Skip to content
BackEsc
Connect AISign inSign up free

August 2017 · Band 4

Possible (1 to 10%)

1,001 CVEs

Each square is a CVE that EPSS puts between 1% and 10%.

Connect AI

Every one of the 1,001 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.CVE-2017-11662Mindwerks · 10.0% likely

    CWE-125Mindwerks

  2. The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_proto, ip_proto, and thoff are initialized, which allows remote…CVE-2017-13715Linux · 9.7% likely

    CWE-665Linux

  3. The web/web_file/fb_publish.php script in D-Link DNS-320L before 1.04b12 and DNS-327L before 1.03b04 Build0119 does not authenticate requests, which allows remote attackers to obt…CVE-2014-7860D-Link · 9.6% likely

    CWE-200D-Link

  4. The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the target ticketId, and navigating to http:/…CVE-2015-4071Helpdesk Pro Project · 9.6% likely

    CWE-200Helpdesk Pro Project

  5. Adobe Digital Editions 4.5.4 and earlier has an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.CVE-2017-11275Adobe Systems Incorporated · 9.5% likely

    CWE-119Adobe

  6. Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in…CVE-2017-11223Adobe Systems Incorporated · 9.5% likely

    CWE-416Adobe

  7. Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in…CVE-2017-11218Adobe Systems Incorporated · 9.5% likely

    CWE-416Adobe

  8. ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid username and password pairs, which allows remote authentica…CVE-2015-7259Zte · 9.5% likely

    CWE-255ZTE

  9. Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator…CVE-2017-14064Ruby-Lang · 9.4% likely

    CWE-119Ruby-Lang1 bounty report

  10. Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in…CVE-2017-3120Adobe Systems Incorporated · 9.4% likely

    CWE-416Adobe

  11. Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in…CVE-2017-3113Adobe Systems Incorporated · 9.4% likely

    CWE-416Adobe

  12. The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x befo…CVE-2015-7945Spi-Inc · 9.4% likely

    CWE-200

  13. Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability…CVE-2017-11236Adobe Systems Incorporated · 9.2% likely

    CWE-119Adobe

  14. Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in…CVE-2017-11224Adobe Systems Incorporated · 9.2% likely

    CWE-416Adobe

  15. Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable use after free vulnerability in…CVE-2017-11219Adobe Systems Incorporated · 9.2% likely

    CWE-416Adobe

  16. Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, a…CVE-2017-8653Microsoft Corporation · 9.2% likely

    CWE-119Microsoft

  17. Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object.CVE-2015-5209Apache · 9.1% likely

    CWE-20Apache

  18. Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engine…CVE-2017-8674Microsoft Corporation · 8.9% likely

    CWE-119Microsoft

  19. Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way tha…CVE-2017-8672Microsoft Corporation · 8.9% likely

    CWE-119Microsoft

  20. Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the w…CVE-2017-8655Microsoft Corporation · 8.9% likely

    CWE-119Microsoft

  21. Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has a security bypass vulnerability related to exe…CVE-2017-3118Adobe Systems Incorporated · 8.9% likely

    CWE-200Adobe

  22. Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in…CVE-2017-11221Adobe Systems Incorporated · 8.9% likely

    CWE-704Adobe

  23. The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allows remote attackers to cause a denial of service (segmentati…CVE-2015-7894Samsung · 8.9% likely

    CWE-119Samsung

  24. Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable memory corruption vulnerability…CVE-2017-11212Adobe Systems Incorporated · 8.8% likely

    CWE-119Adobe

  25. Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution.CVE-2017-11274Adobe Systems Incorporated · 8.7% likely

    CWE-416Adobe

  26. Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render c…CVE-2017-8647Microsoft Corporation · 8.6% likely

    CWE-119Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Sign inSign up free

Updated