Skip to content
OpenAdvisories

Archive

May 2017

Vulnerabilities first published in this month (UTC), newest first.

8 results · Clear filters · Feed

  • High 7.8
    CVE-2017-8540 Exploited Public exploit EPSS 72%

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2016-4977 Public exploit EPSS 80%

    Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views

    When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the…

  • High 8.1
    CVE-2017-2800 Public exploit

    A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resultin…

  • High 8.3
    CVE-2017-2793 Public exploit

    An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFil…

  • High 7.8
    CVE-2017-0261 Exploited Public exploit EPSS 78%

    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the softwa…

    KEV Mar 3, 2022
  • High 7.3
    CVE-2017-0213 Exploited · Ransomware Public exploit EPSS 84%

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se…

    KEV Mar 28, 2022
  • High 7.8
    CVE-2017-0263 Exploited Public exploit EPSS 10%

    The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201…

    KEV Feb 10, 2022
  • High 7.2
    CVE-2017-8912 Public exploit

    CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code par…