Skip to content
OpenAdvisories

Archive

17 March 2017

Vulnerabilities first published on this day (UTC), newest first.

← February 2017 2017 / March /17 April 2017 →
  1. 158
  2. 248
  3. 350
  4. 48
  5. 516
  6. 616
  7. 764
  8. 8109
  9. 928
  10. 1024
  11. 119
  12. 1212
  13. 1315
  14. 1464
  15. 1588
  16. 1620
  17. 17180
  18. 183
  19. 193
  20. 2063
  21. 2122
  22. 2229
  23. 23105
  24. 2447
  25. 251
  26. 269
  27. 2759
  28. 2839
  29. 2932
  30. 3045
  31. 3136
All Critical High Medium Low Exploited only Public exploit

180 results · Feed

  • Unscored —
    CVE-2017-6958

    An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to …

  • Unscored —
    CVE-2017-6966

    readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, reloc…

    binutils binutils Debian Ubuntu
  • Unscored —
    CVE-2017-6967

    xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not bei…

    xrdp xrdp Debian Ubuntu
  • Unscored —
    CVE-2017-6969

    readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The…

    binutils binutils Debian Ubuntu
  • Unscored —
    CVE-2017-6961

    An issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing huge memory allocations, …

    apng2gif apng2gif Debian Ubuntu
  • Unscored —
    CVE-2017-6960

    An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, relat…

    apng2gif apng2gif Debian Ubuntu
  • Medium 4.3
    CVE-2017-6954

    BuddyPress Docs plugin Improper Privilege Management

    An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

    buddypress/buddypress Packagist
  • Unscored —
    CVE-2017-6955

    An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress. A user is abl…

  • Unscored —
    CVE-2017-0016 EPSS 27%

    Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016…

    Microsoft SMBv2/SMBv3
  • Unscored —
    CVE-2017-0088 Public exploit EPSS 43%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0035 EPSS 15%

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objec…

    Microsoft Browser
  • Unscored —
    CVE-2017-0012

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, a…

    Microsoft Browsers
  • Unscored —
    CVE-2017-0029 EPSS 16%

    Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of s…

    Microsoft Office
  • Unscored —
    CVE-2017-0119 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0112 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0154 EPSS 10%

    Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain poli…

    Microsoft Internet Explorer
  • High 7.8
    CVE-2017-0001 Exploited

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; …

    Microsoft Windows GDI+ Windows
    KEV Mar 3, 2022
  • Unscored —
    CVE-2017-0124 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0099

    Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server…

    Microsoft Hyper-V Virtualization
  • Unscored —
    CVE-2017-0125 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0014 EPSS 18%

    The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Wi…

    Microsoft Windows graphics component Windows
  • Unscored —
    CVE-2017-0027 EPSS 23%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Servi…

    Microsoft Office
  • Unscored —
    CVE-2017-0030 EPSS 28%

    Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2…

    Microsoft Office
  • Unscored —
    CVE-2017-0032 EPSS 15%

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objec…

    Microsoft Browser
  • Unscored —
    CVE-2017-0076

    Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server…

    Microsoft Hyper-V Virtualization
  • High 7.8
    CVE-2017-0101 Exploited · Ransomware Public exploit EPSS 57%

    The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows …

    Microsoft Windows Windows
    KEV Mar 15, 2022
  • High 7.5
    CVE-2017-0147 Exploited · Ransomware Public exploit EPSS 100%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV May 24, 2022
  • Unscored —
    CVE-2017-0081

    The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 151…

    Microsoft Win32k
  • Unscored —
    CVE-2017-0010 EPSS 25%

    A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objec…

    Microsoft Browser
  • Unscored —
    CVE-2017-0057 EPSS 14%

    DNS client in Microsoft Windows 8.1; Windows Server 2012 R2, Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windo…

    Microsoft Windows dnsclient Windows
  • Unscored —
    CVE-2017-0092 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0087 Public exploit EPSS 43%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0020 EPSS 17%

    Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to …

    Microsoft Office
  • Unscored —
    CVE-2017-0083 Public exploit EPSS 43%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0084 Public exploit EPSS 38%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serve…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0034 EPSS 13%

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerabili…

    Microsoft Edge Browsers
  • Unscored —
    CVE-2017-0100 Public exploit

    A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold…

    Microsoft Windows HelpPane Windows
  • Unscored —
    CVE-2017-0113 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows
  • Unscored —
    CVE-2017-0109

    Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012…

    Microsoft Hyper-V Virtualization
  • Unscored —
    CVE-2017-0127 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

    Microsoft Windows Uniscribe Windows