CVE-2017-20211 UCanCode E-XD++ Visualization Enterprise Suite Untrusted Pointer Dereference RCE

UCanCode E-XD++ Visualization Enterprise Suite contains an untrusted pointer dereference vulnerability via the TKDRAWCAD.TKDrawCADCtrl.1 ActiveX control. This is because it exposes a RotateShape method that dereferences a user-supplied pointer without sufficient validation. A crafted input may...

An Explainable Recursive Feature Elimination to Detect Advanced Persistent Threats Using Random Forest Classifier

Intrusion Detection Systems IDS play a vital role in modern cybersecurity frameworks by providing a primary defense mechanism against sophisticated threat actors. In this paper, we propose an explainable intrusion detection framework that integrates Recursive Feature Elimination RFE with Random...

Ubuntu: Security Advisory (USN-7868-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KB5068402 - Description of the security update for SQL Server 2017 CU31: November 11, 2025

None None...

KB5068403 - Description of the security update for SQL Server 2017 GDR: November 11, 2025

None None...

Microsoft SQL Server SQL注入漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation USA that is applied under the Microsoft Windows system. A SQL injection vulnerability exists in Microsoft SQL Server. An attacker can exploit the vulnerability to elevate privileges. The following products and...

USN-7868-1 raptor vulnerabilities

Hanno Böck discovered that Raptor incorrectly handled memory operations when processing certain input files. An attacker could use this issue to cause Raptor to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-18926 Hanno Böck discovered that Raptor incorrectl...

CVE-2017-20209

Nagios Fusion versions prior to 4.0.1 are vulnerable to cross-site scripting XSS via the Users and Servers pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser...

CVE-2017-100000

creationtimestamp| type| source ---|---|--- 2025-10-23 21:12:58+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

Brother DCP-J132W Printers Denial of Service (CVE-2017-12568)

Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W and probably other DCP models allows remote attackers to hang the printer disrupting its network connection by sending a large amount of HTTP packets. This plugin only works with Tenable.ot. Please visit...

Brother MFC-J960DWN Printers Cross-site Request Forgery (CVE-2017-2244)

Cross-site request forgery CSRF vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

CVE-2017-20207

creationtimestamp| type| source ---|---|--- 2025-10-21 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4arzrp2w 2026-06-19 12:45:23+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ac11df37-e20a-47eb-ba85-4fedbb451cbb...

CVE-2017-20206

creationtimestamp| type| source ---|---|--- 2025-10-21 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4ape3t2a 2026-06-19 12:45:23+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f7121e36-8047-4968-aad2-dfed5fe9290b...

CVE-2017-10986

creationtimestamp| type| source ---|---|--- 2025-10-21 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4amqdn26...

VulnCheck KEV: CVE-2017-10986

An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcpattr2vp" and a denial of service...

CVE-2017-20206

The Appointments plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.2.1 via deserialization of untrusted input from the wpmudevappointments cookie. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this...

CVE-2017-12155 vulnerabilities

Vulnerabilities for packages: ceph...

CVE-2017-2000

creationtimestamp| type| source ---|---|--- 2025-10-16 10:07:29+00:00| seen| https://gist.github.com/Ivane120585/a7e2328c844469629074648636f8e065...

Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server

PoC exploit for CVE-2017-10271, a remote code execution vulnerab...

Multiple RSUPPORT products may insecurely load Dynamic Link Libraries

Overview Multiple RSUPPORT products contain multiple vulnerabilities listed below. RemoteView PC Application Console vulnerable to uncontrolled search path element CWE-427 - CVE-2025-26859 RemoteCall Remote Support Program for Operator vulnerable to uncontrolled search path element CWE-427 -...