Skip to content
OpenAdvisories

Archive

February 2017

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2017-0037 Exploited Public exploit EPSS 80%

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuild…

    KEV Mar 28, 2022
  • High 7.5
    CVE-2017-5630 Public exploit EPSS 13%

    PEAR core file overwrite vulnerability

    PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite.