Skip to content
OpenAdvisories

Archive

15 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /15 December 2017 →
  1. 133
  2. 223
  3. 333
  4. 417
  5. 54
  6. 629
  7. 744
  8. 821
  9. 933
  10. 1013
  11. 111
  12. 126
  13. 1397
  14. 1422
  15. 1591
  16. 16124
  17. 17100
  18. 184
  19. 191
  20. 2026
  21. 2119
  22. 22162
  23. 237
  24. 247
  25. 255
  26. 261
  27. 2755
  28. 2816
  29. 2916
  30. 3058
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2017-15806 Public exploit EPSS 11%

    Zeta Components Mail Arbitrary code execution via a crafted email address

    The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remote attackers to execute arbitrary code via a crafted email …

    zetacomponents/mail Packagist
  • High 7.8
    CVE-2017-11882 Exploited · Ransomware Public exploit EPSS 100%

    Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and M…

    Microsoft Microsoft Office
    KEV Nov 3, 2021
  • High 7.5
    CVE-2017-11870 Public exploit EPSS 60%

    Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects

    ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vu…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet