Week 5, 2017
30 January – 5 February 2017
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
-
Unscored
CVE-2016-10176 The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special U…EPSS 77%
-
Unscored
CVE-2016-10175 The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number allows a user to obtain…EPSS 66%
-
Unscored
CVE-2016-6267 SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to e…EPSS 55%
-
Unscored
CVE-2017-3823 An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the…EPSS 27%
-
Unscored
CVE-2016-2518 The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer reque…EPSS 15%
- High 7.5 EPSS 13%
-
Unscored
CVE-2015-7979 NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast pack…EPSS 12%
-
Unscored
CVE-2017-5611 SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands b…EPSS 10%
Advisories
- Debian Security (DSA / DLA) 17
- SUSE / openSUSE Security Updates 161 critical
- Ubuntu Security Notices (USN) 10
- CISA ICS & IT advisories 31 critical
- Oracle Linux Security Advisories (ELSA) 3
- BSI CERT-Bund (WID) 2
- ICSA-17-031-01A BINOM3 Electric Power Quality Meter (Update A) 5 CVEs
- SUSE-SU-2017:0380-1 Security update for libxml2 3 CVEs