6998 matches found
CVE-2017-11810
creationtimestamp| type| source ---|---|--- 2017-11-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43131 2017-12-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=248...
CVE-2017-16642
creationtimestamp| type| source ---|---|--- 2017-11-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43133...
MongoDB DoS Vulnerability (Oct 2017) - Windows
MongoDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if...
roundcube -- file disclosure vulnerability
MITRE reports: Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target syst...
CVE-2017-16513
creationtimestamp| type| source ---|---|--- 2017-11-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43115...
ZyXEL Modems Backup Account and Default Root Credentials (Telnet)
ZyXEL PK5001Z and C1100Z modems have default root credentials set and a backdoor account with hardcoded credentials. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
VulnCheck KEV: CVE-2024-12847
NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been exploited in the wild...
CVE-2017-10309
creationtimestamp| type| source ---|---|--- 2017-10-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43103...
Oracle FCDB <= 10.5 Cross Site Scripting Vulnerability
Exploit for multiple platform in category remote exploits Title: Cross Site Scripting - Oracle Flex cube Direct Banking Application 10.5 Application: Oracle FCDB Versions Affected: Oracle Flex cube Direct Banking Software 10.5 Note: The payload will bypass the most of the WAFs running behind the...
Juniper Junos Space < 17.1R1 Multiple Vulnerabilities (JSA10826)
According to its self-reported version number, the version of Junos Space running on the remote device is 17.1R1, and is therefore affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104100; scriptversion"1.7";...
CVE-2017-7783
creationtimestamp| type| source ---|---|--- 2017-10-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43020...
CVE-2017-15595
creationtimestamp| type| source ---|---|--- 2017-10-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43014...
Adobe Flash Player <= 27.0.0.159 Type Confusion Vulnerability (APSB17-32)
The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 27.0.0.159. It is, therefore, affected by an unspecified type confusion flaw that is caused by input not being properly validated. An unauthenticated, remote attacker can exploit this, by convincin...
Lenovo Quietly Patches Massive Bug Impacting Its Android Tablets and Zuk, Vibe Phones
Security experts are urging Lenovo customers to update their Android tablets and handsets to protect themselves against a handful of critical vulnerabilities impacting tens of millions of vulnerable Lenovo devices. On Oct. 5, Lenovo quietly rolled out four patches impacting all of its Android...
CVE-2017-11823
creationtimestamp| type| source ---|---|--- 2017-10-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42997...
CVE-2017-7115
creationtimestamp| type| source ---|---|--- 2017-10-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42996...
CVE-2017-11802
creationtimestamp| type| source ---|---|--- 2017-10-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43000...
CVE-2017-11785
creationtimestamp| type| source ---|---|--- 2017-10-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43001...