VULNERABILITY REMEDIATION

CVE remediation guides

Move from asset identification to supported remediation and post-change verification while keeping source evidence visible.

These defensive guides do not provide exploit reproduction or bypass instructions.
01

Confirm exposure first

Match the product, version, installation path, and external exposure before treating a score as an action order.

02

Prefer supported fixes

Use vendor advisories and supported update paths. An unverified fixed-version field stays visibly unresolved.

03

Verify and retain rollback

Confirm version state, service health, access paths, logs, and rollback readiness after the change.

17,661 guide candidatesPage 1442 of 1472
Known exploitedHighFixed-version data
CVE-2018-4878

Adobe Flash Player

Affected
Adobe Flash Player before 28.0.0.161, < 28.0.0.161, 6.0
Fixed
28.0.0.161
Known exploitedCriticalResearch in progress
CVE-2017-1000353

Jenkins

Affected
<= 2.56, <= 2.46.1, 1.9.0
Fixed
No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-0802

Microsoft Office

Affected
Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016, 2007, 2010, 2013, 2016
Fixed
No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2018-0798

Microsoft Office

Affected
Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016, 2007, 2010, 2013, 2016
Fixed
No verified fixed-version field is available yet
Priority reviewCriticalFixed-version data
CVE-2017-8046

Pivotal Pivotal Spring Data REST and Spring Boot, spring boot, spring data rest

Affected
Pivotal Spring Data REST versions prior to 2.6.9 (Ingalls SR9), 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6, < 1.5.9, 2.0.0, 3.0.0, < 2.6.9
Fixed
1.5.9, 2.6.9
Known exploitedCriticalFixed-version data
CVE-2017-1000486

Primetek Primefaces Application

Affected
>= 4.0 <= 4.0.24, >= 5.0 < 5.2.21, >= 5.3 < 5.3.8
Fixed
5.2.21, 5.3.8
Known exploitedHighFixed-version data
CVE-2017-17562

Embedthis GoAhead

Affected
< 3.6.5, 3.0, 4.0
Fixed
3.6.5
Known exploitedCriticalFixed-version data
CVE-2017-15944

Palo Alto Networks PAN-OS

Affected
< 6.1.19, >= 7.0.0 < 7.0.19, >= 7.1.0 < 7.1.14, >= 8.0.0 < 8.0.6
Fixed
6.1.19, 7.0.19, 7.1.14, 8.0.6
Review reviewHighResearch in progress
CVE-2017-16879

ncurses

Affected
6.0
Fixed
No verified fixed-version field is available yet
Review reviewHighResearch in progress
CVE-2017-12350

Cisco Umbrella Insights Virtual Appliance, umbrella virtual appliance

Affected
Cisco Umbrella Insights Virtual Appliance, <= 2.1.0
Fixed
No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2017-11882

Microsoft Office

Affected
Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, Microsoft Office 2016, 2007, 2010, 2013, 2016
Fixed
No verified fixed-version field is available yet
Known exploitedHighResearch in progress
CVE-2017-16651

Roundcube Roundcube Webmail

Affected
<= 1.1.9, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.3.0, 1.3.1, 1.3.2, 7.0, 9.0
Fixed
No verified fixed-version field is available yet