Skip to content
OpenAdvisories

Archive

March 2017

Vulnerabilities first published in this month (UTC), newest first.

149 results · Clear filters · Feed

  • Unscored —
    CVE-2017-0115 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —
    CVE-2017-0128 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —
    CVE-2017-0072 Public exploit EPSS 43%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —
    CVE-2017-0063 Public exploit EPSS 35%

    The Color Management Module (ICM32.dll) memory handling functionality in Windows Vista SP2; Windows Server 2008 SP2 and…

  • High 7.8
    CVE-2017-0005 Exploited Public exploit EPSS 11%

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; …

    KEV May 24, 2022
  • Unscored —
    CVE-2017-0116 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —
    CVE-2017-0118 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serve…

  • High 8.8
    CVE-2017-0146 Exploited · Ransomware Public exploit EPSS 90%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2017-0055 Public exploit EPSS 16%

    Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Window…

  • Unscored —
    CVE-2017-0108 Public exploit EPSS 50%

    The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2…

  • Unscored —
    CVE-2017-0075 Public exploit EPSS 13%

    Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012…

  • Unscored —
    CVE-2017-0103 Public exploit

    The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 20…

  • Unscored —
    CVE-2017-0045 Public exploit

    Windows DVD Maker in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, and Windows Vista SP2 does not properly parse c…

  • Unscored —
    CVE-2017-0122 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —
    CVE-2017-0089 Public exploit EPSS 58%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —
    CVE-2017-0085 Public exploit EPSS 23%

    Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…

  • Unscored —
    CVE-2017-6510 Public exploit EPSS 15%

    Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker …

  • Unscored —
    CVE-2017-6443 Public exploit

    Cross-site scripting (XSS) vulnerability in EPSON TMNet WebConfig 1.00 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2017-5496 Public exploit

    Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash.

  • Unscored —
    CVE-2017-5359 Public exploit

    EasyCom SQL iPlug allows remote attackers to cause a denial of service via the D$EVAL parameter to the default URI.

  • Unscored —
    CVE-2017-5358 Public exploit EPSS 12%

    Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arb…

  • Unscored —
    CVE-2017-6366 Public exploit

    Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 al…

  • Unscored —
    CVE-2017-6060 Public exploit

    Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. MuPDF 1.10a allows remote attackers …

  • Unscored —
    CVE-2016-8024 Public exploit

    Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (V…

  • Unscored —
    CVE-2016-8020 Public exploit EPSS 11%

    Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and ear…

  • Unscored —
    CVE-2016-8019 Public exploit

    Cross-site scripting (XSS) vulnerability in attributes in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and e…

  • Unscored —
    CVE-2016-8025 Public exploit

    SQL injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authe…

  • Unscored —
    CVE-2016-8023 Public exploit

    Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3…

  • Unscored —
    CVE-2016-8022 Public exploit EPSS 13%

    Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier)…

  • Unscored —
    CVE-2016-8018 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier)…

  • Unscored —
    CVE-2016-8021 Public exploit

    Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.…

  • Unscored —
    CVE-2016-8007 Public exploit

    Authentication bypass vulnerability in McAfee Host Intrusion Prevention Services (HIPS) 8.0 Patch 7 and earlier allows …

  • Unscored —
    CVE-2016-8017 Public exploit

    Special element injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows …

  • Unscored —
    CVE-2016-8016 Public exploit

    Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remot…

  • Unscored —
    CVE-2017-6896 Public exploit

    Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate fro…

  • Unscored —
    CVE-2017-6516 Public exploit

    A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allo…

  • Unscored —
    CVE-2017-3000 Public exploit

    Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constan…

  • Unscored —
    CVE-2013-4659 Public exploit EPSS 14%

    Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. …

  • Unscored —
    CVE-2017-6367 Public exploit

    In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology inv…

  • Unscored —
    CVE-2017-6398 Public exploit EPSS 54%

    An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600. An authenticated user…