9052 vulnerabilidades · General Orden: CVSS EPSS Año ID
CVE-2017-8570
🔥 KEV Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, and Microsoft Office 2016. General
7.8
HIGH
EPSS
94.2%
2017 6 PoCs

Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0243.

Scanner Automatizado
Sin template local disponible
CVE-2017-8759
🔥 KEV Microsoft .NET Framework General
7.8
HIGH
EPSS
94.0%
2017 16 PoCs

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."

Scanner Automatizado
Sin template local disponible
CVE-2017-7961
Software Genérico General
7.8
HIGH
EPSS
0.9%
2017 3 PoCs

The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted CSS file. NOTE: third-party analysis reports "This is not a security issue in my view. The conversion surely is truncating the double into a long value, but there is no impact as the value is one of the RGB components.

Scanner Automatizado
Sin template local disponible
CVE-2017-18822
Software Genérico General
7.8
HIGH
EPSS
0.1%
2017 1 PoC

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15.

Scanner Automatizado
Sin template local disponible
CVE-2017-18830
Software Genérico General
7.8
HIGH
EPSS
0.0%
2017 1 PoC

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15.

Scanner Automatizado
Sin template local disponible
CVE-2017-8291
🔥 KEV Software Genérico General
7.8
HIGH
EPSS
92.9%
2017 4 PoCs

Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.

Scanner Automatizado
Sin template local disponible
CVE-2017-18829
Software Genérico General
7.8
HIGH
EPSS
0.0%
2017 1 PoC

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15.

Scanner Automatizado
Sin template local disponible
CVE-2017-18826
Software Genérico General
7.8
HIGH
EPSS
0.1%
2017 1 PoC

Certain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X before 12.0.2.15, M4300-48X before 12.0.2.15, and M4200 before 12.0.2.15.

Scanner Automatizado
Sin template local disponible
CVE-2017-16651
🔥 KEV Software Genérico General
7.8
HIGH
EPSS
37.3%
2017 3 PoCs

Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, as exploited in the wild in November 2017. The attacker must be able to authenticate at the target system with a valid username/password as the attack requires an active session. The issue is related to file-based attachment plugins and _task=settings&_action=upload-display&_from=timezone requests.

Scanner Automatizado
Sin template local disponible
CVE-2012-6442
1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules General
7.8
UNKNOWN
EPSS
10.3%
2012 CWE-284 1 PoC

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the product to reset, a DoS can occur. This situation could cause loss of availability and a disruption of communication with other connected devices. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLogix 18 and earlier; CompactLogix 18 a

Scanner Automatizado
Sin template local disponible
CVE-2012-0014
Software Genérico General
7.8
HIGH
EPSS
52.3%
2012 1 PoC

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."

Scanner Automatizado
Sin template local disponible
CVE-2012-6438
1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules General
7.8
UNKNOWN
EPSS
13.4%
2012 CWE-119 1 PoC

The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates a buffer overflow and causes the NIC to crash. Successful exploitation of this vulnerability could cause loss of availability and a disruption in communications with other connected devices. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O Ethe

Scanner Automatizado
Sin template local disponible
CVE-2012-6436
1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules General
7.8
UNKNOWN
EPSS
13.4%
2012 CWE-119 1 PoC

The device does not properly validate the data being sent to the buffer. An attacker can send a malformed CIP packet to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP, which creates a buffer overflow and causes the CPU to crash. Successful exploitation of this vulnerability could cause loss of availability and a disruption in communications with other connected devices. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O Et

Scanner Automatizado
Sin template local disponible
CVE-2012-6435
1756-ENBT, 1756-EWEB, 1768-ENBT, 1768-EWEB communication modules General
7.8
UNKNOWN
EPSS
7.0%
2012 CWE-284 1 PoC

When an affected product receives a valid CIP message from an unauthorized or unintended source to Port 2222/TCP, Port 2222/UDP, Port 44818/TCP, or Port 44818/UDP that instructs the CPU to stop logic execution and enter a fault state, a DoS can occur. This situation could cause loss of availability and a disruption of communication with other connected devices. Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/O EtherNet/IP adapter; ControlLo

Scanner Automatizado
Sin template local disponible
CVE-2025-24379
Unity General
7.8
HIGH
EPSS
0.2%
2025 CWE-78 1 PoC

Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privileges.

Scanner Automatizado
Sin template local disponible
CVE-2025-47176
Microsoft 365 Apps for Enterprise General
7.8
HIGH
EPSS
1.2%
2025 CWE-35 1 PoC

'.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally.

Scanner Automatizado
Sin template local disponible
CVE-2025-29625
Software Genérico General
7.8
HIGH
EPSS
0.2%
2025 1 PoC

A buffer overflow vulnerability in Astrolog v7.70 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via an overly long environment variable passed to FileOpen function.

Scanner Automatizado
Sin template local disponible
CVE-2025-24243
iOS and iPadOS General
7.8
HIGH
EPSS
0.0%
2025 4 PoCs

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted file may lead to arbitrary code execution.

Scanner Automatizado
Sin template local disponible
CVE-2025-41244
🔥 KEV VCF operations General
7.8
HIGH
EPSS
0.6%
2025 CWE-267 3 PoCs

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

Scanner Automatizado
Sin template local disponible
CVE-2025-0835
Graphics DDK General
7.8
HIGH
EPSS
0.1%
2025 CWE-416 1 PoC

Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.

Scanner Automatizado
Sin template local disponible