İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2017: sömürülen ve yeni ciddi CVE kayıtları

87 kayıt · 2 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2017-11281
    49Planlayın

    Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function.

    KritikCVSS 9,8Kavram kanıtıEPSS %33

    adobe · flash player1 Ara 2017

  • CVE-2017-11282
    49Planlayın

    Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser.

    KritikCVSS 9,8Kavram kanıtıEPSS %34

    adobe · flash player1 Ara 2017

  • CVE-2017-11283
    52Planlayın

    Adobe ColdFusion has an Untrusted Data Deserialization vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %42

    adobe · coldfusion1 Ara 2017

  • CVE-2017-11284
    52Planlayın

    Adobe ColdFusion has an Untrusted Data Deserialization vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %42

    adobe · coldfusion1 Ara 2017

  • CVE-2017-17085
    35İzleyin

    In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash.

    YüksekCVSS 7,5Kavram kanıtıEPSS %16

    wireshark · wireshark1 Ara 2017

  • CVE-2017-16953
    33İzleyin

    connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE confi

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    zte · zxdsl 831cii firmware1 Ara 2017

  • CVE-2017-17090
    55Planlayın

    An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified As

    YüksekCVSS 7,5Kavram kanıtıEPSS %82

    digium · certified asterisk1 Ara 2017

  • CVE-2017-17095
    38İzleyin

    tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    libtiff · libtiff2 Ara 2017

  • CVE-2017-17099
    35İzleyin

    There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16.

    YüksekCVSS 7,8Kavram kanıtıEPSS %11

    flexense · syncbreeze3 Ara 2017

  • CVE-2017-15889
    57Planlayın

    Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to ex

    YüksekCVSS 8,8SilahlaştırılmışEPSS %73

    synology · diskstation manager4 Ara 2017

  • CVE-2017-16929
    36İzleyin

    The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability expl

    YüksekCVSS 8,1Kavram kanıtıEPSS %12

    claymore dual miner project · claymore dual miner5 Ara 2017

  • CVE-2017-16930
    49Planlayın

    The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due

    KritikCVSS 9,8Kavram kanıtıEPSS %34

    claymore dual miner project · claymore dual miner5 Ara 2017

  • CVE-2017-13156
    40Planlayın

    An elevation of privilege vulnerability in the Android system (art).

    YüksekCVSS 7,8SilahlaştırılmışEPSS %20

    google · android6 Ara 2017

  • CVE-2017-3737
    47Planlayın

    OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism.

    OrtaCVSS 5,9İstismar yokEPSS %78

    openssl · openssl7 Ara 2017

  • CVE-2017-3738
    27İzleyin

    There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli.

    OrtaCVSS 5,9İstismar yokEPSS %13

    openssl · openssl7 Ara 2017

  • CVE-2017-11937
    39İzleyin

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1,

    YüksekCVSS 7,8İstismar yokEPSS %28

    microsoft · malware protection engine7 Ara 2017

  • CVE-2017-11940
    37İzleyin

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1,

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · malware protection engine8 Ara 2017

  • CVE-2017-16921
    41Planlayın

    In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who i

    YüksekCVSS 8,8Kavram kanıtıEPSS %19

    otrs · otrs8 Ara 2017

  • CVE-2017-16368
    39İzleyin

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

    YüksekCVSS 8,8İstismar yokEPSS %13

    adobe · acrobat9 Ara 2017

  • CVE-2017-16381
    39İzleyin

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

    YüksekCVSS 8,8İstismar yokEPSS %12

    adobe · acrobat9 Ara 2017

  • CVE-2017-16383
    38İzleyin

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

    YüksekCVSS 8,8İstismar yokEPSS %10

    adobe · acrobat9 Ara 2017

  • CVE-2017-16385
    39İzleyin

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

    YüksekCVSS 8,8İstismar yokEPSS %12

    adobe · acrobat9 Ara 2017

  • CVE-2017-16392
    39İzleyin

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

    YüksekCVSS 8,8İstismar yokEPSS %12

    adobe · acrobat9 Ara 2017

  • CVE-2017-16393
    40Planlayın

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

    YüksekCVSS 8,8İstismar yokEPSS %16

    adobe · acrobat9 Ara 2017

  • CVE-2017-16395
    39İzleyin

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

    YüksekCVSS 8,8İstismar yokEPSS %12

    adobe · acrobat9 Ara 2017

  • CVE-2017-16396
    39İzleyin

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

    YüksekCVSS 8,8İstismar yokEPSS %12

    adobe · acrobat9 Ara 2017

  • CVE-2017-16413
    38İzleyin

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

    YüksekCVSS 8,8İstismar yokEPSS %11

    adobe · acrobat9 Ara 2017

  • CVE-2017-16415
    38İzleyin

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

    YüksekCVSS 8,8İstismar yokEPSS %11

    adobe · acrobat9 Ara 2017

  • CVE-2017-16416
    38İzleyin

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

    YüksekCVSS 8,8İstismar yokEPSS %11

    adobe · acrobat9 Ara 2017

  • CVE-2017-15708
    44Planlayın

    In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI).

    KritikCVSS 9,8Kavram kanıtıEPSS %17

    apache · synapse11 Ara 2017

  • CVE-2017-15944
    99Hemen

    Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    paloaltonetworks · pan-os11 Ara 2017

  • CVE-2017-17560
    61Bu hafta

    An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices.

    KritikCVSS 9,8SilahlaştırılmışEPSS %73

    westerndigital · my cloud pr4100 firmware12 Ara 2017

  • CVE-2017-17562
    91Hemen

    Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %96

    embedthis · goahead12 Ara 2017

  • CVE-2017-1000385
    60Bu hafta

    The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding.

    OrtaCVSS 5,9SilahlaştırılmışEPSS %22

    erlang · erlang\/otp12 Ara 2017

  • CVE-2017-11885
    40Planlayın

    Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and

    OrtaCVSS 6,6Kavram kanıtıEPSS %45

    microsoft · windows 1012 Ara 2017

  • CVE-2017-11890
    45Planlayın

    Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511,

    YüksekCVSS 7,5Kavram kanıtıEPSS %50

    microsoft · internet explorer12 Ara 2017

  • CVE-2017-11893
    51Planlayın

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in

    YüksekCVSS 7,5Kavram kanıtıEPSS %68

    microsoft · edge12 Ara 2017

  • CVE-2017-11903
    44Planlayın

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Wi

    YüksekCVSS 7,5Kavram kanıtıEPSS %46

    microsoft · internet explorer12 Ara 2017

  • CVE-2017-11906
    29İzleyin

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, an

    OrtaCVSS 5,3Kavram kanıtıEPSS %25

    microsoft · internet explorer12 Ara 2017

  • CVE-2017-11907
    49Planlayın

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Wi

    YüksekCVSS 7,5Kavram kanıtıEPSS %64

    microsoft · internet explorer12 Ara 2017

  • CVE-2017-11909
    50Planlayın

    ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the

    YüksekCVSS 7,5Kavram kanıtıEPSS %65

    microsoft · edge12 Ara 2017

  • CVE-2017-11911
    50Planlayın

    ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the

    YüksekCVSS 7,5Kavram kanıtıEPSS %65

    microsoft · edge12 Ara 2017

  • CVE-2017-11914
    49Planlayın

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights

    YüksekCVSS 7,5Kavram kanıtıEPSS %62

    microsoft · edge12 Ara 2017

  • CVE-2017-11918
    49Planlayın

    ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user r

    YüksekCVSS 7,5Kavram kanıtıEPSS %62

    microsoft · edge12 Ara 2017

  • CVE-2017-11934
    26İzleyin

    Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the

    OrtaCVSS 5,5İstismar yokEPSS %12

    microsoft · office12 Ara 2017

  • CVE-2017-11935
    37İzleyin

    Microsoft Office 2016 Click-to-Run (C2R) allows a remote code execution vulnerability due to the way files are handled in memory, aka "Micro

    YüksekCVSS 7,8İstismar yokEPSS %18

    microsoft · office12 Ara 2017

  • CVE-2017-13098
    60Bu hafta

    BouncyCastle JCE TLS Bleichenbacher/ROBOT

    OrtaCVSS 5,9SilahlaştırılmışEPSS %24

    bouncycastle · bc-java12 Ara 2017

  • CVE-2017-13099
    60Bu hafta

    wolfSSL Bleichenbacher/ROBOT

    OrtaCVSS 5,9SilahlaştırılmışEPSS %27

    wolfssl · wolfssl12 Ara 2017

  • CVE-2017-17382
    60Bu hafta

    Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before b

    OrtaCVSS 5,9SilahlaştırılmışEPSS %13

    citrix · application delivery controller firmware13 Ara 2017

  • CVE-2017-17427
    60Bu hafta

    Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertext attack ("Bleichenba

    OrtaCVSS 5,9SilahlaştırılmışEPSS %15

    radware · alteon firmware13 Ara 2017

  • CVE-2017-17664
    33İzleyin

    A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified As

    OrtaCVSS 5,9İstismar yokEPSS %32

    digium · asterisk13 Ara 2017

  • CVE-2017-17672
    44Planlayın

    In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certa

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    vbulletin · vbulletin13 Ara 2017

  • CVE-2017-16355
    18İzleyin

    In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if

    OrtaCVSS 4,7İstismar yokEPSS %0

    phusion · passenger14 Ara 2017

  • CVE-2017-17405
    57Planlayın

    Ruby before 2.4.3 allows Net::FTP command injection.

    YüksekCVSS 8,8Kavram kanıtıEPSS %73

    ruby-lang · ruby15 Ara 2017

  • CVE-2017-12373
    60Bu hafta

    A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550) devices could allo

    OrtaCVSS 5,9SilahlaştırılmışEPSS %12

    cisco · adaptive security appliance 5505 firmware15 Ara 2017

  • CVE-2017-3191
    58Planlayın

    D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page.

    KritikCVSS 9,8İstismar yokEPSS %62

    d-link · dir-130 firmware15 Ara 2017

  • CVE-2017-3192
    51Planlayın

    D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials.

    KritikCVSS 9,8İstismar yokEPSS %39

    d-link · dir-130 firmware15 Ara 2017

  • CVE-2017-3195
    45Planlayın

    Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overfl

    KritikCVSS 9,8Kavram kanıtıEPSS %21

    commvault · edge15 Ara 2017

  • CVE-2017-17731
    43Planlayın

    DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    dedecms · dedecms18 Ara 2017

  • CVE-2017-17733
    52Planlayın

    Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request.

    KritikCVSS 9,8İstismar yokEPSS %44

    maccms · maccms18 Ara 2017

  • CVE-2017-17739
    43Planlayın

    The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowi

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    brightsign · 4k242 firmware18 Ara 2017

  • CVE-2017-16949
    45Planlayın

    An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    accesspressthemes · anonymous post pro18 Ara 2017

  • CVE-2017-17105
    64Bu hafta

    Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind rem

    KritikCVSS 9,8SilahlaştırılmışEPSS %84

    zivif · pr115-204-p-rs firmware18 Ara 2017

  • CVE-2017-17106
    44Planlayın

    Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin

    KritikCVSS 9,8İstismar yokEPSS %15

    zivif · pr115-204-p-rs firmware18 Ara 2017

  • CVE-2017-17759
    42Planlayın

    Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deleting

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    conarc · ichannel19 Ara 2017

  • CVE-2017-15048
    38İzleyin

    Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execut

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    zoom · zoom19 Ara 2017

  • CVE-2017-15049
    40Planlayın

    The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    zoom · zoom19 Ara 2017

  • CVE-2012-2576
    60Bu hafta

    SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, a

    KritikCVSS 9,8SilahlaştırılmışEPSS %59

    solarwinds · backup profiler20 Ara 2017

  • CVE-2017-5254
    51Planlayın

    In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the capability of chang

    YüksekCVSS 8,8SilahlaştırılmışEPSS %53

    cambiumnetworks · epmp 1000 firmware20 Ara 2017

  • CVE-2017-5255
    57Planlayın

    In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console

    YüksekCVSS 8,8SilahlaştırılmışEPSS %74

    cambiumnetworks · epmp 1000 firmware20 Ara 2017

  • CVE-2017-5259
    45Planlayın

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available u

    YüksekCVSS 8,8SilahlaştırılmışEPSS %32

    cambiumnetworks · cnpilot r190v firmware20 Ara 2017

  • CVE-2017-5260
    40Planlayın

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available i

    YüksekCVSS 8,8SilahlaştırılmışEPSS %8

    cambiumnetworks · cnpilot r190v firmware20 Ara 2017

  • CVE-2017-5261
    40Planlayın

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console

    YüksekCVSS 8,8SilahlaştırılmışEPSS %8

    cambiumnetworks · cnpilot r190v firmware20 Ara 2017

  • CVE-2017-5262
    40Planlayın

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive inform

    YüksekCVSS 8,0SilahlaştırılmışEPSS %4

    cambiumnetworks · cnpilot r190v firmware20 Ara 2017

  • CVE-2017-17411
    65Bu hafta

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0.

    KritikCVSS 9,8SilahlaştırılmışEPSS %87

    linksys · wvbr0 firmware21 Ara 2017

  • CVE-2017-17692
    60Bu hafta

    Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted Java

    YüksekCVSS 7,5SilahlaştırılmışEPSS %78

    samsung · internet browser21 Ara 2017

  • CVE-2017-13861
    40Planlayın

    An issue was discovered in certain Apple products.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %14

    apple · iphone os25 Ara 2017

  • CVE-2017-16995
    40Planlayın

    The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory c

    YüksekCVSS 7,8SilahlaştırılmışEPSS %30

    linux · linux kernel27 Ara 2017

  • CVE-2017-17849
    45Planlayın

    A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code o

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    getgosoft · getgo download manager27 Ara 2017

  • CVE-2017-17850
    53Planlayın

    An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older.

    YüksekCVSS 7,5İstismar yokEPSS %75

    digium · asterisk27 Ara 2017

  • CVE-2017-17888
    43Planlayın

    cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001,

    YüksekCVSS 8,8İstismar yokEPSS %27

    hoytech · antiweb27 Ara 2017

  • CVE-2014-8389
    54Planlayın

    cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-

    KritikCVSS 9,8İstismar yokEPSS %51

    airlive · bu-3026 firmware27 Ara 2017

  • CVE-2017-17932
    60Bu hafta

    A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to

    KritikCVSS 9,8SilahlaştırılmışEPSS %54

    allmediaserver · allmediaserver28 Ara 2017

  • CVE-2017-5641
    45Planlayın

    Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by

    KritikCVSS 9,8İstismar yokEPSS %20

    apache · flex blazeds28 Ara 2017

  • CVE-2017-17968
    60Bu hafta

    A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to ex

    KritikCVSS 9,8SilahlaştırılmışEPSS %39

    xi-soft · nettransport download manager29 Ara 2017

  • CVE-2015-3302
    37İzleyin

    The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote

    YüksekCVSS 7,5Kavram kanıtıEPSS %22

    thecartpress · thecartpress ecommerce shopping cart29 Ara 2017

  • CVE-2017-18001
    43Planlayın

    Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorize

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    trustwave · secure web gateway31 Ara 2017