Skip to content
OpenAdvisories

Archive

12 May 2017

Vulnerabilities first published on this day (UTC), newest first.

← April 2017 2017 / May /12 June 2017 →
  1. 131
  2. 221
  3. 328
  4. 419
  5. 543
  6. 611
  7. 71
  8. 826
  9. 940
  10. 1031
  11. 1125
  12. 12174
  13. 13 
  14. 144
  15. 1529
  16. 1638
  17. 1721
  18. 1841
  19. 1930
  20. 20 
  21. 2124
  22. 22127
  23. 23117
  24. 2417
  25. 2526
  26. 2625
  27. 271
  28. 2810
  29. 2926
  30. 3016
  31. 318
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 8.8
    CVE-2016-4879

    CSRF in baserCMS 3.0.10 and earlier

    Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

    baserCMS Users Community baserCMS plugin Mail baserproject/basercms Packagist
  • High 8.8
    CVE-2016-4881

    CSRF in baserCMS 3.0.10 and earlier

    Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

    baserCMS Users Community baserCMS plugin Blog baserproject/basercms Packagist
  • High 8.8
    CVE-2016-4878

    baserCMS Cross Site Request Forgery vulnerability

    Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

    baserCMS Users Community BaserCMS baserproject/basercms Packagist
  • High 7.5
    CVE-2017-0235 EPSS 11%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-022…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-0224 EPSS 11%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0228, CVE-2017-0229, CVE-2017-0230…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.8
    CVE-2017-0261 Exploited Public exploit EPSS 78%

    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the softwa…

    Microsoft Microsoft Office
    KEV Mar 3, 2022
  • High 7.3
    CVE-2017-0213 Exploited · Ransomware Public exploit EPSS 84%

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se…

    Microsoft Windows COM Windows
    KEV Mar 28, 2022
  • High 7.5
    CVE-2017-0247 EPSS 17%

    ASP.NET Core fails to properly validate web requests

    A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package…

    Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core System.Net.Http NuGet
  • High 7.8
    CVE-2017-0262 Exploited EPSS 81%

    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the softwa…

    Microsoft Microsoft Office
    KEV Feb 10, 2022
  • High 7.8
    CVE-2017-0263 Exploited Public exploit EPSS 10%

    The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201…

    Microsoft Microsoft Windows Windows
    KEV Feb 10, 2022
  • High 8.8
    CVE-2017-0222 Exploited EPSS 30%

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…

    Microsoft Internet Explorer
    KEV Feb 25, 2022
  • High 7.5
    CVE-2017-0234 EPSS 38%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-022…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.3
    CVE-2017-0249

    High severity vulnerability that affects Microsoft.AspNetCore.Mvc

    An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

    Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core Microsoft.AspNetCore.Mvc.Cors NuGet
  • High 7.5
    CVE-2017-0236 EPSS 32%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-022…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.2
    CVE-2017-8912 Public exploit

    CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code par…