Skip to content
OpenAdvisories

Archive

April 2017

Vulnerabilities first published in this month (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2017-3066 Exploited Public exploit EPSS 91%

    Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier ha…

    KEV Feb 24, 2025
  • Critical 9.8
    CVE-2016-2173 Public exploit

    Improper Input Validation in Spring AMQP

    org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code.

  • Critical 9.8
    CVE-2016-1555 Exploited Public exploit Scanner template EPSS 98%

    (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgea…

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2017-5645 Public exploit Scanner template EPSS 89%

    Deserialization of Untrusted Data in Log4j

    In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.

  • Critical 9.8
    CVE-2015-7564 Public exploit

    TeamPass vulnerable to SQL Injection

    Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an action_on_quick_icon action to item.query.php or the (2) order or (3) direction parameter in an (a) c…