Skip to content
OpenAdvisories

Archive

May 2017

Vulnerabilities first published in this month (UTC), newest first.

← April 2017 2017 / May June 2017 →
  1. 131
  2. 221
  3. 328
  4. 419
  5. 543
  6. 611
  7. 71
  8. 826
  9. 940
  10. 1031
  11. 1125
  12. 12174
  13. 13 
  14. 144
  15. 1529
  16. 1638
  17. 1721
  18. 1841
  19. 1930
  20. 20 
  21. 2124
  22. 22127
  23. 23117
  24. 2417
  25. 2526
  26. 2625
  27. 271
  28. 2810
  29. 2926
  30. 3016
  31. 318
All Critical High Medium Low Exploited only Public exploit

48 results · Clear filters · Feed

  • High 8.8
    CVE-2017-0222 Exploited EPSS 30%

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…

    Microsoft Internet Explorer
    KEV Feb 25, 2022
  • High 7.5
    CVE-2017-0234 EPSS 38%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-022…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.3
    CVE-2017-0249

    High severity vulnerability that affects Microsoft.AspNetCore.Mvc

    An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

    Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core System.Text.Encodings.Web NuGet
  • High 7.5
    CVE-2017-0236 EPSS 32%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-022…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.2
    CVE-2017-8912 Public exploit

    CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code par…

  • High 8.8
    CVE-2017-8874

    Mautic Cross-Site Request Forgery (CSRF)

    Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email campaigns or (2) delete contacts.

    mautic/core Packagist
  • High 7.5
    CVE-2016-6799

    Information Exposure in cordova-android

    Product: Apache Cordova Android 5.2.2 and earlier. The application calls methods of the Log class. Messages passed to these methods (Log.v(), Log.d(), Log.i(), Log.w(), and Log.e()) are stored in a series of circular buffers on the device. By default, a maxim…

    Apache Software Foundation Apache Cordova Android cordova-android Android npm
  • High 8.8
    CVE-2017-8377

    GeniXCMS SQL Injection

    GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter.

    genix/cms Packagist