Browse CVEs

HIGH 8.8 CVE-2017-6744 KEVEPSS 7% The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen… iOS Mitigation only Fix from $1,9502017-07-17 HIGH 8.8 CVE-2017-6743 KEVEPSS 11% The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen… iOS after 15.6 Fix from $1,9502017-07-17 HIGH 8.8 CVE-2017-6742 KEVEPSS 21% A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely e… iOS after 15.6 Fix from $1,9502017-07-17 HIGH 8.8 CVE-2017-6740 KEVEPSS 11% The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen… iOS after 15.6 Fix from $1,9502017-07-17 HIGH 8.8 CVE-2017-6739 KEVEPSS 11% A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely e… iOS after 15.6 Fix from $1,9502017-07-17 HIGH 8.8 CVE-2017-6738 KEVEPSS 11% The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen… iOS after 15.6 Fix from $1,9502017-07-17 HIGH 8.8 CVE-2017-6737 KEVEPSS 43% A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely e… iOS after 15.6 Fix from $1,9502017-07-17 HIGH 8.8 CVE-2017-6736 KEVEPSS 71% The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen… iOS after 15.6 Fix from $1,9502017-07-17 HIGH 7.8 CVE-2017-8570 KEVEPSS 86% Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Exe… Office Patch available Fix from $1,9502017-07-11 CRITICAL 9.8 CVE-2017-9791 KEVEPSS 99% The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the Act… Struts Patch available Fix from $2,3002017-07-10 CRITICAL 9.8 CVE-2017-9248 KEVEPSS 75% Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web… Sitefinity 10.0.6412.0+ Fix from $2,3002017-07-03 CRITICAL 9.8 CVE-2017-9841 KEVEPSS 100% Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginn… Phpunit 5.6.3+ Fix from $2,3002017-06-27 CRITICAL 9.8 CVE-2017-8543 KEVEPSS 65% Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, W… Windows 10 1507 Patch available Fix from $2,3002017-06-15 HIGH 8.8 CVE-2017-8464 KEVEPSS 89% Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1… Windows 10 1511 Patch available Fix from $1,9502017-06-15 CRITICAL 9.8 CVE-2016-7836 KEVEPSS 19% SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the mana… Skysea Client View after 11.221.03 Fix from $2,3002017-06-09 CRITICAL 9.8 CVE-2017-7494 KEVEPSS 99% Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to up… Debian Linux 4.4.0 / 4.4.14+ Fix from $2,3002017-05-30 HIGH 7.8 CVE-2017-8540 KEVEPSS 72% The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Window… Malware Protection Engine 1.1.13704.0+ Fix from $1,9502017-05-26 CRITICAL 9.8 CVE-2017-6862 KEVEPSS 43% NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and r… Wnr2000 Firmware 1.0.0.42 / 1.0.0.66+ Fix from $2,3002017-05-26 HIGH 7.8 CVE-2017-0263 KEVEPSS 10% The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,… Windows 10 1507 Patch available Fix from $1,9502017-05-12 HIGH 7.8 CVE-2017-0262 KEVEPSS 81% Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle ob… Office Patch available Fix from $1,9502017-05-12 HIGH 7.8 CVE-2017-0261 KEVEPSS 78% Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle ob… Office Patch available Fix from $1,9502017-05-12 HIGH 8.8 CVE-2017-0222 KEVEPSS 30% A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption V… Internet Explorer Patch available Fix from $1,9502017-05-12 HIGH 7.3 CVE-2017-0213 KEVEPSS 84% Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows… Windows 10 1507 Patch available Fix from $1,9502017-05-12 CRITICAL 9.8 CVE-2017-7921 KEVEPSS 100% An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5… Ds 2cd2032 I Firmware Patch available Fix from $2,3002017-05-06 CRITICAL 9.8 CVE-2017-5689 KEVEPSS 92% An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and I… Proliant Ml10 Gen9 Server Firmware 6.2.61.3535 / 9.1.41.3024+ Fix from $2,3002017-05-02 CRITICAL 9.8 CVE-2017-3066 KEVEPSS 91% Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vuln… Coldfusion Patch available Fix from $2,3002017-04-27 HIGH 7.8 CVE-2017-8291 KEVEPSS 96% Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" … Debian Linux 9.21+ Fix from $1,9502017-04-27 HIGH 8.8 CVE-2017-5030 KEVEPSS 42% Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed … Chrome 57.0.2987.98 / 57.0.2987.108+ Fix from $1,9502017-04-24 HIGH 7.4 CVE-2017-3506 KEVEPSS 96% Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected … Weblogic Server Patch available Fix from $1,9502017-04-24 CRITICAL 9.8 CVE-2016-1555 KEVEPSS 98% (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802… Wnap320 Firmware after 3.3.2 Fix from $2,3002017-04-21