SecPod

Learn Search

Search across all Learn content

← Back to Security Research

SCAP Feed Release : 01-Mar-2017

The following SCAP content has been released to SCAP Repo and SecPod Saner Solution. SecPod Saner will automatically pull the relevant content on its next scheduled update.

Feb 28, 2017By Kumarswamy S1 min read

The following SCAP content has been released to SCAP Repo and SecPod Saner Solution. SecPod Saner will automatically pull the relevant content on its next scheduled update.

oval:org.secpod.oval:def:39115 CVE-2017-0037 Type confusion vulnerability in Internet Explorer and Edge – CVE-2017-0037
oval:org.secpod.oval:def:39116 CVE-2017-2618 Denial of service vulnerability in Kernel while handling SELinux attributes
oval:org.secpod.oval:def:39117 CVE-2016-10167
CVE-2016-10168
CVE-2016-9317
CVE-2016-9933
USN-3213-1		 USN-3213-1 — gd library vulnerabilities
oval:org.secpod.oval:def:39118 CVE-2017-0016 Denial of service vulnerability in SMB2 TREE_CONNECT Response structure in Microsoft Windows
oval:org.secpod.oval:def:602786 CVE-2016-8674
CVE-2017-5896
CVE-2017-5991
DSA-3797-1		 DSA-3797-1 mupdf — mupdf
oval:org.secpod.oval:def:703487 CVE-2017-3157
USN-3210-1		 USN-3210-1 — libreoffice vulnerability
oval:org.secpod.oval:def:703488 CVE-2016-10158
CVE-2016-10159
CVE-2016-10160
CVE-2016-10161
CVE-2016-10162
CVE-2016-7479
CVE-2016-9137
CVE-2016-9935
CVE-2016-9936
CVE-2017-5340
USN-3211-1		 USN-3211-1 — php vulnerabilities
oval:org.secpod.oval:def:703490 CVE-2016-10166
CVE-2016-10167
CVE-2016-10168
CVE-2016-6906
CVE-2016-6912
CVE-2016-9317
CVE-2016-9933
USN-3213-1		 USN-3213-1 — gd library vulnerabilities

Featured Posts

Open Citrix Sounds the Alarm: Two Critical NetScaler Zero-Days Actively Exploited
Citrix Sounds the Alarm: Two Critical NetScaler Zero-Days Actively Exploited

CVE Research

Citrix Sounds the Alarm: Two Critical NetScaler Zero-Days Actively Exploited

Citrix has released security updates for NetScaler ADC and NetScaler Gateway addressing CVE-2026-88771 and CVE-2026-88772, two critical remote code execution vulnerabilities. Exploits against unmitigated deployments have been observed. CVE-2026-88771 affects all deployments, including default configurations; CVE-2026-88772 applies when DTLS is enabled, including the default state on VPN virtual servers. This article covers impact, affected and fixed versions, how to confirm exposure, and recommended remediation.

Sep 28, 2026

Open CVE-2023-49105: The ownCloud Authentication Flaw That Exposed Sensitive Credentials
CVE-2023-49105: The ownCloud Authentication Flaw That Exposed Sensitive Credentials

CVE Research

CVE-2023-49105: The ownCloud Authentication Flaw That Exposed Sensitive Credentials

Sep 25, 2026

Open Patch Analysis & Exploitation Timeline: RouterOS SSH Attacks Predate Production Fixes in CISA's September 10, 2026 KEV Additions
Patch Analysis & Exploitation Timeline: RouterOS SSH Attacks Predate Production Fixes in CISA's September 10, 2026 KEV Additions

CVE Research

Patch Analysis & Exploitation Timeline: RouterOS SSH Attacks Predate Production Fixes in CISA's September 10, 2026 KEV Additions

Two MikroTik RouterOS CVEs entered CISA KEV seven days after production fixes. Dated reporting places SSH-chain exploitation involving CVE-2026-86060 at least one calendar day before those releases; no comparable start date is established for CVE-2026-67277.

Sep 25, 2026

Open Patch Analysis & Exploitation Timeline: A Day-Old Chrome Bug and an Eight-Month-Old Fortinet Flaw Share the Same KEV Batch
Patch Analysis & Exploitation Timeline: A Day-Old Chrome Bug and an Eight-Month-Old Fortinet Flaw Share the Same KEV Batch

CVE Research

Patch Analysis & Exploitation Timeline: A Day-Old Chrome Bug and an Eight-Month-Old Fortinet Flaw Share the Same KEV Batch

Four vulnerabilities added to CISA’s KEV catalog on September 9, 2026 show widely different timelines between public disclosure and formal exploitation-based prioritization, ranging from one day to 239 days.

Sep 24, 2026