Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

8.8

HIGH

CVE-2017-15388

Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page....

Affected Products : debian_linux chrome
Published: Feb. 07, 2018

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2017-15387

Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page....

Affected Products : debian_linux chrome
Published: Feb. 07, 2018

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2017-15386

Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page....

Affected Products : debian_linux chrome
Published: Feb. 07, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2017-15367

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server....

Affected Products : bacula-web
Published: Mar. 07, 2018

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2017-15365

sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote authenticated users with SQL access to bypass intended access restrictions and rep...

Affected Products : fedora mariadb xtradb_cluster
Published: Jan. 25, 2018

Modified: Nov. 21, 2024
7.0

HIGH

CVE-2017-15358

Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privileges via vectors involving the --self-repair option....

Affected Products : charles
Published: Aug. 03, 2018

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2017-15356

Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vul...

Affected Products : dp300_firmware te60_firmware rp200_firmware te30_firmware te40_firmware te50_firmware tx50_firmware te30 te40 te50 +4 more products
Published: Feb. 15, 2018

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2017-15355

Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vul...

Affected Products : dp300_firmware te60_firmware rp200_firmware te30_firmware te40_firmware te50_firmware tx50_firmware te30 te40 te50 +4 more products
Published: Feb. 15, 2018

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2017-15354

Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vul...

Affected Products : dp300_firmware te60_firmware rp200_firmware te30_firmware te40_firmware te50_firmware tx50_firmware te30 te40 te50 +4 more products
Published: Feb. 15, 2018

Modified: Nov. 21, 2024
4.3

MEDIUM

CVE-2017-15353

Huawei DP300, V500R002C00, RP200, V500R002C00, V600R006C00, RSE6500, V500R002C00, TE30, V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00, V600R006C00, TE60, V100R001C01, V100R001C10, V500R002C00, V600R0...

Affected Products : rse6500_firmware vp9660_firmware dp300_firmware te60_firmware viewpoint_9030_firmware rp200_firmware te30_firmware te40_firmware te50_firmware viewpoint_8660_firmware +12 more products
Published: Feb. 15, 2018

Modified: Nov. 21, 2024
3.1

LOW

CVE-2017-15352

Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5600 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5800 V3, V300R003C0...

Affected Products : oceanstor_2800_firmware oceanstor_5300_firmware oceanstor_5500_firmware oceanstor_5600_firmware oceanstor_5800_firmware oceanstor_2800 oceanstor_5300 oceanstor_5500 oceanstor_5600 oceanstor_5800
Published: Feb. 15, 2018

Modified: Nov. 21, 2024
7.2

HIGH

CVE-2017-15351

The 'Find Phone' function in Huawei Honor V9 play smart phones with versions earlier than Jimmy-AL00AC00B135 has an authentication bypass vulnerability. Due to improper authentication realization in the 'Find Phone' function. An attacker may exploit the v...

Affected Products : honor_v9_play_firmware honor_v9_play
Published: Feb. 15, 2018

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2017-15350

The Common Open Policy Service Protocol (COPS) module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R0...

Affected Products : nip6800_firmware secospace_usg6600_firmware usg9500_firmware dp300_firmware te60_firmware secospace_usg6300_firmware tp3206_firmware rp200_firmware te30_firmware te40_firmware +28 more products
Published: Feb. 15, 2018

Modified: Nov. 21, 2024
7.5

HIGH

CVE-2017-15349

Huawei CloudEngine 12800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 5800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 6800 V100R003C00, V100R005C00, V100R005C10, V100R006C00,CloudEngine 7800 V100R003C00, V100R005C00, ...

Affected Products : cloudengine_12800_firmware cloudengine_5800_firmware cloudengine_6800_firmware cloudengine_7800_firmware cloudengine_12800 cloudengine_6800 cloudengine_7800 cloudengine_5800
Published: Feb. 15, 2018

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2017-15348

Huawei IPS Module V500R001C00, NGFW Module V500R001C00, NIP6300 V500R001C00, NIP6600 V500R001C00, Secospace USG6300 V500R001C00, Secospace USG6500 V500R001C00, Secospace USG6600 V500R001C00, USG9500 V500R001C00 have an insufficient input validation vulner...

Affected Products : secospace_usg6600_firmware usg9500_firmware secospace_usg6300_firmware secospace_usg6500_firmware ips_module_firmware ngfw_module_firmware nip6300_firmware nip6600_firmware nip6300 secospace_usg6500 +6 more products
Published: Feb. 15, 2018

Modified: Nov. 21, 2024
7.1

HIGH

CVE-2017-15347

Huawei Mate 9 Pro mobile phones with software of versions earlier than LON-AL00BC00B235 have a use after free (UAF) vulnerability. An attacker tricks a user into installing a malicious application, and the application can riggers access memory after free ...

Affected Products : mate_9_pro_firmware mate_9_pro
Published: Feb. 15, 2018

Modified: Nov. 21, 2024
4.7

MEDIUM

CVE-2017-15346

XML parser in Huawei S12700 V200R005C00,S1700 V200R009C00, V200R010C00,S3700 V100R006C03, V100R006C05,S5700 V200R001C00, V200R002C00, V200R003C00, V200R003C02, V200R005C00, V200R006C00, V200R007C00, V200R008C00, V200R009C00, V200R010C00,S6700 V200R001C00,...

Affected Products : ecns210_td_firmware s12700_firmware s1700_firmware s5700_firmware s6700_firmware s7700_firmware s9700_firmware s5700 s6700 s7700 +4 more products
Published: Feb. 15, 2018

Modified: Nov. 21, 2024
5.7

MEDIUM

CVE-2017-15345

Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Successful exploit could cause the device to reboot....

Affected Products : lon-l29d_firmware lon-l29d
Published: Feb. 15, 2018

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2017-15344

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messag...

Affected Products : ar1200_firmware ar3200_firmware ar120-s_firmware ar3200
Published: Feb. 15, 2018

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2017-15343

Huawei AR3200 with software V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30 has an integer overflow vulnerability. The software does not sufficiently validate certain field in SCTP messag...

Affected Products : ar1200_firmware ar3200_firmware ar120-s_firmware ar3200
Published: Feb. 15, 2018

Modified: Nov. 21, 2024

Showing 20 of 292792 Results

Browse by Apps

Latest CVE Feed

8.8

8.8

6.5

9.8

8.8

7.0

5.3

5.3

5.3

4.3

3.1

7.2

5.3

7.5

7.8

7.1

4.7

5.7

7.8

7.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable