Week 45, 2017

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2015-7501 Deserialization of Untrusted Data in Apache commons collections
  EPSS 86%
• Critical 9.8
  CVE-2017-2894 An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE …

  Cesanta Software · mongoose

  EPSS 31%
• Critical 9.8
  CVE-2017-16763 Unsafe deserialization in confire
  EPSS 4.5%
• Critical 9.8
  CVE-2017-16618 Unsafe deserialization in owlmixin
  EPSS 4.5%
• Critical 9.8
  CVE-2015-3933 MetalGenix GeniXCMS vulnerable to SQL Injection
  EPSS 3.8%
• Critical 9.8
  CVE-2017-16616 Unsafe pyyaml load usage in PyAnyAPI
  EPSS 3.6%
• Critical 9.8
  CVE-2017-16764 django_make_app is vulnerable to Code Injection
  EPSS 3.5%
• Critical 9.8
  CVE-2017-16615 Unsafe deserialization in MLAlchemy
  EPSS 3.4%
• Critical 9.9
  CVE-2017-2917 An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can caus…

  Circle Media · Circle

  EPSS 3.2%
• Critical 9.9
  CVE-2017-2866 An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted network packets can cause an OS command in…

  Circle Media · Circle

  EPSS 3.1%
• Critical 9.8
  CVE-2017-2892 An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can…

  Cesanta Software · mongoose

  EPSS 3%
• Critical 9.8
  CVE-2017-2891 An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target c…

  Cesanta Software · mongoose

  EPSS 2.8%
• Critical 9.9
  CVE-2017-2890 An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets ca…

  Circle Media · Circle

  EPSS 2.6%
• Critical 9.8
  CVE-2017-2922 An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet ca…

  Cesanta Software · mongoose

  EPSS 2.6%
• Critical 9.0
  CVE-2017-2883 An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can ca…

  Circle Media · Circle

  EPSS 2.4%

All 24 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2017-11512 The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the…

  Zoho · ManageEngine ServiceDesk

  EPSS 80%
• Unscored
  CVE-2017-16249 The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until …
  EPSS 59%
• High 7.8
  CVE-2017-16651 Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including c…
  EPSS 46%
• Unscored
  CVE-2017-16524 Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_upload.php' allows remote authenticated …
  EPSS 30%
• Unscored
  CVE-2017-16562 The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote attackers to bypass authentication and obtain ad…
  EPSS 27%
• Unscored
  CVE-2017-16642 In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' direct…
  EPSS 26%
• High 7.5
  CVE-2017-2893 An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE packet can cau…

  Cesanta Software · mongoose

  EPSS 25%
• Unscored
  CVE-2017-14016 A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The application lacks proper validation of the lengt…
  EPSS 16%