Exploit Intelligence Platform

Updated 12m ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

339,495 CVEs tracked 53,335 with exploits 4,748 exploited in wild 1,551 CISA KEV 3,948 Nuclei templates 49,233 vendors 42,833 researchers

111,593 results Clear all

CVE-2017-11117 5.5 MEDIUM EPSS 0.00

Openexif - Out-of-Bounds Read

The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file.

CWE-125 Jul 31, 2017

CVE-2017-11115 5.5 MEDIUM EPSS 0.00

Openexif - Memory Corruption

The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted jpg file.

CWE-119 Jul 31, 2017

CVE-2017-11114 5.5 MEDIUM EPSS 0.00

Twibright Links - Out-of-Bounds Read

The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML file.

CWE-125 Jul 31, 2017

CVE-2017-9498 5.5 MEDIUM 1 Writeup EPSS 0.00

Motorola MX011ANM/XR11-20 - Local Privilege Escalation

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, there is no protection mechanism involving digital signatures for the firmware.

CWE-354 Jul 31, 2017

CVE-2017-9497 6.8 MEDIUM 1 Writeup EPSS 0.00

Motorola MX011ANM - Command Injection

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to execute arbitrary commands as root by pulling up the diagnostics menu on the set-top box, and then posting to a Web Inspector route.

CWE-20 Jul 31, 2017

CVE-2017-9496 6.8 MEDIUM 1 Writeup EPSS 0.00

Motorola MX011ANM <MX011AN_2.9p6s1_PROD_sey - Info Disclosure

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to access an SNMP server by connecting a cable to the Ethernet port, and then establishing communication with the device's link-local IPv6 address.

CVE-2017-9495 4.6 MEDIUM 1 Writeup EPSS 0.00

Motorola MX011ANM - Info Disclosure

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to read arbitrary files by pressing "EXIT, Down, Down, 2" on an RF4CE remote to reach the diagnostic display, and then launching a Remote Web Inspector script.

CWE-200 Jul 31, 2017

CVE-2017-9494 5.3 MEDIUM 1 Writeup EPSS 0.00

Motorola MX011ANM <MX011AN_2.9p6s1_PROD_sey - RCE

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to enable a Remote Web Inspector that is accessible from the public Internet.

CWE-732 Jul 31, 2017

CVE-2017-9493 6.3 MEDIUM 1 Writeup EPSS 0.00

Motorola MX011ANM <MX011AN_2.9p6s1_PROD_sey - RCE

The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to conduct successful forced-pairing attacks (between an RF4CE remote and a set-top box) by repeatedly transmitting the same pairing code.

CVE-2017-9491 5.3 MEDIUM 1 Writeup EPSS 0.00

Cisco DPC3939-0 - Info Disclosure

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST); Cisco DPC3941T (firmware version DPC3941_2.5s3_PROD_sey); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices does not set the secure flag for cookies in an https session to an administration application, which makes it easier for remote attackers to capture these cookies by intercepting their transmission within an http session.

CWE-200 Jul 31, 2017

CVE-2017-9487 5.9 MEDIUM 1 Writeup EPSS 0.00

Comcast Cisco DPC3939-3941T - Info Disclosure

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devices allows remote attackers to discover a WAN IPv6 IP address by leveraging knowledge of the CM MAC address.

CWE-200 Jul 31, 2017

CVE-2017-9480 5.5 MEDIUM 1 Writeup EPSS 0.00

Cisco DPC3939 - Info Disclosure

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows local users (e.g., users who have command access as a consequence of CVE-2017-9479 exploitation) to read arbitrary files via UPnP access to /var/IGD/.

CWE-200 Jul 31, 2017

CVE-2017-9477 6.5 MEDIUM 1 Writeup EPSS 0.00

Comcast Cisco DPC3939 - Info Disclosure

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to discover the CM MAC address by connecting to the device's xfinitywifi hotspot.

CWE-200 Jul 31, 2017

CVE-2017-9476 6.5 MEDIUM 1 PoC Analysis EPSS 0.16

Comcast firmware - Info Disclosure

The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); and Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices makes it easy for remote attackers to determine the hidden SSID and passphrase for a Home Security Wi-Fi network.

CWE-200 Jul 31, 2017

CVE-2017-9475 5.9 MEDIUM 1 Writeup EPSS 0.01

Comcast XFINITY WiFi Home Hotspot - Info Disclosure

Comcast XFINITY WiFi Home Hotspot devices allow remote attackers to spoof the identities of Comcast customers via a forged MAC address.

CWE-287 Jul 31, 2017

CVE-2017-11755 6.5 MEDIUM EPSS 0.01

ImageMagick 7.0.6-4 - DoS

The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file that is mishandled in an AcquireSemaphoreInfo call.

CWE-772 Jul 30, 2017

CVE-2017-11754 6.5 MEDIUM EPSS 0.01

ImageMagick 7.0.6-4 - DoS

The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file that is mishandled in an OpenPixelCache call.

CWE-772 Jul 30, 2017

CVE-2017-11753 6.5 MEDIUM EPSS 0.01

ImageMagick 7.0.6-4 - Heap-Based Buffer Over-Read

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted Flexible Image Transport System (FITS) file.

CWE-125 Jul 30, 2017

CVE-2017-11752 6.5 MEDIUM EPSS 0.00

ImageMagick 7.0.6-4 - DoS

The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

CWE-772 Jul 30, 2017

CVE-2017-11751 6.5 MEDIUM EPSS 0.01

ImageMagick 7.0.6-4 - DoS

The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

CWE-772 Jul 30, 2017