İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2017: sömürülen ve yeni ciddi CVE kayıtları

109 kayıt · 6 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2017-8572
    26İzleyin

    Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows

    OrtaCVSS 5,5İstismar yokEPSS %12

    microsoft · outlook1 Ağu 2017

  • CVE-2017-8663
    37İzleyin

    Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · outlook1 Ağu 2017

  • CVE-2015-2560
    44Planlayın

    Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an a

    KritikCVSS 9,8İstismar yokEPSS %15

    zohocorp · manageengine desktop central2 Ağu 2017

  • CVE-2017-9769
    65Bu hafta

    A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a

    KritikCVSS 9,8SilahlaştırılmışEPSS %85

    razer · synapse2 Ağu 2017

  • CVE-2017-11383
    51Planlayın

    SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input

    KritikCVSS 9,8İstismar yokEPSS %38

    trendmicro · control manager2 Ağu 2017

  • CVE-2017-11384
    51Planlayın

    SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input

    KritikCVSS 9,8İstismar yokEPSS %38

    trendmicro · control manager2 Ağu 2017

  • CVE-2017-11385
    51Planlayın

    SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input

    KritikCVSS 9,8İstismar yokEPSS %38

    trendmicro · control manager2 Ağu 2017

  • CVE-2017-11386
    46Planlayın

    SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input

    KritikCVSS 9,8İstismar yokEPSS %24

    trendmicro · control manager2 Ağu 2017

  • CVE-2017-11387
    34İzleyin

    Authentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when authentication validation is not done for functi

    YüksekCVSS 7,5İstismar yokEPSS %14

    trendmicro · control manager2 Ağu 2017

  • CVE-2017-11388
    39İzleyin

    SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate u

    YüksekCVSS 8,8İstismar yokEPSS %14

    trendmicro · control manager2 Ağu 2017

  • CVE-2017-11389
    47Planlayın

    Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to drop arbitrary files

    KritikCVSS 9,8İstismar yokEPSS %27

    trendmicro · control manager2 Ağu 2017

  • CVE-2017-7442
    47Planlayın

    Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %40

    gonitro · nitro pro3 Ağu 2017

  • CVE-2017-11391
    54Planlayın

    Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute ar

    YüksekCVSS 8,8SilahlaştırılmışEPSS %62

    trendmicro · interscan messaging security virtual appliance3 Ağu 2017

  • CVE-2017-11392
    45Planlayın

    Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute ar

    YüksekCVSS 8,8SilahlaştırılmışEPSS %34

    trendmicro · interscan messaging security virtual appliance3 Ağu 2017

  • CVE-2017-11393
    44Planlayın

    Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerab

    KritikCVSS 9,8İstismar yokEPSS %15

    trendmicro · officescan3 Ağu 2017

  • CVE-2017-11394
    59Planlayın

    Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerab

    KritikCVSS 9,8SilahlaştırılmışEPSS %66

    trendmicro · officescan3 Ağu 2017

  • CVE-2017-6663
    57Planlayın

    A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %2

    cisco · ios7 Ağu 2017

  • CVE-2017-12477
    59Planlayın

    It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in

    KritikCVSS 9,8SilahlaştırılmışEPSS %68

    kaseya · unitrends backup7 Ağu 2017

  • CVE-2017-12478
    62Bu hafta

    It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameter

    KritikCVSS 9,8SilahlaştırılmışEPSS %78

    kaseya · unitrends backup7 Ağu 2017

  • CVE-2017-12479
    39İzleyin

    It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR environment variable du

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    kaseya · unitrends backup7 Ağu 2017

  • CVE-2014-9260
    38İzleyin

    The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users to update every Word

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    w3eden · download manager7 Ağu 2017

  • CVE-2015-7704
    33İzleyin

    The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of craft

    YüksekCVSS 7,5İstismar yokEPSS %10

    ntp · ntp7 Ağu 2017

  • CVE-2015-7705
    43Planlayın

    The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large n

    KritikCVSS 9,8İstismar yokEPSS %12

    ntp · ntp7 Ağu 2017

  • CVE-2015-7849
    40Planlayın

    Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly exec

    YüksekCVSS 8,8İstismar yokEPSS %16

    ntp · ntp7 Ağu 2017

  • CVE-2015-7852
    27İzleyin

    ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 re

    OrtaCVSS 5,9İstismar yokEPSS %12

    ntp · ntp7 Ağu 2017

  • CVE-2015-7853
    43Planlayın

    The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitra

    KritikCVSS 9,8İstismar yokEPSS %11

    ntp · ntp7 Ağu 2017

  • CVE-2015-7854
    39İzleyin

    Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated us

    YüksekCVSS 8,8İstismar yokEPSS %14

    ntp · ntp7 Ağu 2017

  • CVE-2015-7855
    35İzleyin

    The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service

    OrtaCVSS 6,5Kavram kanıtıEPSS %31

    ntp · ntp7 Ağu 2017

  • CVE-2015-7871
    64Bu hafta

    Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.

    KritikCVSS 9,8SilahlaştırılmışEPSS %81

    ntp · ntp7 Ağu 2017

  • CVE-2016-7976
    42Planlayın

    The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %23

    artifex · ghostscript7 Ağu 2017

  • CVE-2017-12637
    89Hemen

    Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %95

    sap · netweaver application server java7 Ağu 2017

  • CVE-2017-10075
    37İzleyin

    Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server).

    YüksekCVSS 8,2Kavram kanıtıEPSS %17

    oracle · webcenter content8 Ağu 2017

  • CVE-2017-10246
    36İzleyin

    Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: iHelp).

    YüksekCVSS 8,2Kavram kanıtıEPSS %13

    oracle · application object library8 Ağu 2017

  • CVE-2017-11151
    44Planlayın

    A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary

    KritikCVSS 9,8Kavram kanıtıEPSS %16

    synology · photo station8 Ağu 2017

  • CVE-2017-11152
    34İzleyin

    Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    synology · photo station8 Ağu 2017

  • CVE-2017-11153
    43Planlayın

    Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    synology · photo station8 Ağu 2017

  • CVE-2017-11155
    44Planlayın

    An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtai

    YüksekCVSS 7,5Kavram kanıtıEPSS %47

    synology · photo station8 Ağu 2017

  • CVE-2017-0250
    38İzleyin

    Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT

    YüksekCVSS 7,8İstismar yokEPSS %23

    microsoft · windows 108 Ağu 2017

  • CVE-2017-0293
    34İzleyin

    Microsoft Windows PDF Library in Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold,

    YüksekCVSS 7,5İstismar yokEPSS %14

    microsoft · edge8 Ağu 2017

  • CVE-2017-8620
    49Planlayın

    Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 1

    YüksekCVSS 8,1İstismar yokEPSS %57

    microsoft · windows 108 Ağu 2017

  • CVE-2017-8625
    40Planlayın

    Internet Explorer in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to bypass Device Guard User Mode Code Int

    YüksekCVSS 8,8Kavram kanıtıEPSS %15

    microsoft · internet explorer8 Ağu 2017

  • CVE-2017-8634
    51Planlayın

    Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way t

    YüksekCVSS 7,5Kavram kanıtıEPSS %70

    microsoft · edge8 Ağu 2017

  • CVE-2017-8635
    47Planlayın

    Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windo

    YüksekCVSS 7,5Kavram kanıtıEPSS %55

    microsoft · internet explorer8 Ağu 2017

  • CVE-2017-8636
    52Planlayın

    Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windo

    YüksekCVSS 7,5Kavram kanıtıEPSS %72

    microsoft · internet explorer8 Ağu 2017

  • CVE-2017-8640
    51Planlayın

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    microsoft · edge8 Ağu 2017

  • CVE-2017-8641
    51Planlayın

    Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windo

    YüksekCVSS 7,5Kavram kanıtıEPSS %71

    microsoft · edge8 Ağu 2017

  • CVE-2017-8644
    22İzleyin

    Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the

    OrtaCVSS 4,3Kavram kanıtıEPSS %15

    microsoft · edge8 Ağu 2017

  • CVE-2017-8645
    51Planlayın

    Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the cu

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    microsoft · edge8 Ağu 2017

  • CVE-2017-8646
    51Planlayın

    Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the cu

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    microsoft · edge8 Ağu 2017

  • CVE-2017-8652
    33İzleyin

    Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose information due to the

    OrtaCVSS 6,5Kavram kanıtıEPSS %22

    microsoft · edge8 Ağu 2017

  • CVE-2017-8656
    51Planlayın

    Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of th

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    microsoft · edge8 Ağu 2017

  • CVE-2017-8657
    46Planlayın

    Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context

    YüksekCVSS 7,5Kavram kanıtıEPSS %54

    microsoft · edge8 Ağu 2017

  • CVE-2017-8670
    51Planlayın

    Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of th

    YüksekCVSS 7,5Kavram kanıtıEPSS %68

    microsoft · edge8 Ağu 2017

  • CVE-2017-8671
    51Planlayın

    Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context

    YüksekCVSS 7,5Kavram kanıtıEPSS %69

    microsoft · edge8 Ağu 2017

  • CVE-2017-8691
    41Planlayın

    Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow an attacker to execute code remotely on a target system when the Windows font li

    YüksekCVSS 8,8İstismar yokEPSS %19

    microsoft · windows 78 Ağu 2017

  • CVE-2015-0786
    46Planlayın

    Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) all

    KritikCVSS 9,8İstismar yokEPSS %23

    novell · zenworks configuration management9 Ağu 2017

  • CVE-2015-2291
    64Bu hafta

    (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to c

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %9

    intel · ethernet diagnostics driver iqvw32.sys9 Ağu 2017

  • CVE-2017-8518
    33İzleyin

    Microsoft Edge allows a remote code execution vulnerability due to the way it accesses objects in memory, aka "Scripting Engine Memory Corru

    YüksekCVSS 7,5İstismar yokEPSS %10

    microsoft · edge10 Ağu 2017

  • CVE-2016-5018
    39İzleyin

    In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application

    KritikCVSS 9,1İstismar yokEPSS %10

    apache · tomcat10 Ağu 2017

  • CVE-2016-8745
    35İzleyin

    A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.R

    YüksekCVSS 7,5İstismar yokEPSS %16

    apache · tomcat10 Ağu 2017

  • CVE-2017-8658
    45Planlayın

    A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scri

    KritikCVSS 9,8İstismar yokEPSS %20

    microsoft · chakracore10 Ağu 2017

  • CVE-2017-7675
    33İzleyin

    The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented dir

    YüksekCVSS 7,5İstismar yokEPSS %10

    apache · tomcat10 Ağu 2017

  • CVE-2017-11209
    29İzleyin

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an expl

    OrtaCVSS 6,5İstismar yokEPSS %11

    adobe · acrobat11 Ağu 2017

  • CVE-2017-11210
    29İzleyin

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an expl

    OrtaCVSS 6,5İstismar yokEPSS %11

    adobe · acrobat11 Ağu 2017

  • CVE-2017-11211
    43Planlayın

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an expl

    YüksekCVSS 8,8İstismar yokEPSS %27

    adobe · acrobat11 Ağu 2017

  • CVE-2017-11220
    39İzleyin

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an expl

    YüksekCVSS 8,8İstismar yokEPSS %14

    adobe · acrobat11 Ağu 2017

  • CVE-2017-11230
    29İzleyin

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an expl

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat11 Ağu 2017

  • CVE-2017-11241
    39İzleyin

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an expl

    YüksekCVSS 8,8İstismar yokEPSS %14

    adobe · acrobat11 Ağu 2017

  • CVE-2017-11244
    29İzleyin

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an expl

    OrtaCVSS 6,5İstismar yokEPSS %10

    adobe · acrobat11 Ağu 2017

  • CVE-2017-11259
    39İzleyin

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an expl

    YüksekCVSS 8,8İstismar yokEPSS %12

    adobe · acrobat11 Ağu 2017

  • CVE-2017-11263
    43Planlayın

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an expl

    YüksekCVSS 8,8İstismar yokEPSS %26

    adobe · acrobat11 Ağu 2017

  • CVE-2017-11272
    34İzleyin

    Adobe Digital Editions 4.5.4 and earlier has a security bypass vulnerability.

    YüksekCVSS 7,5İstismar yokEPSS %13

    adobe · digital editions11 Ağu 2017

  • CVE-2017-3106
    42Planlayın

    Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files.

    YüksekCVSS 8,8Kavram kanıtıEPSS %22

    adobe · flash player desktop runtime11 Ağu 2017

  • CVE-2017-3117
    41Planlayın

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an expl

    YüksekCVSS 8,8İstismar yokEPSS %18

    adobe · acrobat11 Ağu 2017

  • CVE-2017-3123
    39İzleyin

    Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an expl

    YüksekCVSS 8,8İstismar yokEPSS %14

    adobe · acrobat11 Ağu 2017

  • CVE-2017-6327
    76Bu hafta

    The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an ind

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %35

    symantec · message gateway11 Ağu 2017

  • CVE-2017-9800
    45Planlayın

    A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha

    KritikCVSS 9,8İstismar yokEPSS %18

    apache · subversion11 Ağu 2017

  • CVE-2017-7546
    57Planlayın

    PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers

    KritikCVSS 9,8İstismar yokEPSS %61

    postgresql · postgresql16 Ağu 2017

  • CVE-2017-11661
    33İzleyin

    The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    mindwerks · wildmidi17 Ağu 2017

  • CVE-2017-12936
    43Planlayın

    The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.

    YüksekCVSS 8,8İstismar yokEPSS %25

    graphicsmagick · graphicsmagick18 Ağu 2017

  • CVE-2017-12943
    51Planlayın

    D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute

    KritikCVSS 9,8Kavram kanıtıEPSS %39

    dlink · dir-600 b1 firmware18 Ağu 2017

  • CVE-2015-7944
    34İzleyin

    The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    spi-inc · ganeti18 Ağu 2017

  • CVE-2017-10661
    32İzleyin

    Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list c

    YüksekCVSS 7,0Kavram kanıtıEPSS %13

    linux · linux kernel19 Ağu 2017

  • CVE-2015-2857
    64Bu hafta

    Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oaut

    KritikCVSS 9,8SilahlaştırılmışEPSS %84

    accellion · file transfer appliance22 Ağu 2017

  • CVE-2017-12785
    44Planlayın

    The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is p

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    noviflow · noviware22 Ağu 2017

  • CVE-2017-12786
    47Planlayın

    Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed o

    KritikCVSS 9,8Kavram kanıtıEPSS %25

    noviflow · noviware22 Ağu 2017

  • CVE-2017-12787
    46Planlayın

    A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deploye

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    noviflow · noviware22 Ağu 2017

  • CVE-2017-11610
    61Bu hafta

    The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated us

    YüksekCVSS 8,8SilahlaştırılmışEPSS %87

    supervisord · supervisor23 Ağu 2017

  • CVE-2017-12965
    44Planlayın

    Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    apache2triad · apache2triad23 Ağu 2017

  • CVE-2017-11317
    94Hemen

    Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which a

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %84

    telerik · ui for asp.net ajax23 Ağu 2017

  • CVE-2017-11357
    92Hemen

    Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attacke

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %77

    progress · telerik ui for asp.net ajax23 Ağu 2017

  • CVE-2017-9506
    45Planlayın

    The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows

    OrtaCVSS 6,1Kavram kanıtıEPSS %71

    atlassian · oauth23 Ağu 2017

  • CVE-2015-7258
    39İzleyin

    ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain user passwords by di

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    zte · zxv10 w300 firmware24 Ağu 2017

  • CVE-2015-8352
    44Planlayın

    Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a ..

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    zen-cart · zen cart24 Ağu 2017

  • CVE-2014-7857
    44Planlayın

    D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05

    KritikCVSS 9,8İstismar yokEPSS %15

    d-link · dns-322l firmware25 Ağu 2017

  • CVE-2014-7858
    44Planlayın

    The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the u

    KritikCVSS 9,8İstismar yokEPSS %15

    d-link · dnr-326 firmware25 Ağu 2017

  • CVE-2014-7859
    45Planlayın

    Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-32

    KritikCVSS 9,8İstismar yokEPSS %20

    d-link · dns-322l firmware25 Ağu 2017

  • CVE-2015-1395
    33İzleyin

    Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to ar

    YüksekCVSS 7,5İstismar yokEPSS %11

    gnu · patch25 Ağu 2017

  • CVE-2015-4181
    33İzleyin

    Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a ..

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    phpmybackuppro · phpmybackuppro25 Ağu 2017

  • CVE-2014-5301
    59Planlayın

    Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to

    YüksekCVSS 8,8SilahlaştırılmışEPSS %78

    manageengine · servicedesk plus28 Ağu 2017