| CVE-2016-7262 Known exploited | High 7.8 | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary comm… Assigned by microsoft | Dec 20, 2016 |
| CVE-2016-10033 Known exploited | Critical 9.8 | The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (ba… Assigned by mitre | Dec 30, 2016 |
| CVE-2017-5521 Known exploited | High 8.1 | An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. Assigned by mitre | Jan 17, 2017 |
| CVE-2016-5198 Known exploited | High 8.8 | V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to… Assigned by Chrome | Jan 19, 2017 |
| CVE-2016-10174 Known exploited | Critical 9.8 | The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. Assigned by mitre | Jan 30, 2017 |
| CVE-2017-6077 Known exploited | Critical 9.8 | ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POS… Assigned by mitre | Feb 22, 2017 |
| CVE-2017-0037 Known exploited | High 8.1 | Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allow… Assigned by microsoft | Feb 26, 2017 |
| CVE-2017-6334 Known exploited | High 8.8 | dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP… Assigned by mitre | Mar 6, 2017 |
| CVE-2017-5638 Known exploited | Critical 9.8 | The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows r… Assigned by apache | Mar 11, 2017 |
| CVE-2017-0149 Known exploited | High 8.8 | Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corrup… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0148 Known exploited Healthcare | High 8.1 | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0147 Known exploited Healthcare | High 7.5 | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0146 Known exploited Healthcare | High 8.8 | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0145 Known exploited Healthcare | High 8.8 | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0144 Known exploited Healthcare | High 8.8 | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0143 Known exploited Healthcare | High 8.8 | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607;… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0101 Known exploited | High 7.8 | The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1; Windows 10… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0059 Known exploited | Medium 4.3 | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0022 Known exploited | Medium 6.5 | Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0005 Known exploited | High 7.8 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-0001 Known exploited | High 7.8 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gol… Assigned by microsoft | Mar 17, 2017 |
| CVE-2017-3881 Known exploited | Critical 9.8 | A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected… Assigned by cisco | Mar 17, 2017 |
| CVE-2017-7269 Known exploited | Critical 9.8 | Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary… Assigned by mitre | Mar 27, 2017 |
| CVE-2014-3931 Known exploited | Critical 9.8 | fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption. Assigned by mitre | Mar 31, 2017 |
| CVE-2017-6884 Known exploited | High 8.8 | A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. Assigned by mitre | Apr 6, 2017 |
| CVE-2016-8735 Known exploited | Critical 9.8 | Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an att… Assigned by apache | Apr 6, 2017 |
| CVE-2017-0210 Known exploited | High 8.8 | An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject i… Assigned by microsoft | Apr 12, 2017 |
| CVE-2017-0199 Known exploited Healthcare | High 7.8 | Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote a… Assigned by microsoft | Apr 12, 2017 |
| CVE-2016-1555 Known exploited | Critical 9.8 | (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and W… Assigned by certcc | Apr 21, 2017 |
| CVE-2017-3506 Known exploited | High 7.4 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Assigned by oracle | Apr 24, 2017 |
| CVE-2017-5030 Known exploited | High 8.8 | Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a… Assigned by Chrome | Apr 24, 2017 |
| CVE-2017-8291 Known exploited | High 7.8 | Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an in… Assigned by mitre | Apr 27, 2017 |
| CVE-2017-3066 Known exploited | Critical 9.8 | Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Assigned by adobe | Apr 27, 2017 |
| CVE-2017-5689 Known exploited | Critical 9.8 | An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). Assigned by intel | May 2, 2017 |
| CVE-2017-7921 Known exploited | Critical 9.8 | An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2x… Assigned by icscert | May 6, 2017 |
| CVE-2017-0263 Known exploited | High 7.8 | The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Se… Assigned by microsoft | May 12, 2017 |
| CVE-2017-0262 Known exploited | High 7.8 | Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution… Assigned by microsoft | May 12, 2017 |
| CVE-2017-0261 Known exploited | High 7.8 | Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution… Assigned by microsoft | May 12, 2017 |
| CVE-2017-0222 Known exploited | High 8.8 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017… Assigned by microsoft | May 12, 2017 |
| CVE-2017-0213 Known exploited | High 7.3 | Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, an… Assigned by microsoft | May 12, 2017 |
| CVE-2017-8540 Known exploited | High 7.8 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… Assigned by microsoft | May 26, 2017 |
| CVE-2017-6862 Known exploited | Critical 9.8 | NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buffer overflow that us… Assigned by netgear | May 26, 2017 |
| CVE-2017-7494 Known exploited | Critical 9.8 | Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and the… Assigned by redhat | May 30, 2017 |
| CVE-2016-7836 Known exploited | Critical 9.8 | SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program. Assigned by jpcert | Jun 9, 2017 |
| CVE-2017-8543 Known exploited | Critical 9.8 | Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012… Assigned by microsoft | Jun 15, 2017 |
| CVE-2017-8464 Known exploited | High 8.8 | Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows S… Assigned by microsoft | Jun 15, 2017 |
| CVE-2017-9841 Known exploited | Critical 9.8 | Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by… Assigned by mitre | Jun 27, 2017 |
| CVE-2017-9248 Known exploited | Critical 9.8 | Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKe… Assigned by mitre | Jul 3, 2017 |
| CVE-2017-9791 Known exploited | Critical 9.8 | The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage. Assigned by apache | Jul 10, 2017 |
| CVE-2017-8570 Known exploited | High 7.8 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". Assigned by microsoft | Jul 11, 2017 |
