Skip to content
OpenAdvisories

Archive

12 December 2017

Vulnerabilities first published on this day (UTC), newest first.

← November 2017 2017 / December /12 January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Unscored —
    CVE-2017-1000385 Public exploit EPSS 22%

    The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. Th…

    erlang erlang Debian Ubuntu
  • Unscored —
    CVE-2017-11918 Public exploit EPSS 63%

    ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to…

    Microsoft ChakraCore, Microsoft Edge Browsers
  • High 7.5
    CVE-2017-11911 Public exploit EPSS 65%

    ChakraCore RCE Vulnerability

    ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2017-11906 Public exploit EPSS 25%

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

    Microsoft Internet Explorer
  • High 7.5
    CVE-2017-11909 Public exploit EPSS 65%

    ChakraCore vulnerable to remote code execution

    ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2017-11907 Public exploit EPSS 65%

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

    Microsoft Internet Explorer
  • Unscored —
    CVE-2017-11885 Public exploit EPSS 46%

    Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold,…

    Microsoft Microsoft Windows Windows
  • Unscored —
    CVE-2017-11890 Public exploit EPSS 50%

    Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Wi…

    Microsoft Internet Explorer
  • High 7.5
    CVE-2017-11914 Public exploit EPSS 63%

    ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11893 Public exploit EPSS 68%

    ChakraCore vulnerable to remote code execution

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memor…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2017-11903 Public exploit EPSS 47%

    Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows S…

    Microsoft Internet Explorer
  • Unscored —
    CVE-2017-5717 Public exploit

    Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileg…

    Intel Intel Graphics Driver
  • High 8.1
    CVE-2017-17562 Exploited Public exploit Scanner template EPSS 97%

    Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. …

    KEV Dec 10, 2021
  • Unscored —
    CVE-2017-17560 Public exploit EPSS 73%

    An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jque…