2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-16009 | MEDIUM | 6.1 | 1.2% | Jun 4, 2018 | ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting (XSS) via Angul... |
| CVE-2017-16008 | — | — | 0.9% | Jun 4, 2018 | i18next is a language translation framework. Because of how the interpolation is implemented, making replacements from t... |
| CVE-2017-16007 | — | — | 0.9% | Jun 4, 2018 | node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and n... |
| CVE-2017-16006 | — | — | 1.0% | Jun 4, 2018 | Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of `data:` URIs in links and can... |
| CVE-2017-16005 | — | — | 0.9% | Jun 4, 2018 | Http-signature is a "Reference implementation of Joyent's HTTP Signature Scheme". In versions <=0.9.11, http-signature s... |
| CVE-2017-0931 | MEDIUM | 6.1 | 1.1% | Jun 4, 2018 | html-janitor node module suffers from a Cross-Site Scripting (XSS) vulnerability via clean() accepting user-controlled v... |
| CVE-2017-0930 | — | — | 1.2% | Jun 4, 2018 | augustine node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malic... |
| CVE-2017-0928 | — | — | 1.0% | Jun 4, 2018 | html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '... |
| CVE-2017-1748 | MEDIUM | 6.8 | 0.9% | Jun 4, 2018 | IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect atta... |
| CVE-2017-18285 | — | — | 0.3% | Jun 4, 2018 | The Gentoo app-backup/burp package before 2.1.32 has incorrect group ownership of the /etc/burp directory, which might a... |
| CVE-2017-18284 | — | — | 0.3% | Jun 4, 2018 | The Gentoo app-backup/burp package before 2.1.32 sets the ownership of the PID file directory to the burp account, which... |
| CVE-2017-2860 | HIGH | 7.5 | 1.4% | Jun 1, 2018 | An exploitable denial-of-service vulnerability exists in the lookup entry functionality of KeyTrees in Natus Xltek Neuro... |
| CVE-2017-2858 | HIGH | 7.5 | 1.6% | Jun 1, 2018 | An exploitable denial-of-service vulnerability exists in the traversal of lists functionality of Natus Xltek NeuroWorks ... |
| CVE-2017-2852 | HIGH | 7.5 | 1.4% | Jun 1, 2018 | An exploitable denial-of-service vulnerability exists in the unserialization of lists functionality of Natus Xltek Neuro... |
| CVE-2017-6153 | — | — | 1.7% | Jun 1, 2018 | Features in F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 system that utilizes i... |
| CVE-2017-17171 | — | — | 0.5% | Jun 1, 2018 | Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious para... |
| CVE-2017-16153 | — | — | 1.8% | May 29, 2018 | gaoxuyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in t... |
| CVE-2017-16062 | HIGH | 7.5 | 1.1% | May 29, 2018 | node-tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished b... |
| CVE-2017-16061 | — | — | 1.1% | May 29, 2018 | tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm... |
| CVE-2017-16047 | — | — | 1.3% | May 29, 2018 | mysqljs was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm... |
| CVE-2017-16010 | — | — | 1.0% | May 29, 2018 | i18next is a language translation framework. When using the .init method, passing interpolation options without passing ... |
| CVE-2017-16003 | — | — | 2.3% | May 29, 2018 | windows-build-tools is a module for installing C++ Build Tools for Windows using npm. windows-build-tools versions below... |
| CVE-2017-1768 | MEDIUM | 4.3 | 1.4% | May 29, 2018 | IBM Security Guardium Big Data Intelligence (SonarG) 3.1 generates an error message that includes sensitive information ... |
| CVE-2017-14185 | — | — | 1.3% | May 25, 2018 | An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows S... |
| CVE-2017-9641 | — | — | 0.9% | May 25, 2018 | PI Coresight 2016 R2 contains a cross-site request forgery vulnerability that may allow access to the PI system. OSIsoft... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now