2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-1474 | MEDIUM | 5.3 | 1.8% | Jun 6, 2018 | IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive inform... |
| CVE-2017-7639 | — | — | 1.1% | Jun 5, 2018 | QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly. Successful exploitation... |
| CVE-2017-7637 | — | — | 3.2% | Jun 5, 2018 | QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to run arbitrary OS commands against the... |
| CVE-2017-7636 | — | — | 1.2% | Jun 5, 2018 | Cross-site scripting (XSS) vulnerability in QNAP NAS application Proxy Server through version 1.2.0 allows remote attack... |
| CVE-2017-7635 | — | — | 0.6% | Jun 5, 2018 | QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections. |
| CVE-2017-7654 | — | — | 2.2% | Jun 5, 2018 | In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthentica... |
| CVE-2017-7653 | — | — | 1.5% | Jun 5, 2018 | The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A malicious client c... |
| CVE-2017-1350 | HIGH | 8.4 | 0.5% | Jun 5, 2018 | IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 could allow a user to escalate their privileges to administr... |
| CVE-2017-18286 | — | — | 0.7% | Jun 5, 2018 | nZEDb v0.7.3.3 has XSS in the 404 error page. |
| CVE-2017-12092 | LOW | 3.7 | 2.7% | Jun 4, 2018 | An exploitable file write vulnerability exists in the memory module functionality of Allen Bradley Micrologix 1400 Serie... |
| CVE-2017-16055 | — | — | 1.1% | Jun 4, 2018 | `sqlserver` was a malicious module published with the intent to hijack environment variables. It has been unpublished by... |
| CVE-2017-16054 | — | — | 1.2% | Jun 4, 2018 | `nodefabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished b... |
| CVE-2017-16053 | — | — | 1.1% | Jun 4, 2018 | `fabric-js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by... |
| CVE-2017-16052 | — | — | 1.2% | Jun 4, 2018 | `node-fabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished ... |
| CVE-2017-16051 | — | — | 1.3% | Jun 4, 2018 | `sqliter` was a malicious module published with the intent to hijack environment variables. It has been unpublished by n... |
| CVE-2017-16050 | — | — | 1.1% | Jun 4, 2018 | `sqlite.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by... |
| CVE-2017-16049 | — | — | 1.2% | Jun 4, 2018 | `nodesqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished b... |
| CVE-2017-16048 | — | — | 1.2% | Jun 4, 2018 | `node-sqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished ... |
| CVE-2017-16046 | HIGH | 7.5 | 1.1% | Jun 4, 2018 | `mariadb` was a malicious module published with the intent to hijack environment variables. It has been unpublished by n... |
| CVE-2017-16045 | — | — | 1.1% | Jun 4, 2018 | `jquery.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by... |
| CVE-2017-16044 | — | — | 1.5% | Jun 4, 2018 | `d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm... |
| CVE-2017-16043 | MEDIUM | 6.1 | 1.0% | Jun 4, 2018 | Shout is an IRC client. Because the `/topic` command in messages is unescaped, attackers have the ability to inject HTML... |
| CVE-2017-16042 | — | — | 4.4% | Jun 4, 2018 | Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it ... |
| CVE-2017-16041 | — | — | 0.7% | Jun 4, 2018 | ikst versions before 1.1.2 download resources over HTTP, which leaves it vulnerable to MITM attacks. |
| CVE-2017-16040 | — | — | 1.7% | Jun 4, 2018 | gfe-sass is a library for promises (CommonJS/Promises/A,B,D) gfe-sass downloads resources over HTTP, which leaves it vul... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now