CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

30334 matches found

Cvelist•added 2017/05/12 2:00 p.m.•37 views

CVE-2017-0278

The Microsoft Server Message Block 1.0 SMBv1 server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it...

7.8AI score0.1085EPSS

SaveExploits0References4

CVE•added 2017/05/12 2:00 p.m.•120 views

CVE-2017-0171

CVE-2017-0171 is a Windows DNS Server denial-of-service vulnerability. The affected products include Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Windows Server 2016, where the DNS service could be overwhelmed when answering version queries, leading to a denial of serv...

5.9CVSS6.2AI score0.0406EPSS

SaveExploits0References2Affected Software3

Cvelist•added 2017/05/12 2:00 p.m.•36 views

CVE-2017-0244

The kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows locally authenticated attackers to gain privileges via a crafted application, or in Windows 7 for x64-based systems, cause denial of service, aka "Windows Kernel Elevation of Privilege Vulnerability."...

7AI score0.02004EPSS

SaveExploits0References3

CVE•added 2017/05/12 2:00 p.m.•119 views

CVE-2017-0190

CVE-2017-0190 affects the GDI component in multiple Windows platforms (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607), and Windows Server 2016). The vulnerability allows remote attackers to obtain sensitive in...

4.4CVSS5.2AI score0.43458EPSS

SaveExploits0References3Affected Software7

CVE•added 2017/05/12 2:00 p.m.•107 views

CVE-2017-0274

Technical details for CVE-2017-0274 are not publicly available in the provided connected documents. The sources reference SMBv1 information disclosure generally but do not specify affected products/versions, root cause, impact, or remediation for this CVE. Monitor for updates.

5.9CVSS6.1AI score0.0704EPSS

SaveExploits0References3Affected Software7

CVE•added 2017/05/12 2:00 p.m.•1420 views

CVE-2017-0213

CVE-2017-0213 is a Windows privilege-escalation flaw in the COM Aggregate Marshaler that can be triggered by a specially crafted application to gain elevated privileges locally. Public documentation confirms affected OS ranges including Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, ...

7.3CVSS5.9AI score0.84138EPSS

SaveIn wildExploits14References5Affected Software10

seebug.org•added 2017/05/12 12:00 a.m.•2637 views

Microsoft IIS Server XSS Vulnerability(CVE-2017-0055)

During a penetration test against the infrastructure of one of our clients we discovered a reflected Cross Site Scripting/HTML injection vulnerability in Microsoft Internet Information Services web server. The vulnerability could be exploited, with the help of user interaction, to inject javascri...

4.3CVSS7.1AI score0.16369EPSS

SaveExploits2