| | CVE-2017-0195 | Microsoft | medium | 5.4 | 1.0%
| | Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2… | Apr 12, 2017 | May 13, 2026 |
| | CVE-2017-0194 | Microsoft | medium | 5.5 | 44.2%
| | Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote a… | Apr 12, 2017 | May 13, 2026 |
| | CVE-2017-0160 | Microsoft | high | 7.8 | 13.0%
| | Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access t… | Apr 12, 2017 | May 13, 2026 |
| | CVE-2017-0106 | Microsoft | high | 7.8 | 10.8%
| | Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outl… | Apr 12, 2017 | May 13, 2026 |
| | CVE-2017-0093 | Microsoft | high | 7.5 | 21.4%
| | A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine … | Apr 12, 2017 | May 13, 2026 |
| | CVE-2016-0779 | Apache | critical | 9.8 | 5.0%
| | The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote at… | Apr 11, 2017 | May 13, 2026 |
| | CVE-2016-7467 | F5 | medium | 5.3 | 1.6%
| | The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when … | Apr 11, 2017 | May 13, 2026 |
| | CVE-2016-6811 | Apache | high | 8.8 | 0.5%
| | In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary c… | Apr 11, 2017 | May 13, 2026 |
| | CVE-2017-5607 | Splunk | low | 3.5 | 9.0%
| | Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13… | Apr 10, 2017 | May 13, 2026 |
| | CVE-2016-6805 | Apache | medium | 5.9 | 0.9%
| | Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modif… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-6604 | Cisco | medium | 6.1 | 0.3%
| | A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could … | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-6602 | Cisco | medium | 4.4 | 0.3%
| | A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Ser… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-6601 | Cisco | high | 7.1 | 0.3%
| | A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-6600 | Cisco | high | 7.8 | 0.4%
| | A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-6598 | Cisco | medium | 6.7 | 0.0%
| | A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manag… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-6597 | Cisco | high | 7.8 | 0.4%
| | A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, C… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-3889 | Cisco | medium | 6.1 | 0.3%
| | A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthe… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-3888 | Cisco | medium | 5.4 | 0.2%
| | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could … | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-3887 | Cisco | medium | 5.9 | 0.6%
| | A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco Fi… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-3886 | Cisco | medium | 4.9 | 0.2%
| | A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticat… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-3885 | Cisco | medium | 5.9 | 0.5%
| | A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco F… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-3884 | Cisco | medium | 6.5 | 0.2%
| | A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Ne… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-3848 | Cisco | medium | 6.1 | 0.3%
| | A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2017-3817 | Cisco | medium | 4.3 | 0.1%
| | A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System … | Apr 7, 2017 | May 13, 2026 |
| | CVE-2016-9197 | Cisco | medium | 6.7 | 0.1%
| | A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireles… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2016-9195 | Cisco | medium | 5.3 | 0.4%
| | A vulnerability in RADIUS Change of Authorization (CoA) request processing in the Cisco Wireless LAN… | Apr 7, 2017 | May 13, 2026 |
| | CVE-2016-8735 | Apache | critical | 9.8 | 93.8%
| ⚠ KEV | Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.… | Apr 6, 2017 | Apr 21, 2026 |
| | CVE-2016-6809 | Apache | critical | 9.8 | 7.0%
| | Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. … | Apr 6, 2017 | May 13, 2026 |
| | CVE-2016-9194 | Cisco | medium | 6.5 | 0.2%
| | A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wire… | Apr 6, 2017 | May 13, 2026 |
| | CVE-2017-7565 | Splunk | high | 8.8 | 2.6%
| | Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users … | Apr 6, 2017 | May 13, 2026 |
| | CVE-2017-6130 | F5 | high | 7.4 | 0.3%
| | F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request … | Apr 6, 2017 | May 13, 2026 |
| | CVE-2017-0305 | F5 | critical | 9.8 | 2.9%
| | F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that … | Apr 6, 2017 | May 13, 2026 |
| | CVE-2017-5649 | Apache | high | 7.5 | 0.1%
| | Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager prope… | Apr 4, 2017 | May 13, 2026 |
| | CVE-2017-5642 | Apache | critical | 9.8 | 0.8%
| | During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with prop… | Apr 3, 2017 | May 13, 2026 |
| | CVE-2016-8032 | Trellix | high | 7.3 | 0.1%
| | Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800… | Mar 31, 2017 | May 13, 2026 |
| | CVE-2016-4976 | Apache | medium | 5.5 | 0.1%
| | Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, whic… | Mar 29, 2017 | May 13, 2026 |
| | CVE-2014-3582 | Apache | critical | 9.8 | 0.3%
| | In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari… | Mar 29, 2017 | May 13, 2026 |
| | CVE-2016-6807 | Apache | critical | 9.8 | 0.8%
| | Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, l… | Mar 28, 2017 | May 13, 2026 |
| | CVE-2016-8749 | Apache | critical | 9.8 | 12.2%
| | Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Executio… | Mar 28, 2017 | May 13, 2026 |
| | CVE-2016-8031 | Trellix | high | 7.3 | 0.1%
| | Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800… | Mar 28, 2017 | May 13, 2026 |
| | CVE-2016-9252 | F5 | high | 7.5 | 1.2%
| | The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 an… | Mar 27, 2017 | May 13, 2026 |
| | CVE-2016-7474 | F5 | medium | 5.5 | 0.1%
| | In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access… | Mar 27, 2017 | May 13, 2026 |
| | CVE-2017-7269 | Microsoft | critical | 9.8 | 94.4%
| ⚠ KEV | Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information S… | Mar 27, 2017 | Apr 21, 2026 |
| | CVE-2017-5644 | Apache | medium | 5.5 | 0.7%
| | Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (C… | Mar 24, 2017 | May 13, 2026 |
| | CVE-2017-6517 | Microsoft | critical | 9.8 | 19.7%
| | Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote atta… | Mar 23, 2017 | May 13, 2026 |
| | CVE-2014-0229 | Apache | medium | 6.5 | 0.4%
| | Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2… | Mar 23, 2017 | May 13, 2026 |
| | CVE-2017-7199 | Tenable | high | 7.8 | 0.1%
| | Nessus 6.6.2 - 6.10.3 contains a flaw related to insecure permissions that may allow a local attacke… | Mar 23, 2017 | May 13, 2026 |
| | CVE-2016-9775 | Apache | high | 7.8 | 0.1%
| | The postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0.45… | Mar 23, 2017 | May 13, 2026 |
| | CVE-2016-9774 | Apache | high | 7.8 | 0.1%
| | The postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6.0.… | Mar 23, 2017 | May 13, 2026 |
| | CVE-2016-7468 | F5 | medium | 5.9 | 0.9%
| | An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devi… | Mar 23, 2017 | May 13, 2026 |