Archive
April 2017
Vulnerabilities first published in this month (UTC), newest first.
165 results · Clear filters · Feed
-
Unscored —
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow re…
-
Unscored —
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerab…
-
Unscored —
Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remo…
-
High 7.8
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windo…
KEV Nov 3, 2021 -
Unscored —CVE-2017-0167 Public exploit
An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and …
-
Unscored —CVE-2017-0058 Public exploit
A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides…
-
Unscored —
An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows…
-
Unscored —CVE-2017-0165 Public exploit
An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8…
-
Unscored —
Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system …
-
Unscored —
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a s…
-
Unscored —
Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions duri…
-
Unscored —
Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parse…
-
Unscored —
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allow…
-
Unscored —
A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in…
-
Unscored —
On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to …
-
Unscored —CVE-2015-7893 Public exploit
SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary Java…
-
Unscored —CVE-2017-6088 Public exploit
Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to e…
-
Unscored —CVE-2016-4468 Public exploit
SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and …
-
Unscored —
Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI sc…
-
Unscored —
Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware L…
-
Unscored —CVE-2017-7648 Public exploit
Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows…
-
Unscored —
Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embe…
-
Unscored —CVE-2017-5607 Public exploit
Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.…
-
Unscored —
Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allow…
-
Unscored —CVE-2015-8255 Public exploit
AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi.
-
Unscored —CVE-2015-8258 Public exploit
AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via …
-
Unscored —CVE-2017-0564 Public exploit
An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execu…
-
Unscored —
A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrar…
-
Unscored —CVE-2017-0541 Public exploit
A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file…
-
Unscored —CVE-2017-0554 Public exploit
An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access…
-
Unscored —CVE-2017-0569 Public exploit
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to exec…
-
Unscored —
An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 83…
-
Unscored —CVE-2016-7786 Public exploit
Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via di…
-
Unscored —
SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated…
-
Unscored —CVE-2017-7571 Public exploit
public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges.
-
High 8.8
A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vu…
KEV Sep 18, 2023 -
Unscored —CVE-2017-7237 Public exploit
The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spicewo…
-
Unscored —CVE-2017-7447 Public exploit
HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.
-
Unscored —CVE-2017-7446 Public exploit
HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.
-
Unscored —CVE-2017-6339 Public exploit
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 mismanages certain key and certificate …