Vulnerabilities (CVE)

Filtered by CWE-20
Total 11725 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-8975 1 Hp 1 Moonshot Provisioning Manager Appliance 2026-06-17 10.0 HIGH 9.8 CRITICAL
A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found.
CVE-2017-8973 1 Hp 1 Matrix Operating Environment 2026-06-17 4.0 MEDIUM 4.3 MEDIUM
An improper input validation vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.
CVE-2017-8972 1 Hp 1 Matrix Operating Environment 2026-06-17 4.0 MEDIUM 4.3 MEDIUM
A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.
CVE-2017-8971 1 Hp 1 Matrix Operating Environment 2026-06-17 4.0 MEDIUM 4.3 MEDIUM
A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found.
CVE-2017-8969 1 Hp 1 Insight Control 2026-06-17 3.5 LOW 5.7 MEDIUM
An improper input validation vulnerability in HPE Insight Control version 7.6 LR1 was found.
CVE-2017-8957 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.
CVE-2017-8956 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.3 E0504P04 was found.
CVE-2017-8955 1 Hp 1 Intelligent Management Center 2026-06-17 7.8 HIGH 7.5 HIGH
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.
CVE-2017-8954 1 Hp 1 Intelligent Management Center 2026-06-17 10.0 HIGH 9.8 CRITICAL
A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version 7.2 was found.
CVE-2017-8934 1 Pcmanfm Project 1 Pcmanfm 2026-06-17 2.1 LOW 5.5 MEDIUM
PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).
CVE-2017-8933 1 Libmenu-cache Project 1 Libmenu-cache 2026-06-17 2.1 LOW 3.3 LOW
Libmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (menu unavailability).
CVE-2017-8849 2 Debian, Smb4k Project 2 Debian Linux, Smb4k 2026-06-17 7.2 HIGH 7.8 HIGH
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount helper DBUS service.
CVE-2017-8815 2 Debian, Mediawiki 2 Debian Linux, Mediawiki 2026-06-17 5.0 MEDIUM 7.5 HIGH
The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attribute injection attacks via glossary rules.
CVE-2017-8814 2 Debian, Mediawiki 2 Debian Linux, Mediawiki 2026-06-17 5.0 MEDIUM 7.5 HIGH
The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a rule definition followed by "a lot of junk."
CVE-2017-8811 2 Debian, Mediawiki 2 Debian Linux, Mediawiki 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling attacks.
CVE-2017-8754 1 Microsoft 3 Edge, Windows 10, Windows Server 2016 2026-06-17 4.0 MEDIUM 4.2 MEDIUM
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malicious content, due to the way that the Edge Content Security Policy (CSP) validates certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-8723.
CVE-2017-8723 1 Microsoft 3 Edge, Windows 10, Windows Server 2016 2026-06-17 4.3 MEDIUM 4.3 MEDIUM
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page containing malicious content, due to the way that the Edge Content Security Policy (CSP) validates certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ID is unique from CVE-2017-8754.
CVE-2017-8714 1 Microsoft 4 Windows 10, Windows 8.1, Windows Server 2012 and 1 more 2026-06-17 6.9 MEDIUM 7.8 HIGH
The Windows Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2,, Windows 10 1607, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Remote Desktop Virtual Host Remote Code Execution Vulnerability".
CVE-2017-8704 1 Microsoft 2 Windows 10, Windows Server 2016 2026-06-17 4.9 MEDIUM 5.3 MEDIUM
The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Denial of Service Vulnerability".
CVE-2017-8699 1 Microsoft 7 Windows 10, Windows 7, Windows 8.1 and 4 more 2026-06-17 7.6 HIGH 7.0 HIGH
Windows Shell in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to run arbitrary code in the context of the current user, due to the way that Windows Shell validates file copy destinations, aka "Windows Shell Remote Code Execution Vulnerability".