Skip to content
OpenAdvisories

Archive

May 2017

Vulnerabilities first published in this month (UTC), newest first.

← April 2017 2017 / May June 2017 →
  1. 131
  2. 221
  3. 328
  4. 419
  5. 543
  6. 611
  7. 71
  8. 826
  9. 940
  10. 1031
  11. 1125
  12. 12174
  13. 13 
  14. 144
  15. 1529
  16. 1638
  17. 1721
  18. 1841
  19. 1930
  20. 20 
  21. 2124
  22. 22127
  23. 23117
  24. 2417
  25. 2526
  26. 2625
  27. 271
  28. 2810
  29. 2926
  30. 3016
  31. 318
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Critical 9.8
    CVE-2017-7494 Exploited · Ransomware Public exploit EPSS 99%

    Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, all…

    Samba Samba samba samba Debian Ubuntu Azure Linux Alpine
    KEV Mar 30, 2023
  • Critical 9.8
    CVE-2017-9232 Public exploit EPSS 49%

    Juju uses a UNIX domain socket without setting appropriate permissions

    Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.

    github.com/juju/juju juju-core juju-core-1 Ubuntu Go
  • Critical 9.8
    CVE-2017-6862 Exploited EPSS 46%

    NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 all…

    KEV Jun 8, 2022
  • Critical 9.8
    CVE-2014-3527

    Authorization Bypass in Spring Security

    When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authenticating a proxy ticket that was not associated. This is due to the fact that the proxy ticket authentication u…

    Pivotal Spring Security org.springframework.security:spring-security-core Maven
  • Critical 9.8
    CVE-2017-0252 EPSS 13%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0223.

    Microsoft Chakra Core Microsoft.ChakraCore NuGet
  • Critical 9.8
    CVE-2017-0223 EPSS 15%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory. aka "Scripting Engine Memory Corruption Vulnerability". This vulnerability is unique from CVE-2017-0252.

    Microsoft Chakra Core Microsoft.ChakraCore NuGet
  • Critical 9.8
    CVE-2017-7474

    keycloak-connect and keycloak-js improperly handle invalid tokens

    It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks.

    Red Hat Keycloak Node.js adapter keycloak-connect keycloak-js npm
  • Critical 9.8
    CVE-2017-7886

    Dolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter

    Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Critical 9.8
    CVE-2017-7888

    Dolibarr ERP and CRM Insecure Encryption

    Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Critical 9.1
    CVE-2017-8872

    The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffe…

    libxml2 libxml2 Debian Ubuntu
  • Critical 9.1
    CVE-2017-8827

    GeniXCMS Arbitrary User Password Reset Vulnerability

    forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service (login inability) or possibly conduct Arbitrary User Password Reset attacks via a series of requests.

    genix/cms Packagist
  • Critical 9.8
    CVE-2017-7921 Exploited Public exploit Scanner template EPSS 100%

    An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 1…

    KEV Mar 5, 2026
  • Critical 9.8
    CVE-2017-5689 Exploited Public exploit Scanner template EPSS 92%

    An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Man…

    Intel Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability
    KEV Jan 28, 2022
  • Critical 9.1
    CVE-2017-6519

    avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that …

    avahi avahi avahi avahi Debian Ubuntu Azure Linux Alpine