August 2017

6 results · Clear filters · Feed

• High 7.5
  CVE-2017-0901 Public exploit EPSS 29%

  RubyGems may allow a maliciously crafted gem to overwrite files

  RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.

  HackerOne RubyGems ruby2.3 ruby Debian Ubuntu Alpine RubyGems
  Aug 31, 2017
• High 8.8
  CVE-2017-11610 Public exploit EPSS 88%

  Incorrect Default Permissions in Supervisor

  The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.

  supervisor supervisor supervisor supervisor Debian Ubuntu Alpine PyPI
  Aug 23, 2017
• High 7.5
  CVE-2017-12852 Public exploit

  Numpy missing input validation

  The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.

  numpy python-numpy Ubuntu PyPI
  Aug 15, 2017
• High 8.8
  CVE-2017-6327 Exploited Public exploit EPSS 36%

  The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a sit…

  Symantec Messaging Gateway
  Aug 11, 2017

  KEV Nov 3, 2021
• High 7.8
  CVE-2015-2291 Exploited · Ransomware Public exploit EPSS 16%

  (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows al…

  Aug 9, 2017

  KEV Feb 10, 2023
• High 7.5
  CVE-2017-12637 Exploited Public exploit EPSS 95%

  Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application S…

  Aug 7, 2017

  KEV Mar 19, 2025