Archive
15 June 2017
Vulnerabilities first published on this day (UTC), newest first.
112 results · Feed
-
Critical 10.0
This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application. …
-
Unscored —
QNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function.
-
Unscored —
Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially cr…
-
Unscored —
Windows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows an attacker to execute …
-
Unscored —
On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot.
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28 for WordPress allows re…
-
Unscored —
In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the index.php/user/new UR…
-
Unscored —
Stored Cross-site scripting (XSS) vulnerability in SAP SuccessFactors before b1705.1234962 allows remote authenticated …
-
Unscored —
In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?return_url=[XSS] exploitabl…
-
Unscored —
In FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing Service on Windows platf…
-
Unscored —
Atlassian Confluence starting with 4.3.0 before 6.2.1 did not check if a user had permission to view a page when creati…
-
Unscored —
The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext.
-
Unscored —
Routes used to stop running Metasploit tasks (either particular ones or all tasks) allowed GET requests. Only POST requ…
-
Unscored —
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could allow a remote attacke…
-
Unscored —
IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of r…
-
Unscored —
An uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1 allows an attacker to ca…
-
Unscored —CVE-2017-9606 Public exploit
Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan hors…
-
Unscored —CVE-2017-0300 Public exploit
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2…
-
Unscored —
Windows Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold a…
-
Unscored —
The kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Window…
-
Unscored —
Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a sec…
-
Unscored —CVE-2017-0285 Public exploit
Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows R…
-
Unscored —CVE-2017-0282 Public exploit
Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows R…
-
Unscored —
A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serv…
-
Unscored —CVE-2017-0260 EPSS 20%
A remote code execution vulnerability exists in Microsoft Office when the software fails to properly handle objects in …
-
Unscored —
Microsoft Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature byp…
-
Unscored —
Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a sec…
-
Unscored —
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2…
-
Unscored —CVE-2017-0215 EPSS 40%
Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability …
-
Unscored —CVE-2017-0291 EPSS 20%
Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Win…
-
Unscored —
Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows R…
-
Unscored —CVE-2017-0286 Public exploit
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT…
-
Unscored —
Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability …
-
Unscored —CVE-2017-0287 Public exploit
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT…
-
Unscored —CVE-2017-0292 EPSS 24%
Windows PDF in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Win…
-
Unscored —CVE-2017-0299 Public exploit
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2…
-
Unscored —CVE-2017-0294 EPSS 17%
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2…
-
Unscored —
Microsoft Windows 10 1607 and 1703, and Windows Server 2016 allow an authenticated attacker to modify the C:\Users\DEFA…
-
Unscored —CVE-2017-0288 Public exploit
Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT…
-
Unscored —CVE-2017-0284 Public exploit
Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows R…