Skip to content
OpenAdvisories

Archive

10 January 2018

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2017-17485 Public exploit EPSS 50%

    jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass

    FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readVa…

  • Unscored —
    CVE-2017-15664 Public exploit

    In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The a…

  • Unscored —
    CVE-2017-15663 Public exploit EPSS 13%

    In Flexense Disk Pulse Enterprise v10.1.18, the Control Protocol suffers from a denial of service vulnerability. The at…

  • Unscored —
    CVE-2017-15662 Public exploit

    In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability. The att…

  • Unscored —
    CVE-2017-15665 Public exploit

    In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability. The attack…

  • Unscored —
    CVE-2016-9722 Public exploit EPSS 12%

    IBM QRadar 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be …

  • High 8.8
    CVE-2018-0798 Exploited Public exploit EPSS 95%

    Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2018-0802 Exploited · Ransomware Public exploit EPSS 93%

    Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow…

    KEV Nov 3, 2021