Exploit Intelligence Platform

Updated 5h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

339,497 CVEs tracked 53,352 with exploits 4,748 exploited in wild 1,551 CISA KEV 3,947 Nuclei templates 49,202 vendors 42,818 researchers

111,546 results Clear all

CVE-2017-0696 5.5 MEDIUM EPSS 0.00

Android <7.1.2 - DoS

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37207120.

CWE-20 Jul 06, 2017

CVE-2017-0695 5.5 MEDIUM EPSS 0.00

Android <7.1.2 - DoS

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37094889.

CWE-787 Jul 06, 2017

CVE-2017-0694 5.5 MEDIUM EPSS 0.00

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37093318.

CWE-20 Jul 06, 2017

CVE-2017-0693 5.5 MEDIUM EPSS 0.00

Android <7.1.2 - DoS

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36993291.

CVE-2017-0692 5.5 MEDIUM EPSS 0.00

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36725407.

CWE-674 Jul 06, 2017

CVE-2017-0691 5.5 MEDIUM 1 PoC Analysis EPSS 0.00

Android <7.1.2 - DoS

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36724453.

CWE-190 Jul 06, 2017

CVE-2017-0690 5.5 MEDIUM EPSS 0.00

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36592202.

CWE-400 Jul 06, 2017

CVE-2017-0689 5.5 MEDIUM EPSS 0.00

Android <7.1.2 - DoS

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36215950.

CWE-119 Jul 06, 2017

CVE-2017-0688 5.5 MEDIUM EPSS 0.00

Android <7.1.2 - DoS

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35584425.

CVE-2017-0686 5.5 MEDIUM EPSS 0.00

Android <7.1.2 - DoS

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34231231.

CWE-476 Jul 06, 2017

CVE-2017-0685 5.5 MEDIUM EPSS 0.00

Android <7.1.2 - DoS

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34203195.

CWE-835 Jul 06, 2017

CVE-2017-0672 5.5 MEDIUM EPSS 0.00

Android <7.1.2 - DoS

A denial of service vulnerability in the Android libraries. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-34778578.

CWE-20 Jul 06, 2017

CVE-2017-0670 5.5 MEDIUM EPSS 0.00

A denial of service vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36104177.

CVE-2017-0669 5.5 MEDIUM EPSS 0.00

Android <7.1.2 - Info Disclosure

A information disclosure vulnerability in the Android framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34114752.

CWE-200 Jul 06, 2017

CVE-2017-0668 5.5 MEDIUM EPSS 0.00

Android <7.1.2 - Info Disclosure

A information disclosure vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-22011579.

CWE-200 Jul 06, 2017

CVE-2017-8932 5.9 MEDIUM 1 Writeup EPSS 0.02

Go <1.7.6, 1.8.x <1.8.2 - Memory Corruption

A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted points and observing failures to the derive correct output. This leads to a full key recovery attack against static ECDH, as used in popular JWT libraries.

CWE-682 Jul 06, 2017

CVE-2017-10973 6.5 MEDIUM EPSS 0.00

Finecms < 2017-05-12 - SSRF

In FineCMS before 2017-07-06, application/lib/ajax/get_image_data.php has SSRF, related to requests for non-image files with a modified HTTP Host header.

CWE-918 Jul 06, 2017

CVE-2017-10967 6.1 MEDIUM EPSS 0.00

In FineCMS before 2017-07-06, application\core\controller\config.php allows XSS in the (1) key_name, (2) key_value, and (3) meaning parameters.

CWE-79 Jul 06, 2017

CVE-2017-1236 6.5 MEDIUM EPSS 0.00

IBM Websphere MQ - Improper Input Validation

IBM WebSphere MQ 9.0.2 could allow an authenticated user to potentially cause a denial of service by saving an incorrect channel status inquiry. IBM X-Force ID: 124354

CWE-20 Jul 06, 2017

CVE-2017-10975 6.1 MEDIUM EPSS 0.00

Lutim < 0.7.1 - XSS

Cross-site scripting (XSS) vulnerability in Lutim before 0.8 might allow remote attackers to inject arbitrary web script or HTML via a crafted filename that is mishandled in an upload notification and in the myfiles component, if the attacker can convince the victim to proceed with an upload despite the appearance of an XSS payload in the filename.

CWE-79 Jul 06, 2017