May 2017

105 results · Clear filters · Feed

• High 7.3
  CVE-2017-0213 Exploited · Ransomware Public exploit EPSS 84%

  Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se…

  Microsoft Windows COM Windows
  May 12, 2017

  KEV Mar 28, 2022
• Unscored —
  CVE-2017-0220 Public exploit

  The Windows kernel in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 Gold allows authentica…

  Microsoft Microsoft Windows Windows
  May 12, 2017
• High 7.8
  CVE-2017-0263 Exploited Public exploit EPSS 10%

  The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201…

  Microsoft Microsoft Windows Windows
  May 12, 2017

  KEV Feb 10, 2022
• Unscored —
  CVE-2017-0245 Public exploit

  The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1 and Windows Server 2012 Gold allow a local…

  Microsoft Microsoft Windows Windows
  May 12, 2017
• Unscored —
  CVE-2017-0258 Public exploit

  The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gol…

  Microsoft Microsoft Windows Windows
  May 12, 2017
• High 7.2
  CVE-2017-8912 Public exploit

  CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code par…

  May 12, 2017
• Unscored —
  CVE-2017-7472 Public exploit

  The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumpti…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  May 11, 2017
• Unscored —
  CVE-2017-8798 Public exploit EPSS 24%

  Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of …

  miniupnpc miniupnpc miniupnpc Debian Ubuntu Alpine
  May 11, 2017
• Unscored —
  CVE-2017-8895 Public exploit EPSS 71%

  In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a …

  May 10, 2017
• Unscored —
  CVE-2017-8852 Public exploit

  SAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted CAR archive fil…

  May 10, 2017
• Unscored —
  CVE-2017-8890 Public exploit

  The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attacker…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 10, 2017
• Unscored —
  CVE-2017-3068 Public exploit EPSS 20%

  Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced …

  flashplugin-nonfree Ubuntu
  May 9, 2017
• Unscored —
  CVE-2017-0290 Public exploit EPSS 81%

  The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

  Microsoft Microsoft Malware Protection Engine
  May 9, 2017
• Unscored —
  CVE-2017-6953 Public exploit

  Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new car…

  May 8, 2017
• Critical 9.8
  CVE-2017-7921 Exploited Public exploit Scanner template EPSS 100%

  An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 1…

  May 6, 2017

  KEV Mar 5, 2026
• Unscored —
  CVE-2017-8760 Public exploit

  An issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in courier/1000@/index.html with the…

  May 5, 2017
• Unscored —
  CVE-2016-7054 Public exploit EPSS 32%

  ChaCha20/Poly1305 heap-buffer-overflow

  In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.

  OpenSSL OpenSSL openssl Debian
  May 4, 2017
• Unscored —
  CVE-2017-3730 Public exploit EPSS 55%

  Bad (EC)DHE parameters cause a client crash

  In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service…

  OpenSSL OpenSSL openssl Debian
  May 4, 2017
• Unscored —
  CVE-2017-8295 Public exploit EPSS 27%

  WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for r…

  wordpress wordpress Debian Ubuntu
  May 4, 2017
• Unscored —
  CVE-2017-8779 Public exploit EPSS 81%

  rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider …

  rpcbind libtirpc rpcbind libtirpc Debian Ubuntu Alpine
  May 4, 2017
• Unscored —
  CVE-2015-8257 Public exploit EPSS 18%

  The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shel…

  May 2, 2017
• Unscored —
  CVE-2016-5810 Public exploit EPSS 15%

  upAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated administrators to obtain sensitive…

  May 2, 2017
• Unscored —
  CVE-2016-5063 Public exploit

  The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote att…

  May 2, 2017
• Critical 9.8
  CVE-2017-5689 Exploited Public exploit Scanner template EPSS 92%

  An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Man…

  Intel Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability
  May 2, 2017

  KEV Jan 28, 2022
• Unscored —
  CVE-2017-5631 Public exploit Scanner template

  An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr…

  May 1, 2017