İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2018: sömürülen ve yeni ciddi CVE kayıtları

113 kayıt · 4 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2018-3810
    66Bu hafta

    Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attacker

    KritikCVSS 9,8Kavram kanıtıEPSS %91

    oturia · smart google code inserter1 Oca 2018

  • CVE-2018-3811
    52Planlayın

    SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to exe

    KritikCVSS 9,8Kavram kanıtıEPSS %42

    oturia · smart google code inserter1 Oca 2018

  • CVE-2017-18017
    55Planlayın

    The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attac

    KritikCVSS 9,8İstismar yokEPSS %52

    linux · linux kernel3 Oca 2018

  • CVE-2017-1000479
    60Bu hafta

    pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrar

    YüksekCVSS 8,8SilahlaştırılmışEPSS %31

    netgate · pfsense3 Oca 2018

  • CVE-2017-1000486
    97Hemen

    Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    primetek · primefaces3 Oca 2018

  • CVE-2017-8046
    61Bu hafta

    Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1

    KritikCVSS 9,8Kavram kanıtıEPSS %74

    vmware · spring boot4 Oca 2018

  • CVE-2018-0114
    43Planlayın

    A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens u

    YüksekCVSS 7,5Kavram kanıtıEPSS %42

    cisco · node-jose4 Oca 2018

  • CVE-2017-5715
    44Planlayın

    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information

    OrtaCVSS 5,6Kavram kanıtıEPSS %74

    intel · atom c4 Oca 2018

  • CVE-2017-5753
    50Planlayın

    Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an at

    OrtaCVSS 5,6Kavram kanıtıEPSS %93

    intel · atom c4 Oca 2018

  • CVE-2017-5754
    47Planlayın

    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information

    OrtaCVSS 5,6Kavram kanıtıEPSS %84

    intel · atom c4 Oca 2018

  • CVE-2018-0744
    33İzleyin

    The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 an

    YüksekCVSS 7,0Kavram kanıtıEPSS %15

    microsoft · windows 104 Oca 2018

  • CVE-2018-0758
    54Planlayın

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte

    YüksekCVSS 7,5Kavram kanıtıEPSS %80

    microsoft · chakracore4 Oca 2018

  • CVE-2018-0762
    34İzleyin

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, an

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · chakracore4 Oca 2018

  • CVE-2018-0767
    41Planlayın

    Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further c

    OrtaCVSS 5,3Kavram kanıtıEPSS %65

    microsoft · chakracore4 Oca 2018

  • CVE-2018-0769
    54Planlayın

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte

    YüksekCVSS 7,5Kavram kanıtıEPSS %78

    microsoft · edge4 Oca 2018

  • CVE-2018-0770
    54Planlayın

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte

    YüksekCVSS 7,5Kavram kanıtıEPSS %78

    microsoft · edge4 Oca 2018

  • CVE-2018-0772
    34İzleyin

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, an

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · chakracore4 Oca 2018

  • CVE-2018-0774
    50Planlayın

    Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting

    YüksekCVSS 7,5Kavram kanıtıEPSS %67

    microsoft · edge4 Oca 2018

  • CVE-2018-0775
    50Planlayın

    Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting

    YüksekCVSS 7,5Kavram kanıtıEPSS %67

    microsoft · edge4 Oca 2018

  • CVE-2018-0776
    54Planlayın

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte

    YüksekCVSS 7,5Kavram kanıtıEPSS %78

    microsoft · edge4 Oca 2018

  • CVE-2018-0777
    54Planlayın

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte

    YüksekCVSS 7,5Kavram kanıtıEPSS %78

    microsoft · edge4 Oca 2018

  • CVE-2018-0780
    39İzleyin

    Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to fur

    OrtaCVSS 5,3Kavram kanıtıEPSS %58

    microsoft · edge4 Oca 2018

  • CVE-2018-0781
    33İzleyin

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the conte

    YüksekCVSS 7,5İstismar yokEPSS %11

    microsoft · chakracore4 Oca 2018

  • CVE-2014-7862
    63Bu hafta

    The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create ad

    KritikCVSS 9,8SilahlaştırılmışEPSS %81

    zohocorp · desktop central4 Oca 2018

  • CVE-2017-17867
    38İzleyin

    Inteno iopsys 2.0-3.14 and 4.0 devices allow remote authenticated users to execute arbitrary OS commands by modifying the leasetrigger field

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    intenogroup · iopsys4 Oca 2018

  • CVE-2017-16720
    54Planlayın

    A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier.

    KritikCVSS 9,8Kavram kanıtıEPSS %50

    advantech · webaccess5 Oca 2018

  • CVE-2017-16666
    59Planlayın

    Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP

    YüksekCVSS 8,8SilahlaştırılmışEPSS %80

    xplico · xplico5 Oca 2018

  • CVE-2014-7221
    29İzleyin

    TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (buffer overflow and application crash) b

    OrtaCVSS 6,5Kavram kanıtıEPSS %10

    teamspeak · teamspeak38 Oca 2018

  • CVE-2014-7222
    29İzleyin

    Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service (application crash) by

    OrtaCVSS 6,5Kavram kanıtıEPSS %10

    teamspeak · teamspeak38 Oca 2018

  • CVE-2017-7997
    45Planlayın

    Multiple SQL injection vulnerabilities in Gespage before 7.4.9 allow remote attackers to execute arbitrary SQL commands via the (1) show_prn

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    gespage · gespage8 Oca 2018

  • CVE-2018-0791
    37İzleyin

    Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, and Microsoft Outlook 2016 allow a remote code execution vulnerabili

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · office9 Oca 2018

  • CVE-2018-0792
    44Planlayın

    Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka

    YüksekCVSS 8,8İstismar yokEPSS %28

    microsoft · office9 Oca 2018

  • CVE-2018-0793
    37İzleyin

    Microsoft Outlook 2007, Microsoft Outlook 2010 and Microsoft Outlook 2013 allow a remote code execution vulnerability due to the way email m

    YüksekCVSS 7,8İstismar yokEPSS %20

    microsoft · office9 Oca 2018

  • CVE-2018-0794
    41Planlayın

    Microsoft Word in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execut

    YüksekCVSS 8,8İstismar yokEPSS %20

    microsoft · office9 Oca 2018

  • CVE-2018-0795
    41Planlayın

    Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects a

    YüksekCVSS 8,8İstismar yokEPSS %19

    microsoft · office9 Oca 2018

  • CVE-2018-0796
    42Planlayın

    Microsoft Excel in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execu

    YüksekCVSS 8,8İstismar yokEPSS %23

    microsoft · excel9 Oca 2018

  • CVE-2018-0797
    38İzleyin

    Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF conte

    YüksekCVSS 7,8İstismar yokEPSS %24

    microsoft · office9 Oca 2018

  • CVE-2018-0798
    94Hemen

    Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execu

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %95

    microsoft · office9 Oca 2018

  • CVE-2018-0801
    42Planlayın

    Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execu

    YüksekCVSS 8,8İstismar yokEPSS %24

    microsoft · office9 Oca 2018

  • CVE-2018-0802
    89Hemen

    Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execut

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %93

    microsoft · office9 Oca 2018

  • CVE-2018-0804
    42Planlayın

    Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

    YüksekCVSS 8,8İstismar yokEPSS %24

    microsoft · office9 Oca 2018

  • CVE-2018-0805
    42Planlayın

    Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

    YüksekCVSS 8,8İstismar yokEPSS %24

    microsoft · office9 Oca 2018

  • CVE-2018-0806
    42Planlayın

    Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

    YüksekCVSS 8,8İstismar yokEPSS %24

    microsoft · office9 Oca 2018

  • CVE-2018-0807
    42Planlayın

    Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

    YüksekCVSS 8,8İstismar yokEPSS %24

    microsoft · office9 Oca 2018

  • CVE-2018-0812
    38İzleyin

    Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

    YüksekCVSS 7,8İstismar yokEPSS %23

    microsoft · office9 Oca 2018

  • CVE-2016-9722
    40Planlayın

    IBM QRadar 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by u

    OrtaCVSS 4,2SilahlaştırılmışEPSS %12

    ibm · qradar security information and event manager10 Oca 2018

  • CVE-2017-15663
    34İzleyin

    In Flexense Disk Pulse Enterprise v10.1.18, the Control Protocol suffers from a denial of service vulnerability.

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    flexense · disk pulse10 Oca 2018

  • CVE-2017-17485
    54Planlayın

    FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix

    KritikCVSS 9,8Kavram kanıtıEPSS %49

    fasterxml · jackson-databind10 Oca 2018

  • CVE-2018-5333
    40Planlayın

    In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid

    OrtaCVSS 5,5SilahlaştırılmışEPSS %7

    linux · linux kernel11 Oca 2018

  • CVE-2018-5347
    55Planlayın

    Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.p

    KritikCVSS 9,8Kavram kanıtıEPSS %54

    seagate · personal cloud firmware11 Oca 2018

  • CVE-2018-5371
    48Planlayın

    diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540U devices with firmware ME_1.00, allows authenticat

    YüksekCVSS 8,8İstismar yokEPSS %41

    d-link · dsl-2540u firmware12 Oca 2018

  • CVE-2014-6435
    34İzleyin

    cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication, which allows remote

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    aztech · adsl dsl5018en \(1t1r\) firmware12 Oca 2018

  • CVE-2014-6436
    52Planlayın

    Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authenticati

    KritikCVSS 9,8Kavram kanıtıEPSS %42

    aztech · adsl dsl5018en \(1t1r\) firmware12 Oca 2018

  • CVE-2014-6437
    44Planlayın

    Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configuration information via

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    aztech · adsl dsl5018en \(1t1r\) firmware12 Oca 2018

  • CVE-2017-16885
    49Planlayın

    Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining information about Internet Us

    KritikCVSS 9,8Kavram kanıtıEPSS %33

    fiberhome · lm53q1 firmware12 Oca 2018

  • CVE-2017-16887
    50Planlayın

    The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal.

    KritikCVSS 9,8Kavram kanıtıEPSS %36

    fiberhome · lm53q1 firmware12 Oca 2018

  • CVE-2018-5262
    51Planlayın

    A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execute arbitrary code in t

    KritikCVSS 9,8Kavram kanıtıEPSS %39

    flexense · diskboss12 Oca 2018

  • CVE-2018-5702
    39İzleyin

    Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows r

    YüksekCVSS 8,8Kavram kanıtıEPSS %11

    transmissionbt · transmission15 Oca 2018

  • CVE-2018-5711
    26İzleyin

    gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before

    OrtaCVSS 5,5Kavram kanıtıEPSS %13

    php · php16 Oca 2018

  • CVE-2018-5712
    48Planlayın

    An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1.

    OrtaCVSS 6,1İstismar yokEPSS %79

    php · php16 Oca 2018

  • CVE-2018-5724
    42Planlayın

    MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restore.cgi.

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    barni · master ip camera01 firmware16 Oca 2018

  • CVE-2018-5726
    45Planlayın

    MASTER IPCAMERA01 3.3.4.2103 devices allow remote attackers to obtain sensitive information via a crafted HTTP request, as demonstrated by t

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    barni · master ip camera01 firmware16 Oca 2018

  • CVE-2018-2616
    43Planlayın

    Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant).

    YüksekCVSS 8,8İstismar yokEPSS %27

    oracle · oss support tools17 Oca 2018

  • CVE-2018-2636
    37İzleyin

    Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Security).

    YüksekCVSS 8,1Kavram kanıtıEPSS %15

    oracle · hospitality simphony17 Oca 2018

  • CVE-2016-6814
    44Planlayın

    When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standar

    KritikCVSS 9,8İstismar yokEPSS %17

    apache · groovy18 Oca 2018

  • CVE-2015-9251
    33İzleyin

    jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType o

    OrtaCVSS 6,1Kavram kanıtıEPSS %29

    jquery · jquery18 Oca 2018

  • CVE-2017-18044
    60Bu hafta

    A Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6.

    KritikCVSS 9,8SilahlaştırılmışEPSS %69

    commvault · commvault19 Oca 2018

  • CVE-2017-14094
    45Planlayın

    A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    trendmicro · smart protection server19 Oca 2018

  • CVE-2017-14095
    36İzleyin

    A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command

    YüksekCVSS 8,1Kavram kanıtıEPSS %12

    trendmicro · smart protection server19 Oca 2018

  • CVE-2017-14097
    43Planlayın

    An improper access control vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    trendmicro · smart protection server19 Oca 2018

  • CVE-2017-14803
    49Planlayın

    In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO conne

    KritikCVSS 9,8İstismar yokEPSS %34

    netiq · access manager19 Oca 2018

  • CVE-2016-10708
    35İzleyin

    sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-se

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    openbsd · openssh21 Oca 2018

  • CVE-2018-5955
    63Bu hafta

    An issue was discovered in GitStack through 2.3.10.

    KritikCVSS 9,8SilahlaştırılmışEPSS %81

    smartmobilesoftware · gitstack21 Oca 2018

  • CVE-2016-10709
    45Planlayın

    pfSense before 2.3 allows remote authenticated users to execute arbitrary OS commands via a '|' character in the status_rrd_graph_img.php gr

    YüksekCVSS 8,8SilahlaştırılmışEPSS %33

    pfsense · pfsense22 Oca 2018

  • CVE-2017-18047
    60Bu hafta

    Buffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute arbitrary code via a long reply.

    KritikCVSS 9,8SilahlaştırılmışEPSS %19

    labf · nfsaxe22 Oca 2018

  • CVE-2018-1042
    31İzleyin

    Moodle 3.x has Server Side Request Forgery in the filepicker.

    OrtaCVSS 6,5Kavram kanıtıEPSS %16

    moodle · moodle22 Oca 2018

  • CVE-2018-5999
    65Bu hafta

    An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

    KritikCVSS 9,8SilahlaştırılmışEPSS %87

    asus · asuswrt22 Oca 2018

  • CVE-2018-6000
    65Bu hafta

    An issue was discovered in AsusWRT before 3.0.0.4.384_10007.

    KritikCVSS 9,8SilahlaştırılmışEPSS %85

    asus · asuswrt22 Oca 2018

  • CVE-2018-0845
    37İzleyin

    Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

    YüksekCVSS 7,8İstismar yokEPSS %19

    microsoft · office22 Oca 2018

  • CVE-2018-0848
    41Planlayın

    Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

    YüksekCVSS 8,8İstismar yokEPSS %20

    microsoft · office22 Oca 2018

  • CVE-2018-0849
    41Planlayın

    Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · office22 Oca 2018

  • CVE-2018-0862
    41Planlayın

    Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 all

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · office22 Oca 2018

  • CVE-2017-16597
    56Planlayın

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of NetGain Systems Enterprise Manager 7.2.7

    KritikCVSS 9,8İstismar yokEPSS %57

    netgain-systems · enterprise manager22 Oca 2018

  • CVE-2017-16603
    51Planlayın

    This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterp

    YüksekCVSS 8,8İstismar yokEPSS %54

    netgain-systems · enterprise manager22 Oca 2018

  • CVE-2017-18048
    54Planlayın

    Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (l

    YüksekCVSS 8,8SilahlaştırılmışEPSS %63

    monstra · monstra23 Oca 2018

  • CVE-2017-2741
    64Bu hafta

    A potential security vulnerability has been identified with HP PageWide Printers, HP OfficeJet Pro Printers, with firmware before 1708D.

    KritikCVSS 9,8SilahlaştırılmışEPSS %84

    hp · j9v82a firmware23 Oca 2018

  • CVE-2018-5359
    35İzleyin

    The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system-level access becaus

    YüksekCVSS 8,1Kavram kanıtıEPSS %8

    flexense · sysgauge23 Oca 2018

  • CVE-2018-5972
    45Planlayın

    SQL Injection exists in Classified Ads CMS Quickad 4.0 via the keywords, placeid, cat, or subcat parameter to the listing URI.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    quickad project · quickad24 Oca 2018

  • CVE-2018-5979
    45Planlayın

    SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    wchat project · wchat24 Oca 2018

  • CVE-2018-5985
    45Planlayın

    SQL Injection exists in the LiveCRM SaaS Cloud 1.0 component for Joomla! via an r=site/login&company_id= request.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    livecrm · livecrm saas cloud24 Oca 2018

  • CVE-2018-5988
    45Planlayın

    SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobile_preview.php or index.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    flexible poll project · flexible poll24 Oca 2018

  • CVE-2017-13696
    63Bu hafta

    A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze E

    KritikCVSS 9,8SilahlaştırılmışEPSS %78

    flexense · dupscout24 Oca 2018

  • CVE-2018-5319
    34İzleyin

    RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request.

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    ravpower · filehub firmware24 Oca 2018

  • CVE-2018-1000006
    60Bu hafta

    GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, speci

    YüksekCVSS 8,8SilahlaştırılmışEPSS %84

    atom · electron24 Oca 2018

  • CVE-2018-5967
    21İzleyin

    Netis WF2419 V2.2.36123 devices allow XSS via the Description parameter on the Bandwidth Control Rule Settings page.

    OrtaCVSS 5,4İstismar yokEPSS %0

    netis-systems · wf2419 firmware25 Oca 2018

  • CVE-2018-5973
    45Planlayın

    SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    eihitech · professional local directory script25 Oca 2018

  • CVE-2018-5997
    46Planlayın

    An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056.

    KritikCVSS 9,8Kavram kanıtıEPSS %23

    ravpower · filehub firmware25 Oca 2018

  • CVE-2017-12377
    42Planlayın

    ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a

    KritikCVSS 9,8İstismar yokEPSS %11

    clamav · clamav26 Oca 2018

  • CVE-2017-12379
    43Planlayın

    ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a

    KritikCVSS 9,8İstismar yokEPSS %12

    clamav · clamav26 Oca 2018

  • CVE-2017-17976
    43Planlayın

    In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    perfexcrm · perfex crm26 Oca 2018