Skip to content
OpenAdvisories

Latest vulnerabilities

Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.

Tracked
408,940
Last 24h
2,039
Critical, 7 days
353
Known exploited
1,779
All Critical High Medium Low Exploited only Public exploit

1,125 results · Clear filters · Feed

  • High 8.8
    CVE-2017-6742 Exploited Public exploit EPSS 21%

    A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…

    Cisco IntelliShield Cisco IOS XE Software Universal Product iOS Network devices
    KEV Apr 19, 2023
  • High 7.8
    CVE-2017-8570 Exploited Public exploit EPSS 90%

    Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Mi…

    Microsoft Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016.
    KEV Feb 25, 2022
  • Critical 9.8
    CVE-2017-9791 Exploited Public exploit EPSS 99%

    Code execution in Apache Struts 1 plugin

    The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.

    Apache Software Foundation Apache Struts org.apache.struts:struts2-struts1-plugin Maven
    KEV Feb 10, 2022
  • Critical 9.8
    CVE-2017-9248 Exploited Public exploit EPSS 75%

    Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does no…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2017-9841 Exploited Public exploit EPSS 100%

    Code Injection in PHPUnit

    Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., ex…

    phpunit/phpunit phpunit phpunit Debian Ubuntu Packagist
    KEV Feb 15, 2022
  • High 8.8
    CVE-2017-8464 Exploited Public exploit EPSS 90%

    Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20…

    Microsoft Windows Shell Windows
    KEV Feb 10, 2022
  • Critical 9.8
    CVE-2017-8543 Exploited Public exploit EPSS 74%

    Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 200…

    Microsoft Microsoft Windows Windows
    KEV May 24, 2022
  • Critical 9.8
    CVE-2017-7494 Exploited · Ransomware Public exploit EPSS 99%

    Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, all…

    Samba Samba samba samba Debian Ubuntu Alpine
    KEV Mar 30, 2023
  • High 7.8
    CVE-2017-8540 Exploited Public exploit EPSS 72%

    The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…

    Microsoft Malware Protection Engine
    KEV Mar 3, 2022
  • High 7.8
    CVE-2017-0261 Exploited Public exploit EPSS 78%

    Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the softwa…

    Microsoft Microsoft Office
    KEV Mar 3, 2022
  • High 7.3
    CVE-2017-0213 Exploited · Ransomware Public exploit EPSS 84%

    Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Se…

    Microsoft Windows COM Windows
    KEV Mar 28, 2022
  • High 7.8
    CVE-2017-0263 Exploited Public exploit EPSS 10%

    The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 201…

    Microsoft Microsoft Windows Windows
    KEV Feb 10, 2022
  • Critical 9.8
    CVE-2017-7921 Exploited Public exploit EPSS 100%

    An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 1…

    KEV Mar 5, 2026
  • Critical 9.8
    CVE-2017-5689 Exploited Public exploit EPSS 92%

    An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Man…

    Intel Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability
    KEV Jan 28, 2022
  • Critical 9.8
    CVE-2017-3066 Exploited Public exploit EPSS 91%

    Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier ha…

    KEV Feb 24, 2025
  • High 7.8
    CVE-2017-8291 Exploited Public exploit EPSS 97%

    Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion…

    ghostscript ghostscript ghostscript Debian Ubuntu Alpine
    KEV May 24, 2022
  • High 7.4
    CVE-2017-3506 Exploited Public exploit EPSS 96%

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Support…

    Oracle WebLogic Server
    KEV Jun 3, 2024
  • Critical 9.8
    CVE-2016-1555 Exploited Public exploit EPSS 98%

    (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgea…

    KEV Mar 25, 2022
  • High 7.8
    CVE-2017-0199 Exploited · Ransomware Public exploit EPSS 99%

    Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windo…

    Microsoft Office/WordPad
    KEV Nov 3, 2021
  • High 8.8
    CVE-2017-6884 Exploited · Ransomware Public exploit EPSS 33%

    A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vu…

    KEV Sep 18, 2023
  • Critical 9.8
    CVE-2017-7269 Exploited Public exploit EPSS 100%

    Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 i…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2017-3881 Exploited Public exploit EPSS 99%

    A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software c…

    iOS
    KEV Mar 25, 2022
  • High 7.8
    CVE-2017-0101 Exploited · Ransomware Public exploit EPSS 57%

    The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows …

    Microsoft Windows Windows
    KEV Mar 15, 2022
  • High 7.5
    CVE-2017-0147 Exploited · Ransomware Public exploit EPSS 100%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV May 24, 2022
  • High 8.1
    CVE-2017-0148 Exploited · Ransomware Public exploit EPSS 99%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV Apr 6, 2022
  • Medium 4.3
    CVE-2017-0059 Exploited Public exploit EPSS 62%

    Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via…

    Microsoft Internet Explorer
    KEV Mar 28, 2022
  • High 8.8
    CVE-2017-0143 Exploited · Ransomware Public exploit EPSS 93%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV Nov 3, 2021
  • High 8.8
    CVE-2017-0144 Exploited · Ransomware Public exploit EPSS 99%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV Feb 10, 2022
  • High 8.8
    CVE-2017-0145 Exploited · Ransomware Public exploit EPSS 90%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV Feb 10, 2022
  • High 7.8
    CVE-2017-0005 Exploited Public exploit EPSS 11%

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; …

    Microsoft Windows GDI+ Windows
    KEV May 24, 2022
  • High 8.8
    CVE-2017-0146 Exploited · Ransomware Public exploit EPSS 90%

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…

    Microsoft Windows SMB Windows
    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2017-5638 Exploited · Ransomware Public exploit EPSS 100%

    Apache Struts vulnerable to remote arbitrary command execution due to improper input validation

    The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted …

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven
    KEV Nov 3, 2021
  • High 8.8
    CVE-2017-6334 Exploited Public exploit EPSS 73%

    dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute a…

    KEV Mar 25, 2022
  • High 8.1
    CVE-2017-0037 Exploited Public exploit EPSS 80%

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuild…

    Microsoft Internet Browser
    KEV Mar 28, 2022
  • Critical 9.8
    CVE-2017-6077 Exploited Public exploit EPSS 69%

    ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitr…

    KEV Mar 7, 2022
  • Critical 9.8
    CVE-2016-10174 Exploited Public exploit EPSS 83%

    The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.c…

    KEV Mar 25, 2022
  • High 8.1
    CVE-2017-5521 Exploited Public exploit EPSS 89%

    An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, …

    KEV Sep 8, 2022
  • Critical 9.8
    CVE-2016-10033 Exploited Public exploit EPSS 100%

    Remote code execution in PHPMailer

    The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted Sender property.

    phpmailer/phpmailer libphp-phpmailer libphp-phpmailer php-phpmailer Debian Ubuntu Alpine Packagist
    KEV Jul 7, 2025
  • High 8.8
    CVE-2016-6277 Exploited Public exploit EPSS 100%

    NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.…

    KEV Mar 7, 2022
  • High 7.0
    CVE-2016-5195 Exploited Public exploit EPSS 84%

    Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by le…

    linux-raspi2 linux linux linux-lts-xenial Debian Ubuntu
    KEV Mar 3, 2022