Skip to content
OpenAdvisories

Archive

12 April 2017

Vulnerabilities first published on this day (UTC), newest first.

← March 2017 2017 / April /12 May 2017 →
  1. 19
  2. 2177
  3. 348
  4. 423
  5. 534
  6. 632
  7. 787
  8. 8 
  9. 926
  10. 1098
  11. 1136
  12. 12154
  13. 1377
  14. 1460
  15. 152
  16. 161
  17. 1732
  18. 1814
  19. 1923
  20. 20101
  21. 2147
  22. 226
  23. 2319
  24. 24281
  25. 2537
  26. 2611
  27. 2720
  28. 2876
  29. 299
  30. 3029
All Critical High Medium Low Exploited only Public exploit

20 results · Clear filters · Feed

  • Critical 9.8
    CVE-2015-7564 Public exploit

    TeamPass vulnerable to SQL Injection

    Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an action_on_quick_icon action to item.query.php or the (2) order or (3) direction parameter in an (a) c…

    nilsteampassnet/teampass Packagist
  • Medium 6.1
    CVE-2015-7562 Public exploit

    TeamPass vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) label value of an item or (2) name of a role.

    nilsteampassnet/teampass Packagist
  • Unscored —
    CVE-2015-7563 Public exploit

    Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the au…

  • Unscored —
    CVE-2016-4337 Public exploit

    SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to …

  • Unscored —
    CVE-2017-7722 Public exploit EPSS 13%

    In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is acc…

  • Unscored —
    CVE-2017-0204 Public exploit EPSS 19%

    Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow re…

    Microsoft Outlook
  • Unscored —
    CVE-2017-0202 Public exploit EPSS 46%

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerab…

    Microsoft Internet Explorer
  • Unscored —
    CVE-2017-0106 Public exploit EPSS 28%

    Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remo…

    Microsoft Office
  • High 7.8
    CVE-2017-0199 Exploited · Ransomware Public exploit EPSS 99%

    Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windo…

    Microsoft Office/WordPad
    KEV Nov 3, 2021
  • Unscored —
    CVE-2017-0167 Public exploit

    An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and …

    Microsoft Windows Windows
  • Unscored —
    CVE-2017-0058 Public exploit

    A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides…

    Microsoft Windows Windows
  • Unscored —
    CVE-2017-0211 Public exploit EPSS 14%

    An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows…

    Microsoft Windows OLE Windows
  • Unscored —
    CVE-2017-0165 Public exploit

    An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8…

    Microsoft Windows Windows
  • Unscored —
    CVE-2017-0160 Public exploit EPSS 18%

    Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system …

    Microsoft .NET Framework
  • Unscored —
    CVE-2017-3064 Public exploit EPSS 13%

    Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a s…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2017-3006 Public exploit EPSS 11%

    Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions duri…

  • Unscored —
    CVE-2017-3061 Public exploit EPSS 25%

    Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parse…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2016-7552 Public exploit Scanner template EPSS 93%

    On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allow…

  • Unscored —
    CVE-2016-7547 Public exploit EPSS 92%

    A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in…

  • Unscored —
    CVE-2017-7588 Public exploit EPSS 34%

    On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to …