CVE & Exploit Intelligence Database

Updated 2h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

338,640 CVEs tracked 53,321 with exploits 4,733 exploited in wild 1,543 CISA KEV 3,938 Nuclei templates 49,006 vendors 42,664 researchers

111,112 results Clear all

CVE-2017-5367 6.1 MEDIUM EPSS 0.00

ZoneMinder v1.30-1.29 - XSS

Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, which allows a remote attacker to execute malicious scripts within an authenticated client's browser. The URL is /zm/index.php and sample parameters could include action=login&view=postlogin[XSS] view=console[XSS] view=groups[XSS] view=events&filter[terms][1][cnj]=and[XSS] view=events&filter%5Bterms%5D%5B1%5D%5Bcnj%5D=and[XSS] view=events&filter%5Bterms%5D%5B1%5D%5Bcnj%5D=[XSS]and view=events&limit=1%22%3E%3C/a%3E[XSS] (among others).

CWE-79 Feb 06, 2017

CVE-2016-9772 5.3 MEDIUM EPSS 0.00

Openafs < 1.6.19 - Information Disclosure

OpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via vectors involving the (1) client cache partition, (2) fileserver vice partition, or (3) certain RPC responses.

CWE-200 Feb 06, 2017

CVE-2016-9532 5.5 MEDIUM EPSS 0.01

Libtiff < 4.0.6 - Out-of-Bounds Read

Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tif file.

CWE-125 Feb 06, 2017

CVE-2016-5102 5.5 MEDIUM EPSS 0.01

Libtiff < 4.0.6 - Improper Input Validation

Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (segmentation fault) via a crafted gif file.

CWE-20 Feb 06, 2017

CVE-2017-5877 6.1 MEDIUM EPSS 0.00

XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /about-us/locations/index direction parameter.

CWE-79 Feb 06, 2017

CVE-2017-5876 6.1 MEDIUM EPSS 0.00

XSS was discovered in dotCMS 3.7.0, with an unauthenticated attack against the /news-events/events date parameter.

CWE-79 Feb 06, 2017

CVE-2017-5875 5.4 MEDIUM EPSS 0.00

XSS was discovered in dotCMS 3.7.0, with an authenticated attack against the /myAccount addressID parameter.

CWE-79 Feb 06, 2017

CVE-2017-5577 5.5 MEDIUM 1 Writeup EPSS 0.00

Linux Kernel < 4.9.6 - Denial of Service

The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections, which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) via inconsistent size values in a VC4_SUBMIT_CL ioctl call.

CWE-388 Feb 06, 2017

CVE-2017-5551 4.4 MEDIUM 1 Writeup EPSS 0.00

Linux kernel <4.9.6 - Privilege Escalation

The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7097.

CVE-2017-5550 5.5 MEDIUM 1 Writeup EPSS 0.00

Linux Kernel < 4.9.4 - Information Disclosure

Off-by-one error in the pipe_advance function in lib/iov_iter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after an incorrect buffer-release decision.

CWE-200 Feb 06, 2017

CVE-2017-5549 5.5 MEDIUM 1 Writeup EPSS 0.00

Linux Kernel < 4.9.4 - Log Information Exposure

The klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive information by reading the log.

CWE-532 Feb 06, 2017

CVE-2017-2596 6.5 MEDIUM EPSS 0.00

Linux Kernel < 4.9.8 - Resource Leak

The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXON instruction, which allows KVM L1 guest OS users to cause a denial of service (host OS memory consumption) by leveraging the mishandling of page references.

CWE-772 Feb 06, 2017

CVE-2016-10208 4.3 MEDIUM EPSS 0.00

Linux Kernel < 4.9.8 - Out-of-Bounds Read

The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image.

CWE-125 Feb 06, 2017

CVE-2016-10154 5.5 MEDIUM EPSS 0.00

Linux kernel <4.9.1 - DoS

The smbhash function in fs/cifs/smbencrypt.c in the Linux kernel 4.9.x before 4.9.1 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging use of more than one virtual page for a scatterlist.

CWE-119 Feb 06, 2017

CVE-2010-5328 5.5 MEDIUM EPSS 0.00

Linux kernel <2.6.35 - DoS

include/linux/init_task.h in the Linux kernel before 2.6.35 does not prevent signals with a process group ID of zero from reaching the swapper process, which allows local users to cause a denial of service (system crash) by leveraging access to this process group.

CWE-20 Feb 06, 2017

CVE-2017-5137 6.2 MEDIUM EPSS 0.00

SendQuick Entera/Avera <2HF16 - Info Disclosure

An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the SMS logs from an unauthenticated perspective.

CWE-532 Feb 05, 2017

CVE-2017-5882 6.1 MEDIUM EPSS 0.00

Sanadata Sanacms - XSS

Cross-site scripting (XSS) vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CWE-79 Feb 04, 2017

CVE-2017-5880 6.5 MEDIUM EPSS 0.01

Splunk < 6.5.1 - Improper Input Validation

Splunk Web in Splunk Enterprise versions 6.5.x before 6.5.2, 6.4.x before 6.4.5, 6.3.x before 6.3.9, 6.2.x before 6.2.13, 6.1.x before 6.1.12, 6.0.x before 6.0.13, 5.0.x before 5.0.17 and Splunk Light versions before 6.5.2 allows remote authenticated users to cause a denial of service (daemon crash) via a crafted GET request, aka SPL-130279.

CWE-20 Feb 04, 2017

CVE-2016-7147 6.1 MEDIUM EPSS 0.00

Plone < 4.3.12 - XSS

Cross-site scripting (XSS) vulnerability in the manage_findResult component in the search feature in Zope ZMI in Plone before 4.3.12 and 5.x before 5.0.7 allows remote attackers to inject arbitrary web script or HTML via vectors involving double quotes, as demonstrated by the obj_ids:tokens parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-7140.

CWE-79 Feb 04, 2017

CVE-2015-4049 6.8 MEDIUM EPSS 0.01

Unisys Mcp-firmware - Memory Corruption

Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service (data corruption or system crash) via vectors related to using program operators during EPSILON (level 5) based codefiles at peak memory usage, which triggers CPM stack corruption.

CWE-119 Feb 03, 2017