Skip to content
OpenAdvisories

Archive

February 2017

Vulnerabilities first published in this month (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2017-6077 Exploited Public exploit EPSS 69%

    ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitr…

    KEV Mar 7, 2022
  • Critical 9.8
    CVE-2016-4861 Public exploit

    Zend Framework Allows SQL Injection

    The (1) order and (2) group methods in Zend_Db_Select in the Zend Framework before 1.12.20 might allow remote attackers to conduct SQL injection attacks by leveraging failure to remove comments from an SQL statement before validation.

  • Critical 9.8
    CVE-2016-9361 Public exploit EPSS 20%

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…

  • Critical 9.8
    CVE-2017-5941 Public exploit EPSS 61%

    Code Execution through IIFE in node-serialize

    An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression …

  • Critical 9.8
    CVE-2015-2794 Public exploit Scanner template EPSS 75%

    The installation wizard in DotNetNuke (DNN) allows privilege escalation

    The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.