| Critical |
9 Jan 2017 |
28 Jun 2026 |
CPAI-2026-8063 |
|
CVE-2018-5445
CVE-2021-37343
CVE-2021-42550
CVE-2022-26352
CVE-2022-29596
CVE-2023-1112
CVE-2023-20890
CVE-2023-38951
CVE-2023-42000
CVE-2026-21440
CVE-2026-5027
CVE-2026-6227 |
Web Servers Malicious Upload Directory Traversal (CVE-2018-5445; CVE-2021-37343; CVE-2021-42550; CVE-2022-26352; CVE-2022-29596; CVE-2023-1112; CVE-2023-20890; CVE-2023-38951; CVE-2023-42000; CVE-2026-21440; CVE-2026-5027; CVE-2026-6227) |
| Critical |
9 Jan 2017 |
7 May 2026 |
CPAI-2026-4130 |
|
CVE-2018-5445
CVE-2021-37343
CVE-2021-42550
CVE-2022-26352
CVE-2022-29596
CVE-2023-1112
CVE-2023-20890
CVE-2023-38951
CVE-2023-42000
CVE-2026-21440
CVE-2026-5027
CVE-2026-6227 |
Web Servers Malicious Upload Directory Traversal (CVE-2018-5445; CVE-2021-37343; CVE-2021-42550; CVE-2022-26352; CVE-2022-29596; CVE-2023-1112; CVE-2023-20890; CVE-2023-38951; CVE-2023-42000; CVE-2026-21440; CVE-2026-5027; CVE-2026-6227) |
| Critical |
9 Jan 2017 |
16 Apr 2026 |
CPAI-2026-3132 |
|
CVE-2018-5445
CVE-2021-37343
CVE-2021-42550
CVE-2022-26352
CVE-2022-29596
CVE-2023-1112
CVE-2023-20890
CVE-2023-38951
CVE-2023-42000
CVE-2026-21440
CVE-2026-5027 |
Web Servers Malicious Upload Directory Traversal (CVE-2018-5445; CVE-2021-37343; CVE-2021-42550; CVE-2022-26352; CVE-2022-29596; CVE-2023-1112; CVE-2023-20890; CVE-2023-38951; CVE-2023-42000; CVE-2026-21440; CVE-2026-5027) |
| High |
17 Sep 2017 |
19 Feb 2026 |
CPAI-2017-2075 |
HPE |
CVE-2017-12521 |
HPE Intelligent Management Center Remote Code Execution (CVE-2017-12521) |
| Critical |
22 Mar 2017 |
15 Feb 2026 |
CPAI-2016-1563 |
McAfee |
CVE-2016-8027 |
McAfee ePolicy Orchestrator SQL Injection (CVE-2016-8027) |
| High |
24 Sep 2017 |
15 Feb 2026 |
CPAI-2017-2071 |
|
CVE-2017-12615
CVE-2017-12617 |
Apache Tomcat Unrestricted File Upload (CVE-2017-12615; CVE-2017-12617) |
| Critical |
30 Nov 2017 |
9 Feb 2026 |
CPAI-2017-1041 |
|
|
Netflix Phishing Campaign Login and Billing Information |
| Low |
30 Aug 2017 |
9 Feb 2026 |
CPAI-2017-0727 |
Cacti |
CVE-2017-12927 |
Cacti spikekill.php Cross-Site Scripting (CVE-2017-12927) |
| Medium |
27 Feb 2017 |
9 Feb 2026 |
CPAI-2017-0147 |
Brocade |
CVE-2016-8206
CVE-2016-8207 |
Brocade Network Advisor Directory Traversal (CVE-2016-8206; CVE-2016-8207) |
| Critical |
17 Oct 2017 |
21 Jan 2026 |
CPAI-2025-11087 |
|
CVE-2019-17506
CVE-2020-9376
CVE-2023-48842
CVE-2025-14528 |
D-Link Routers Information Disclosure (CVE-2019-17506; CVE-2020-9376; CVE-2023-48842; CVE-2025-14528) |
| Medium |
19 Dec 2017 |
20 Jan 2026 |
CPAI-2018-0006 |
Google Project Zero |
CVE-2017-13795 |
Apple WebKit Use After Free Code Execution (CVE-2017-13795) |
| Medium |
19 Dec 2017 |
20 Jan 2026 |
CPAI-2017-1078 |
Google Project Zero |
CVE-2017-13796 |
Apple WebKit Use After Free Code Execution (CVE-2017-13796) |
| Medium |
17 Dec 2017 |
20 Jan 2026 |
CPAI-2017-1071 |
Project Zero |
CVE-2017-13785 |
Apple WebKit Out-of-bounds Read (CVE-2017-13785) |
| Medium |
12 Dec 2017 |
20 Jan 2026 |
CPAI-2017-1063 |
Project zero |
CVE-2017-13784 |
Apple WebKit out-of-bounds read (CVE-2017-13784) |
| Medium |
12 Dec 2017 |
20 Jan 2026 |
CPAI-2017-1062 |
Project zero |
CVE-2017-13783 |
Apple WebKit out-of-bounds read (CVE-2017-13783) |
| High |
29 Nov 2017 |
20 Jan 2026 |
CPAI-2017-1026 |
|
CVE-2017-13792 |
Apple WebKit Use After Free Code Execution (CVE-2017-13792) |
| Critical |
9 Jan 2017 |
6 Jan 2026 |
CPAI-2026-0175 |
|
CVE-2018-5445
CVE-2021-37343
CVE-2021-42550
CVE-2022-26352
CVE-2022-29596
CVE-2023-1112
CVE-2023-20890
CVE-2023-38951
CVE-2023-42000
CVE-2026-21440 |
Web Servers Malicious Upload Directory Traversal (CVE-2018-5445; CVE-2021-37343; CVE-2021-42550; CVE-2022-26352; CVE-2022-29596; CVE-2023-1112; CVE-2023-20890; CVE-2023-38951; CVE-2023-42000; CVE-2026-21440) |
| Critical |
24 Dec 2017 |
25 Dec 2025 |
CPAI-2017-1084 |
|
CVE-2017-17562 |
GoAhead LD_PRELOAD Remote Code Execution (CVE-2017-17562) |
| High |
17 Oct 2017 |
25 Dec 2025 |
CPAI-2018-0023 |
|
CVE-2017-9822 |
DNN Remote Code Execution (CVE-2017-9822) |
| Medium |
23 Jul 2017 |
25 Dec 2025 |
CPAI-2017-0579 |
Metasploit |
CVE-2017-9757 |
IPFire ids.cgi OINKCODE Parameter Command Injection (CVE-2017-9757) |
| High |
3 Apr 2017 |
25 Dec 2025 |
CPAI-2017-0272 |
|
CVE-2017-5495 |
Quagga VTY Interface Denial of Service (CVE-2017-5495) |
| Critical |
17 Oct 2017 |
22 Oct 2025 |
CPAI-2017-2008 |
DNSmasq |
CVE-2017-14493 |
Thekelleys Dnsmasq Buffer Overflow (CVE-2017-14493) |
| Critical |
13 Jun 2017 |
30 Sep 2025 |
CPAI-2017-1988 |
Microsoft CVE-2017-8543 |
CVE-2017-8543 |
Microsoft Windows Search Buffer Overflow (CVE-2017-8543) |
| High |
23 Apr 2017 |
28 Jul 2025 |
CPAI-2017-0307 |
OpenSSH |
CVE-2016-8858 |
OpenBSD OpenSSH Denial of Service (CVE-2016-8858) |
| Critical |
28 Jun 2017 |
27 Jul 2025 |
CPAI-2017-0530 |
|
|
Petya Ransomware Lateral Movement Remote Code Execution |
| High |
13 Dec 2017 |
27 Jun 2025 |
CPAI-2017-1067 |
|
CVE-2017-15908 |
Systemd Denial-of-Service (CVE-2017-15908) |
| Critical |
6 Nov 2017 |
27 Jun 2025 |
CPAI-2017-0863 |
|
CVE-2016-20016 |
MVPower CCTV DVR Remote Code Execution (CVE-2016-20016) |
| Critical |
24 Oct 2017 |
27 Jun 2025 |
CPAI-2017-0869 |
DNSmasq |
CVE-2017-13704 |
DNSmasq Denial Of Service (CVE-2017-13704) |
| Critical |
19 Jun 2017 |
27 Jun 2025 |
CPAI-2017-0513 |
IBM |
CVE-2017-1092 |
IBM Informix Dynamic Server index.php testconn Heap Buffer Overflow (CVE-2017-1092) |
| Critical |
9 May 2017 |
27 Jun 2025 |
CPAI-2017-0398 |
|
CVE-2017-7991 |
Exponent CMS SQL Injection (CVE-2017-7991) |
| Critical |
17 Oct 2017 |
26 Jun 2025 |
CPAI-2017-0843 |
DNSmasq |
CVE-2017-14493 |
Dnsmasq DHCPv6 Stack Buffer Overflow Remote Code Execution (CVE-2017-14493) |
| Critical |
27 Nov 2017 |
26 Jun 2025 |
CPAI-2017-1016 |
|
CVE-2017-17215 |
Huawei HG532 Router Remote Code Execution (CVE-2017-17215) |
| Critical |
19 Oct 2017 |
26 Jun 2025 |
CPAI-2017-0855 |
Dnsmasq |
CVE-2017-14494 |
Dnsmasq DHCPv6 Remote Unauthenticated Information Disclosure (CVE-2017-14494) |
| Critical |
27 Sep 2017 |
26 Jun 2025 |
CPAI-2017-0799 |
|
CVE-2017-11610 |
Supervisor Supervisord XML-RPC Remote Code Execution (CVE-2017-11610) |
| Medium |
16 Jul 2017 |
26 Jun 2025 |
CPAI-2017-0568 |
Systemd |
CVE-2017-9445 |
Systemd resolved dns_packet_new Heap Buffer Overflow (CVE-2017-9445) |
| Medium |
11 Jun 2017 |
26 Jun 2025 |
CPAI-2017-0501 |
OpenVPN |
CVE-2017-7478 |
OpenVPN P_CONTROL Denial of Service (CVE-2017-7478) |
| High |
3 May 2017 |
26 Jun 2025 |
CPAI-2017-0377 |
Metasploit |
CVE-2013-7409 |
ALLPlayer M3U File Stack Buffer Overflow (CVE-2013-7409) |
| High |
23 Apr 2017 |
26 Jun 2025 |
CPAI-2017-0309 |
|
CVE-2017-5177 |
VIPA Controls WinPLC7 recv Stack-based Buffer Overflow (CVE-2017-5177) |
| Critical |
27 Mar 2017 |
26 Jun 2025 |
CPAI-2017-0247 |
Metasploit |
CVE-2009-2485 |
HT-MP3Player 1.0 HT3 File Parsing Buffer Overflow (CVE-2009-2485) |
| Critical |
23 Mar 2017 |
26 Jun 2025 |
CPAI-2017-0240 |
Metasploit |
CVE-2009-4656 |
DJ Studio Pro PLS File Stack Buffer Overflow (CVE-2009-4656) |
| Critical |
15 Mar 2017 |
26 Jun 2025 |
CPAI-2017-0227 |
Brocade |
CVE-2016-8204 |
Brocade Network Advisor FileReceiveServlet filename Directory Traversal (CVE-2016-8204) |
| Critical |
15 Mar 2017 |
26 Jun 2025 |
CPAI-2017-0226 |
|
CVE-2013-4980
CVE-2013-4981
CVE-2013-4982 |
AVTECH Devices Multiple Vulnerabilities (CVE-2013-4980; CVE-2013-4981; CVE-2013-4982) |
| Critical |
27 Feb 2017 |
26 Jun 2025 |
CPAI-2017-0148 |
Brocade |
CVE-2016-8205 |
Brocade Network Advisor DashboardFileReceiveServlet filename Directory Traversal (CVE-2016-8205) |
| Medium |
26 Feb 2017 |
26 Jun 2025 |
CPAI-2017-0145 |
|
CVE-2016-8377 |
Fatek Automation PLC WinProladder Stack Buffer Overflow (CVE-2016-8377) |
| High |
8 Jan 2017 |
26 Jun 2025 |
CPAI-2017-0017 |
OpenSSH |
CVE-2016-6515 |
OpenSSH sshd auth_passwd Denial of Service (CVE-2016-6515) |
| Critical |
4 Jan 2017 |
26 Jun 2025 |
CPAI-2017-0005 |
Talos TALOS-2016-0027 |
CVE-2015-2868 |
Trane comfort Link II DSS services handling remote code execution (CVE-2015-2868) |
| Critical |
8 Jan 2017 |
25 Jun 2025 |
CPAI-2017-0007 |
|
CVE-2016-5118 |
GraphicsMagick Remote Code Execution (CVE-2016-5118) |
| Medium |
2 Nov 2017 |
24 Jun 2025 |
CPAI-2017-0905 |
|
CVE-2017-13129 |
ZKTeco ZKTime Web Cross Site Request Forgery (CVE-2017-13129) |
| Medium |
16 Nov 2017 |
23 Jun 2025 |
CPAI-2017-1001 |
Cesanta |
CVE-2017-2909 |
Cesanta Mongoose DNS Compressed Name Denial of Service (CVE-2017-2909) |
| Critical |
20 Dec 2017 |
19 Jun 2025 |
CPAI-2017-1082 |
|
CVE-2015-0899
CVE-2016-1182 |
Multiple Webservers Cross-Site Scripting Attempt (CVE-2015-0899; CVE-2016-1182) |