Skip to content
OpenAdvisories

Archive

15 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /15 December 2017 →
  1. 133
  2. 223
  3. 333
  4. 417
  5. 54
  6. 629
  7. 744
  8. 821
  9. 933
  10. 1013
  11. 111
  12. 126
  13. 1397
  14. 1422
  15. 1591
  16. 16124
  17. 17100
  18. 184
  19. 191
  20. 2026
  21. 2119
  22. 22162
  23. 237
  24. 247
  25. 255
  26. 261
  27. 2755
  28. 2816
  29. 2916
  30. 3058
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Unscored —
    CVE-2017-15271 Public exploit

    A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could b…

  • Unscored —
    CVE-2017-15270 Public exploit

    The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) …

  • High 8.1
    CVE-2017-15806 Public exploit EPSS 11%

    Zeta Components Mail Arbitrary code execution via a crafted email address

    The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remote attackers to execute arbitrary code via a crafted email …

    zetacomponents/mail Packagist
  • Unscored —
    CVE-2017-14961 Public exploit

    In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating…

  • Unscored —
    CVE-2017-7851 Public exploit

    D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the dev…

  • Unscored —
    CVE-2017-8809 Public exploit

    api.php in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 has a Reflected File Download vulner…

    mediawiki Web / CMS Debian
  • High 7.8
    CVE-2017-11882 Exploited · Ransomware Public exploit EPSS 100%

    Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and M…

    Microsoft Microsoft Office
    KEV Nov 3, 2021
  • High 7.5
    CVE-2017-11870 Public exploit EPSS 60%

    Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects

    ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vu…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2017-11841 Public exploit EPSS 60%

    ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, versi…

    Microsoft ChakraCore, Microsoft Edge Browsers
  • Unscored —
    CVE-2017-11839 Public exploit EPSS 62%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows …

  • Unscored —
    CVE-2017-11831 Public exploit

    Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2…

    Microsoft Windows kernel Windows
  • Unscored —
    CVE-2017-11855 Public exploit EPSS 49%

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windo…

    Microsoft Internet Explorer
  • Unscored —
    CVE-2017-11861 Public exploit EPSS 64%

    Microsoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker …

    Microsoft ChakraCore, Microsoft Edge Browsers
  • Unscored —
    CVE-2017-11830 Public exploit

    Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allo…

    Microsoft Device Guard
  • Unscored —
    CVE-2017-11873 Public exploit EPSS 70%

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 170…

    Microsoft ChakraCore, Microsoft Edge Browsers
  • Unscored —
    CVE-2017-11840 Public exploit EPSS 60%

    ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, versi…

    Microsoft ChakraCore, Microsoft Edge Browsers