Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-28 23:45Z
2017-03-17
2017-03-17 00:59Z
HIGH

CVE-2017-0087 — Microsoft Windows_7: Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-0087

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0072, CVE-2017-0083, CVE-2017-0084, CVE-2017-0086, CVE-2017-0088, CVE-2017-0089, and CVE-2017-0090. CVSSv3.1 8.8 (HIGH)

CWECWE 119VNDMicrosoftVNDUniscribeTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2017-03-17
2017-03-17 00:59Z
HIGH

CVE-2017-0086 — Microsoft Windows_7: Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-0086

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0072, CVE-2017-0083, CVE-2017-0084, CVE-2017-0087, CVE-2017-0088, CVE-2017-0089, and CVE-2017-0090. CVSSv3.1 8.8 (HIGH)

CWECWE 119VNDMicrosoftVNDUniscribeTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2017-03-17
2017-03-17 00:59Z
HIGH

CVE-2017-0084 — Microsoft Windows_10: Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-0084

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0072, CVE-2017-0083, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088, CV CVSSv3.1 8.8 (HIGH)

CWECWE 119VNDMicrosoftVNDUniscribeTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2017-03-17
2017-03-17 00:59Z
HIGH

CVE-2017-0083 — Microsoft Windows_7: Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-0083

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0072, CVE-2017-0084, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088, CVE-2017-0089, and CVE-2017-0090. CVSSv3.1 8.8 (HIGH)

CWECWE 119VNDMicrosoftVNDUniscribeTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2017-03-17
2017-03-17 00:59Z
HIGH

CVE-2017-0072 — Microsoft Windows_7: Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-0072

Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0083, CVE-2017-0084, CVE-2017-0086, CVE-2017-0087, CVE-2017-0088, CVE-2017-0089, and CVE-2017-0090. CVSSv3.1 8.8 (HIGH)

CWECWE 119VNDMicrosoftVNDUniscribeTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2017-03-17
2017-03-17 00:59Z
CRIT

CVE-2017-0021 — Microsoft Windows_10: Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016 does not properly validate

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-0021

Hyper-V in Microsoft Windows 10 1607 and Windows Server 2016 does not properly validate vSMB packet data, which allows attackers to execute arbitrary code on a target OS, aka "Hyper-V System Data Structure Vulnerability." This vulnerability is different from that described in CVE-2017-0095. CVSSv3.1 9.0 (CRITICAL)

VNDMicrosoftVNDHyperTYPVulnerability
9.0
CVSS v3.1
95
Edit Score
2017-03-16
2017-03-16 21:59Z
HIGH

CVE-2017-6952 — Capstone-engine Capstone: Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-6952

Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecified other impact via a large value. CVSSv3.1 8.8 (HIGH)

CWECWE 190VNDCapstone EngineTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
728 × 90 / responsive · programmatic ad slot
2017-03-16
2017-03-16 17:59Z
HIGH

CVE-2017-6949 — Call-cc Chicken: With an unexpected size, the impact may have been a segfault or buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-6949

An issue was discovered in CHICKEN Scheme through 4.12.0. When using a nonstandard CHICKEN-specific extension to allocate an SRFI-4 vector in unmanaged memory, the vector size would be used in unsanitised form as an argument to malloc(). With an unexpected size, the impact may have been a segfault or buffer overflow. CVSSv3.1 8.1 (HIGH)

CWECWE 119VNDCall CcVNDChickenTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2017-03-16
2017-03-16 15:59Z
CRIT

CVE-2015-8981 — Podofo_project Podofo: Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2015-8981

Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to m_offsets.size. CVSSv3.1 9.8 (CRITICAL)

CWECWE 119VNDHeapVNDPodofo ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-03-16
2017-03-16 14:59Z
HIGH

CVE-2017-6381 — Drupal Drupal: A 3rd party development library including with Drupal 8 development dependencies is vulnerable to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-6381

A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection against PHP execution, and the fact that Composer development dependencies aren't normal installed. You might be vulnerable to this if you are running a version of Drupal before 8.2.2. To be sure you aren't vulnerable, you can remove the <siteroot>/vendor/phpunit directory from your production deployment CVSSv3.1 8.1 (HIGH)

CWECWE 829VNDDrupalTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2017-03-16
2017-03-16 04:59Z
CRIT

CVE-2017-6023 — Fatek Ethernet_module_configuration_tool_cbe_firmware: A stack-based buffer overflow vulnerability has been identified, which may allow remote code execution

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-6023

An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to V3.6 Build 170215, CBE versions prior to V3.6 Build 170215, CM55E versions prior to V3.6 Build 170215, and CM25E versions prior to V3.6 Build 170215. A stack-based buffer overflow vulnerability has been identified, which may allow remote code execution or crash the affected device. CVSSv3.1 9.8 (CRITICAL)

CWECWE 121CWECWE 119VNDFatekTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-03-15
2017-03-15 20:59Z
HIGH

CVE-2017-3854 — Cisco Wireless_lan_controller_firmware: A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3854

A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an unauthenticated, remote attacker to impersonate a WLC in a meshed topology. The vulnerability is due to insufficient authentication of the parent access point in a mesh configuration. An attacker could exploit this vulnerability by forcing the target system to disconnect from the correct parent access point and reconnect to a rogue access point owned by the attacker. An exploit cou CVSSv3.1 8.8 (HIGH)

CWECWE 287VNDCiscoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2017-03-15
2017-03-15 20:59Z
HIGH

CVE-2017-3846 — Cisco Tidal_enterprise_scheduler: A vulnerability in the Client Manager Server of Cisco Workload Automation and Cisco Tidal

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3846

A vulnerability in the Client Manager Server of Cisco Workload Automation and Cisco Tidal Enterprise Scheduler could allow an unauthenticated, remote attacker to retrieve any file from the Client Manager Server. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted URL to the Client Manager Server. An exploit could allow the attacker to retrieve any file from the Cisco Workload Automation or Cisco Tidal En CVSSv3.1 8.6 (HIGH)

CWECWE 20VNDCiscoTYPVulnerability
8.6
CVSS v3.1
93
Edit Score
2017-03-15
2017-03-15 20:59Z
CRIT

CVE-2017-3831 — Cisco Aironet_access_point_software: A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3831

A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges. The vulnerability is due to improper implementation of authentication for accessing certain web pages using the GUI interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web interface of the affected system. A suc CVSSv3.1 9.8 (CRITICAL)

CWECWE 287CWECWE 264VNDCiscoTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-03-15
2017-03-15 20:59Z
HIGH

CVE-2017-3819 — Cisco Asr_5000_series_software: A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-3819

A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and Cisco Virtualized Packet Core could allow an authenticated, remote attacker to gain unrestricted, root shell access. The vulnerability is due to missing input validation of parameters passed during SSH or SFTP login. An attacker could exploit this vulnerability by providing crafted user input to the SS CVSSv3.1 8.8 (HIGH)

CWECWE 306CWECWE 264VNDCiscoTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2017-03-15
2017-03-15 19:59Z
CRIT

CVE-2016-5239 — Imagemagick Imagemagick: The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-5239

The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors. CVSSv3.1 9.8 (CRITICAL)

CWECWE 284VNDImagemagickTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-03-15
2017-03-15 19:59Z
HIGH

CVE-2015-8982 — Gnu Glibc: Integer overflow in the strxfrm function in the GNU C Library (aka glibc or

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2015-8982

Integer overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21 allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string, which triggers a stack-based buffer overflow. CVSSv3.1 8.1 (HIGH)

CWECWE 190VNDGnuTYPVulnerability
8.1
CVSS v3.1
91
Edit Score
2017-03-15
2017-03-15 16:59Z
CRIT

CVE-2017-5522 — Debian Debian_linux: Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-5522

Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving WFS get feature requests. CVSSv3.1 9.8 (CRITICAL)

CWECWE 119VNDStackVNDOsgeoTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-03-15
2017-03-15 16:59Z
CRIT

CVE-2016-7955 — Alienvault Ossim: The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-7955

The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain sensitive information, modify the application, or execute arbitrary code as root via an "AV Report Scheduler" HTTP User-Agent header. CVSSv3.1 9.8 (CRITICAL)

CWECWE 264VNDAlienvaultTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-03-15
2017-03-15 15:59Z
CRIT

CVE-2017-5496 — Sawmill Sawmill: Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-5496

Sawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of a password hash. CVSSv3.1 9.8 (CRITICAL)

CWECWE 200VNDSawmillTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-03-15
2017-03-15 15:59Z
CRIT

CVE-2017-5358 — Easycom-aura Easycom_for_php: Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-5358

Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbitrary code via the server argument to the (1) i5_connect, (2) i5_pconnect, or (3) i5_private_connect API function. CVSSv3.1 9.8 (CRITICAL)

CWECWE 119VNDStackVNDEasycom AuraTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-03-15
2017-03-15 15:59Z
CRIT

CVE-2016-10195 — Libevent_project Libevent: The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-10195

The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read. CVSSv3.1 9.8 (CRITICAL)

CWECWE 125VNDLibevent ProjectTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-03-15
2017-03-15 15:59Z
CRIT

CVE-2016-10166 — Libgd Libgd: Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-10166

Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable. CVSSv3.1 9.8 (CRITICAL)

CWECWE 191VNDLibgdTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2017-03-15
2017-03-15 14:59Z
HIGH

CVE-2017-6366 — Netgear Dgn2200_firmware: Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2017-6366

Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 allows remote attackers to hijack the authentication of users for requests that perform DNS lookups via the host_name parameter to dnslookup.cgi. NOTE: this issue can be combined with CVE-2017-6334 to execute arbitrary code remotely. CVSSv3.1 8.8 (HIGH)

CWECWE 352VNDNetgearVNDCsrfTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2017-03-14
2017-03-14 22:59Z
CRIT

CVE-2016-8027 — Mcafee Epolicy_orchestrator: SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2016-8027

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a specially crafted HTTP post. CVSSv3.1 10.0 (CRITICAL)

CWECWE 89VNDMcafeeTYPVulnerability
10.0
CVSS v3.1
100
Edit Score