| CVE-2017-6744 Known exploited | High 8.8 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code… Assigned by cisco | Jul 17, 2017 |
| CVE-2017-6743 Known exploited | High 8.8 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code… Assigned by cisco | Jul 17, 2017 |
| CVE-2017-6742 Known exploited | High 8.8 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. Assigned by cisco | Jul 17, 2017 |
| CVE-2017-6740 Known exploited | High 8.8 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code… Assigned by cisco | Jul 17, 2017 |
| CVE-2017-6739 Known exploited | High 8.8 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. Assigned by cisco | Jul 17, 2017 |
| CVE-2017-6738 Known exploited | High 8.8 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code… Assigned by cisco | Jul 17, 2017 |
| CVE-2017-6737 Known exploited | High 8.8 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. Assigned by cisco | Jul 17, 2017 |
| CVE-2017-6736 Known exploited | High 8.8 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code… Assigned by cisco | Jul 17, 2017 |
| CVE-2017-6316 Known exploited | Critical 9.8 | Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. Assigned by mitre | Jul 20, 2017 |
| CVE-2017-9822 Known exploited | High 8.8 | DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites." Assigned by hpe | Jul 20, 2017 |
| CVE-2017-6663 Known exploited | Medium 6.5 | A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to… Assigned by cisco | Aug 7, 2017 |
| CVE-2017-12637 Known exploited | High 7.5 | Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers to read arbitrary files via a .. Assigned by mitre | Aug 7, 2017 |
| CVE-2015-2291 Known exploited | High 7.8 | (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code… Assigned by mitre | Aug 9, 2017 |
| CVE-2017-6327 Known exploited | High 8.8 | The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely… Assigned by symantec | Aug 11, 2017 |
| CVE-2017-11357 Known exploited | Critical 9.8 | Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary c… Assigned by mitre | Aug 23, 2017 |
| CVE-2017-11317 Known exploited | Critical 9.8 | Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or… Assigned by mitre | Aug 23, 2017 |
| CVE-2017-6627 Known exploited | High 7.5 | A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue of an affected syste… Assigned by cisco | Sep 7, 2017 |
| CVE-2017-8759 Known exploited | High 7.8 | Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Executio… Assigned by microsoft | Sep 13, 2017 |
| CVE-2017-9805 Known exploited | High 8.1 | The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can… Assigned by apache | Sep 15, 2017 |
| CVE-2017-12615 Known exploited | High 8.1 | When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. Assigned by apache | Sep 19, 2017 |
| CVE-2015-1187 Known exploited | Critical 9.8 | The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp. Assigned by mitre | Sep 21, 2017 |
| CVE-2017-12240 Known exploited | Critical 9.8 | The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code and gain full… Assigned by cisco | Sep 28, 2017 |
| CVE-2017-12238 Known exploited | Medium 6.5 | A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a C680… Assigned by cisco | Sep 28, 2017 |
| CVE-2017-12237 Known exploited | High 7.5 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CP… Assigned by cisco | Sep 28, 2017 |
| CVE-2017-12235 Known exploited | High 7.5 | A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an unauthenticated, remote attacker to cause an affecte… Assigned by cisco | Sep 28, 2017 |
| CVE-2017-12234 Known exploited | High 7.5 | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected devi… Assigned by cisco | Sep 28, 2017 |
| CVE-2017-12233 Known exploited | High 7.5 | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected devi… Assigned by cisco | Sep 28, 2017 |
| CVE-2017-12232 Known exploited | Medium 6.5 | A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent att… Assigned by cisco | Sep 28, 2017 |
| CVE-2017-12231 Known exploited | High 7.5 | A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause a denial of service (D… Assigned by cisco | Sep 28, 2017 |
| CVE-2017-12617 Known exploited | High 8.1 | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. Assigned by apache | Oct 3, 2017 |
| CVE-2017-1000253 Known exploited | High 7.8 | Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). Assigned by mitre | Oct 4, 2017 |
| CVE-2017-12149 Known exploited | Critical 9.8 | In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classe… Assigned by redhat | Oct 4, 2017 |
| CVE-2017-11826 Known exploited | High 7.8 | Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 2016, Word Automation… Assigned by microsoft | Oct 13, 2017 |
| CVE-2017-11774 Known exploited | High 7.8 | Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outloo… Assigned by microsoft | Oct 13, 2017 |
| CVE-2017-10271 Known exploited | High 7.5 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Assigned by oracle | Oct 19, 2017 |
| CVE-2017-11292 Known exploited | High 8.8 | Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. Assigned by adobe | Oct 21, 2017 |
| CVE-2017-5070 Known exploited | High 8.8 | Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a craft… Assigned by Chrome | Oct 27, 2017 |
| CVE-2017-16651 Known exploited | High 7.8 | Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, as exploited in the… Assigned by mitre | Nov 9, 2017 |
| CVE-2017-11882 Known exploited | High 7.8 | Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of t… Assigned by microsoft | Nov 15, 2017 |
| CVE-2017-15944 Known exploited | Critical 9.8 | Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors involving the management interf… Assigned by mitre | Dec 11, 2017 |
| CVE-2017-17562 Known exploited | High 8.1 | Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. Assigned by mitre | Dec 12, 2017 |
| CVE-2017-1000486 Known exploited | Critical 9.8 | Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution Assigned by mitre | Jan 3, 2018 |
| CVE-2018-0802 Known exploited | High 7.8 | Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in mem… Assigned by microsoft | Jan 10, 2018 |
| CVE-2018-0798 Known exploited | High 8.8 | Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in me… Assigned by microsoft | Jan 10, 2018 |
| CVE-2017-1000353 Known exploited | Critical 9.8 | Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. Assigned by mitre | Jan 29, 2018 |
| CVE-2018-4878 Known exploited | High 7.8 | A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. Assigned by adobe | Feb 6, 2018 |
| CVE-2018-0125 Known exploited | Critical 9.8 | A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and g… Assigned by cisco | Feb 8, 2018 |
| CVE-2018-6789 Known exploited | Critical 9.8 | An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. Assigned by mitre | Feb 8, 2018 |
| CVE-2018-2380 Known exploited | Medium 6.6 | SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" ar… Assigned by sap | Mar 1, 2018 |
| CVE-2018-6530 Known exploited | Critical 9.8 | OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous version… Assigned by mitre | Mar 6, 2018 |
