Improper Privilege Management issue was discovered in Cambium Networks ePMP.cambium networks · epmp 1000 firmware · CWE-269 | Yüksek7,6 | — | %9,6 | 21 Haz 2017 |
42Planlayın | CVE-2012-6706İstismar yok | A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and sophos · threat detection engine · CWE-190 | Kritik9,8 | — | %10,1 | 22 Haz 2017 |
40Planlayın | CVE-2017-3629Silahlaştırılmış | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).oracle · solaris · CWE-119 | Yüksek7,8 | — | %5,0 | 22 Haz 2017 |
40Planlayın | CVE-2017-3630Silahlaştırılmış | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).oracle · solaris · CWE-787 | Orta5,3 | — | %4,5 | 22 Haz 2017 |
40Planlayın | CVE-2017-3631Silahlaştırılmış | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).oracle · solaris · CWE-119 | Orta5,3 | — | %5,9 | 22 Haz 2017 |
46Planlayın | CVE-2017-0176İstismar yok | A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a rmicrosoft · windows server 2003 · CWE-120 | Yüksek8,1 | — | %45,7 | 22 Haz 2017 |
43Planlayın | CVE-2015-9098Kavram kanıtı | In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Monitor, resulting in tred-gate · sql monitor · CWE-89 | Kritik9,8 | — | %14,0 | 22 Haz 2017 |
64Bu hafta | CVE-2017-9828İstismar yok | '/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which alvivotek · network camera ib8369 firmware · CWE-78 | Kritik9,8 | — | %82,4 | 23 Haz 2017 |
51Planlayın | CVE-2017-9829İstismar yok | '/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers tvivotek · network camera ib8369 firmware · CWE-22 | Yüksek7,5 | — | %68,7 | 23 Haz 2017 |
51Planlayın | CVE-2017-9833Kavram kanıtı | /cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root privboa · boa · CWE-22 | Yüksek7,5 | — | %68,4 | 23 Haz 2017 |
40Planlayın | CVE-2015-3315Silahlaştırılmış | Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary filesredhat · automatic bug reporting tool · CWE-59 | Yüksek7,8 | — | %4,7 | 26 Haz 2017 |
62Bu hafta | CVE-2017-6326Silahlaştırılmış | The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtainsymantec · messaging gateway | Kritik10,0 | — | %72,7 | 26 Haz 2017 |
99Hemen | CVE-2017-9841Silahlaştırılmış | Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST daphpunit project · phpunit · CWE-94 | Kritik9,8 | KEV | %99,9 | 27 Haz 2017 |
34İzleyin | CVE-2014-6354İstismar yok | Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 allows remicrosoft · internet explorer · CWE-119 | Yüksek7,5 | — | %12,8 | 27 Haz 2017 |
29İzleyin | CVE-2015-7780Kavram kanıtı | Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.zohocorp · manageengine firewall analyzer · CWE-22 | Orta6,5 | — | %10,6 | 27 Haz 2017 |
46Planlayın | CVE-2017-9445İstismar yok | In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small.systemd project · systemd · CWE-787 | Yüksek7,5 | — | %54,8 | 28 Haz 2017 |
35İzleyin | CVE-2017-9993İstismar yok | FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaminffmpeg · ffmpeg · CWE-200 | Yüksek7,5 | — | %16,4 | 28 Haz 2017 |
44Planlayın | CVE-2017-8558Kavram kanıtı | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Servermicrosoft · windows defender · CWE-119 | Yüksek7,8 | — | %43,5 | 29 Haz 2017 |
46Planlayın | CVE-2017-6026Kavram kanıtı | A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Versischneider-electric · modicon m251 firmware · CWE-330 | Kritik9,1 | — | %31,8 | 29 Haz 2017 |
- CVE-2015-093662Bu hafta
Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtai
KritikCVSS 9,8SilahlaştırılmışEPSS %78ceragon · fibeair ip-10 firmware1 Haz 2017
- CVE-2015-547343Planlayın
Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecifi
KritikCVSS 9,8İstismar yokEPSS %12samsung · syncthru 61 Haz 2017
- CVE-2017-838639İzleyin
git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x b
YüksekCVSS 8,8Kavram kanıtıEPSS %12git · git-shell1 Haz 2017
- CVE-2017-934734İzleyin
In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference.
YüksekCVSS 7,5Kavram kanıtıEPSS %13wireshark · wireshark2 Haz 2017
- CVE-2017-935334İzleyin
In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash.
YüksekCVSS 7,5Kavram kanıtıEPSS %14wireshark · wireshark2 Haz 2017
- CVE-2017-938040Planlayın
OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within th
YüksekCVSS 8,8Kavram kanıtıEPSS %15open-emr · openemr2 Haz 2017
- CVE-2017-941628İzleyin
Directory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote authenticated users to read arbitrary local fi
OrtaCVSS 6,5Kavram kanıtıEPSS %5odoo · odoo4 Haz 2017
- CVE-2017-941758Planlayın
Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpwn" issue.
KritikCVSS 9,8Kavram kanıtıEPSS %63broadcom · bcm43xx wi-fi chipset firmware4 Haz 2017
- CVE-2017-943042Planlayın
Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unsp
KritikCVSS 9,8Kavram kanıtıEPSS %11dnstracer project · dnstracer5 Haz 2017
- CVE-2017-883560Bu hafta
SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350
KritikCVSS 9,8SilahlaştırılmışEPSS %61peplink · b305hw2 firmware5 Haz 2017
- CVE-2017-566435İzleyin
The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error
YüksekCVSS 7,5İstismar yokEPSS %16apache · tomcat6 Haz 2017
- CVE-2017-946242Planlayın
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbi
YüksekCVSS 8,8SilahlaştırılmışEPSS %21mercurial · mercurial6 Haz 2017
- CVE-2017-935537İzleyin
XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side
YüksekCVSS 7,4Kavram kanıtıEPSS %26subsonic · subsonic7 Haz 2017
- CVE-2015-517533İzleyin
Application plugins in Apache CXF Fediz before 1.1.3 and 1.2.x before 1.2.1 allow remote attackers to cause a denial of service.
YüksekCVSS 7,5İstismar yokEPSS %10apache · cxf fediz7 Haz 2017
- CVE-2017-490145Planlayın
The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds m
KritikCVSS 9,9Kavram kanıtıEPSS %19vmware · fusion8 Haz 2017
- CVE-2017-663950Planlayın
A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unaut
KritikCVSS 9,8İstismar yokEPSS %35cisco · prime data center network manager8 Haz 2017
- CVE-2017-664042Planlayın
A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the
KritikCVSS 9,8Kavram kanıtıEPSS %10cisco · prime data center network manager8 Haz 2017
- CVE-2014-868760Bu hafta
Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by levera
KritikCVSS 9,8SilahlaştırılmışEPSS %43seagate · business nas firmware8 Haz 2017
- CVE-2016-783675Bu hafta
SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %19skygroup · skysea client view9 Haz 2017
- CVE-2017-887130İzleyin
The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial of service (infinite
OrtaCVSS 6,5Kavram kanıtıEPSS %12gnome · libcroco12 Haz 2017
- CVE-2017-954460Bu hafta
There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1.
KritikCVSS 9,8SilahlaştırılmışEPSS %24echatserver · easy chat server12 Haz 2017
- CVE-2017-497127İzleyin
An issue was discovered in Pivotal Spring Web Flow through 2.4.4.
OrtaCVSS 5,9Kavram kanıtıEPSS %14broadcom · spring web flow13 Haz 2017
- CVE-2017-021532İzleyin
Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that
OrtaCVSS 5,3İstismar yokEPSS %35microsoft · windows 1014 Haz 2017
- CVE-2017-026037İzleyin
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R
YüksekCVSS 7,8İstismar yokEPSS %19microsoft · office14 Haz 2017
- CVE-2017-028347Planlayın
Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gol
YüksekCVSS 8,8Kavram kanıtıEPSS %39microsoft · lync14 Haz 2017
- CVE-2017-029137İzleyin
Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allo
YüksekCVSS 7,8İstismar yokEPSS %20microsoft · windows 1014 Haz 2017
- CVE-2017-029238İzleyin
Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allo
YüksekCVSS 7,8İstismar yokEPSS %24microsoft · word14 Haz 2017
- CVE-2017-029436İzleyin
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 15
YüksekCVSS 7,8İstismar yokEPSS %17microsoft · windows 1014 Haz 2017
- CVE-2017-846492Hemen
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windo
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %90microsoft · windows 10 151114 Haz 2017
- CVE-2017-849645Planlayın
Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user wh
YüksekCVSS 7,5Kavram kanıtıEPSS %51microsoft · edge14 Haz 2017
- CVE-2017-850638İzleyin
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R
YüksekCVSS 7,8İstismar yokEPSS %24microsoft · outlook14 Haz 2017
- CVE-2017-850737İzleyin
A remote code execution vulnerability exists in the way Microsoft Office software parses specially crafted email messages, aka "Microsoft Of
YüksekCVSS 7,8İstismar yokEPSS %19microsoft · outlook14 Haz 2017
- CVE-2017-851042Planlayın
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R
YüksekCVSS 8,8İstismar yokEPSS %22microsoft · excel14 Haz 2017
- CVE-2017-851137İzleyin
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R
YüksekCVSS 7,8İstismar yokEPSS %20microsoft · office14 Haz 2017
- CVE-2017-851336İzleyin
A remote code execution vulnerability exists in Microsoft PowerPoint when the software fails to properly handle objects in memory, aka "Micr
YüksekCVSS 7,8İstismar yokEPSS %17microsoft · powerpoint14 Haz 2017
- CVE-2017-852741Planlayın
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold
YüksekCVSS 8,8İstismar yokEPSS %19microsoft · lync14 Haz 2017
- CVE-2017-852841Planlayın
Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gol
YüksekCVSS 8,8İstismar yokEPSS %19microsoft · office14 Haz 2017
- CVE-2017-854391Hemen
Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Win
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %74microsoft · windows 10 150714 Haz 2017
- CVE-2017-854850Planlayın
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to furth
YüksekCVSS 7,5Kavram kanıtıEPSS %67microsoft · edge14 Haz 2017
- CVE-2017-855028İzleyin
A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skype
OrtaCVSS 5,4Kavram kanıtıEPSS %22microsoft · office14 Haz 2017
- CVE-2017-855521İzleyin
Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a page with malicious content when the Edge Cont
OrtaCVSS 4,3İstismar yokEPSS %12microsoft · edge14 Haz 2017
- CVE-2017-850940Planlayın
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R
YüksekCVSS 8,8İstismar yokEPSS %18microsoft · office15 Haz 2017
- CVE-2017-851242Planlayın
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in memory, aka "Office R
YüksekCVSS 8,8İstismar yokEPSS %22microsoft · office15 Haz 2017
- CVE-2017-852930İzleyin
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 and R2 all
OrtaCVSS 6,5Kavram kanıtıEPSS %14microsoft · internet explorer15 Haz 2017
- CVE-2017-967534İzleyin
On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot.
YüksekCVSS 7,5Kavram kanıtıEPSS %12dlink · dir-605l firmware15 Haz 2017
- CVE-2017-846140Planlayın
Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute code on a targeted RP
YüksekCVSS 7,8SilahlaştırılmışEPSS %20microsoft · windows server 200315 Haz 2017
- CVE-2017-848747Planlayın
Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program
YüksekCVSS 7,8Kavram kanıtıEPSS %54microsoft · windows server 200315 Haz 2017
- CVE-2017-975746Planlayın
IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by a shell.
YüksekCVSS 8,8SilahlaştırılmışEPSS %37ipfire · ipfire19 Haz 2017
- CVE-2017-100036440Planlayın
An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can b
YüksekCVSS 7,4SilahlaştırılmışEPSS %5linux · linux kernel19 Haz 2017
- CVE-2017-100037330İzleyin
The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that cause
OrtaCVSS 6,5Kavram kanıtıEPSS %13openbsd · openbsd19 Haz 2017
- CVE-2017-100037545Planlayın
NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily ma
KritikCVSS 9,8Kavram kanıtıEPSS %18netbsd · netbsd19 Haz 2017
- CVE-2017-316745Planlayın
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authent
KritikCVSS 9,8İstismar yokEPSS %20apache · http server19 Haz 2017
- CVE-2017-316945Planlayın
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_pr
KritikCVSS 9,8İstismar yokEPSS %19apache · http server19 Haz 2017
- CVE-2017-766847Planlayın
The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token()
YüksekCVSS 7,5İstismar yokEPSS %57apache · http server19 Haz 2017
- CVE-2017-767951Planlayın
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Co
KritikCVSS 9,8Kavram kanıtıEPSS %39apache · http server19 Haz 2017
- CVE-2017-307646Planlayın
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module.
KritikCVSS 9,8Kavram kanıtıEPSS %24adobe · flash player20 Haz 2017
- CVE-2017-307746Planlayın
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser.
KritikCVSS 9,8Kavram kanıtıEPSS %22adobe · flash player20 Haz 2017
- CVE-2017-307848Planlayın
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) mod
KritikCVSS 9,8Kavram kanıtıEPSS %30adobe · flash player20 Haz 2017
- CVE-2017-308143Planlayın
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by mu
KritikCVSS 9,8İstismar yokEPSS %14adobe · flash player20 Haz 2017
- CVE-2017-308242Planlayın
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class.
KritikCVSS 9,8İstismar yokEPSS %11adobe · flash player20 Haz 2017
- CVE-2017-308343Planlayın
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality relat
KritikCVSS 9,8İstismar yokEPSS %14adobe · flash player20 Haz 2017
- CVE-2017-280547Planlayın
An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera.
KritikCVSS 9,8İstismar yokEPSS %26foscam · c1 hd indoor camera firmware21 Haz 2017
- CVE-2017-791840Planlayın
An Improper Access Control issue was discovered in Cambium Networks ePMP.
OrtaCVSS 6,8SilahlaştırılmışEPSS %6cambium networks · epmp 1000 firmware21 Haz 2017
- CVE-2017-792240Planlayın
An Improper Privilege Management issue was discovered in Cambium Networks ePMP.
YüksekCVSS 7,6SilahlaştırılmışEPSS %9cambium networks · epmp 1000 firmware21 Haz 2017
- CVE-2012-670642Planlayın
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and
KritikCVSS 9,8İstismar yokEPSS %10sophos · threat detection engine22 Haz 2017
- CVE-2017-362940Planlayın
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).
YüksekCVSS 7,8SilahlaştırılmışEPSS %5oracle · solaris22 Haz 2017
- CVE-2017-363040Planlayın
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).
OrtaCVSS 5,3SilahlaştırılmışEPSS %4oracle · solaris22 Haz 2017
- CVE-2017-363140Planlayın
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).
OrtaCVSS 5,3SilahlaştırılmışEPSS %5oracle · solaris22 Haz 2017
- CVE-2017-017646Planlayın
A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a r
YüksekCVSS 8,1İstismar yokEPSS %45microsoft · windows server 200322 Haz 2017
- CVE-2015-909843Planlayın
In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Monitor, resulting in t
KritikCVSS 9,8Kavram kanıtıEPSS %14red-gate · sql monitor22 Haz 2017
- CVE-2017-982864Bu hafta
'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which al
KritikCVSS 9,8İstismar yokEPSS %82vivotek · network camera ib8369 firmware23 Haz 2017
- CVE-2017-982951Planlayın
'/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allows remote attackers t
YüksekCVSS 7,5İstismar yokEPSS %68vivotek · network camera ib8369 firmware23 Haz 2017
- CVE-2017-983351Planlayın
/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read files with root priv
YüksekCVSS 7,5Kavram kanıtıEPSS %68boa · boa23 Haz 2017
- CVE-2015-331540Planlayın
Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files
YüksekCVSS 7,8SilahlaştırılmışEPSS %4redhat · automatic bug reporting tool26 Haz 2017
- CVE-2017-632662Bu hafta
The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain
KritikCVSS 10,0SilahlaştırılmışEPSS %72symantec · messaging gateway26 Haz 2017
- CVE-2017-984199Hemen
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST da
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99phpunit project · phpunit27 Haz 2017
- CVE-2014-635434İzleyin
Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 allows re
YüksekCVSS 7,5İstismar yokEPSS %12microsoft · internet explorer27 Haz 2017
- CVE-2015-778029İzleyin
Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.
OrtaCVSS 6,5Kavram kanıtıEPSS %10zohocorp · manageengine firewall analyzer27 Haz 2017
- CVE-2017-944546Planlayın
In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small.
YüksekCVSS 7,5İstismar yokEPSS %54systemd project · systemd28 Haz 2017
- CVE-2017-999335İzleyin
FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streamin
YüksekCVSS 7,5İstismar yokEPSS %16ffmpeg · ffmpeg28 Haz 2017
- CVE-2017-855844Planlayın
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server
YüksekCVSS 7,8Kavram kanıtıEPSS %43microsoft · windows defender29 Haz 2017
- CVE-2017-602646Planlayın
A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware versions prior to Versi
KritikCVSS 9,1Kavram kanıtıEPSS %31schneider-electric · modicon m251 firmware29 Haz 2017