Skip to content
OpenAdvisories

Archive

February 2017

Vulnerabilities first published in this month (UTC), newest first.

← January 2017 2017 / February March 2017 →
  1. 1143
  2. 215
  3. 344
  4. 43
  5. 53
  6. 632
  7. 734
  8. 886
  9. 952
  10. 109
  11. 11 
  12. 126
  13. 13124
  14. 144
  15. 1592
  16. 1628
  17. 1759
  18. 183
  19. 19 
  20. 20154
  21. 2121
  22. 2241
  23. 2311
  24. 2434
  25. 25 
  26. 261
  27. 2730
  28. 2812
All Critical High Medium Low Exploited only Public exploit

95 results · Clear filters · Feed

  • Unscored —
    CVE-2015-6023 Public exploit EPSS 11%

    ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remo…

  • Unscored —
    CVE-2015-6024 Public exploit EPSS 26%

    ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remo…

  • Unscored —
    CVE-2016-9244 Public exploit EPSS 74%

    A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled ma…

    F5 F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, PEM, PSM Network devices
  • Unscored —
    CVE-2016-10191 Public exploit

    Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, an…

    ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-10190 Public exploit

    Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3…

    ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-0411 Public exploit

    An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arb…

    Google Android android Android Ubuntu
  • Unscored —
    CVE-2017-0412 Public exploit

    An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arb…

    Google Android android Android Ubuntu
  • Unscored —
    CVE-2016-7400 Public exploit

    Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2016-6175 Public exploit EPSS 20%

    Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code vi…

    php-gettext php-gettext Debian Ubuntu
  • Unscored —
    CVE-2016-2539 Public exploit

    Cross-site request forgery (CSRF) vulnerability in install_modules.php in ATutor before 2.2.2 allows remote attackers t…

  • Critical 9.8
    CVE-2015-2794 Public exploit Scanner template EPSS 75%

    The installation wizard in DotNetNuke (DNN) allows privilege escalation

    The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx.

    DotNetNuke.Core NuGet
  • High 7.5
    CVE-2017-5630 Public exploit EPSS 13%

    PEAR core file overwrite vulnerability

    PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite.

    php5 php-pear php-pear pear/pear Debian Ubuntu Packagist
  • Unscored —
    CVE-2016-3053 Public exploit

    IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privil…

    IBM AIX
  • Unscored —
    CVE-2016-10079 Public exploit

    SAPlpd through 7400.3.11.33 in SAP GUI 7.40 on Windows has a Denial of Service vulnerability (service crash) with a lon…

  • Unscored —
    CVE-2017-3823 Public exploit EPSS 27%

    An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Cont…