Skip to content
OpenAdvisories

Archive

12 May 2017

Vulnerabilities first published on this day (UTC), newest first.

← April 2017 2017 / May /12 June 2017 →
  1. 131
  2. 221
  3. 328
  4. 419
  5. 543
  6. 611
  7. 71
  8. 826
  9. 940
  10. 1031
  11. 1125
  12. 12174
  13. 13 
  14. 144
  15. 1529
  16. 1638
  17. 1721
  18. 1841
  19. 1930
  20. 20 
  21. 2124
  22. 22127
  23. 23117
  24. 2417
  25. 2526
  26. 2625
  27. 271
  28. 2810
  29. 2926
  30. 3016
  31. 318
All Critical High Medium Low Exploited only Public exploit

174 results · Feed

  • High 7.5
    CVE-2017-0234 EPSS 38%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-022…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2017-0266 EPSS 36%

    A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render w…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2017-0244

    The kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows locally authenticated attackers to gain priv…

    Microsoft Microsoft Windows Windows
  • Unscored —
    CVE-2017-0229 EPSS 11%

    A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objec…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2017-0077

    The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…

    Microsoft Microsoft Windows Windows
  • High 7.3
    CVE-2017-0249

    High severity vulnerability that affects Microsoft.AspNetCore.Mvc

    An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

    Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core System.Text.Encodings.Web NuGet
  • Unscored —
    CVE-2017-0276

    Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Win…

    Microsoft Microsoft Server Message Block 1.0
  • Unscored —
    CVE-2017-0246

    The Graphics Component in the kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Wi…

    Microsoft Microsoft Windows Windows
  • High 7.5
    CVE-2017-0236 EPSS 32%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-022…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2017-8360

    Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data (keys…

  • Unscored —
    CVE-2017-8908

    The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service…

    ghostscript Debian
  • Unscored —
    CVE-2017-8911

    An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid w…

    tnef tnef Debian Ubuntu
  • High 7.2
    CVE-2017-8912 Public exploit

    CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code par…

  • Unscored —
    CVE-2017-8900

    LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass …