2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-2610 | MEDIUM | 5.4 | 1.5% | May 15, 2018 | jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in search suggestions due to impr... |
| CVE-2017-2604 | MEDIUM | 4.3 | 1.4% | May 15, 2018 | In Jenkins before versions 2.44, 2.32.2 low privilege users were able to act on administrative monitors due to them not ... |
| CVE-2017-2603 | LOW | 2.6 | 1.1% | May 15, 2018 | Jenkins before versions 2.44, 2.32.2 is vulnerable to a user data leak in disconnected agents' config.xml API. This coul... |
| CVE-2017-2602 | LOW | 3.1 | 1.6% | May 15, 2018 | jenkins before versions 2.44, 2.32.2 is vulnerable to an improper blacklisting of the Pipeline metadata files in the age... |
| CVE-2017-2612 | MEDIUM | 5.4 | 1.6% | May 15, 2018 | In Jenkins before versions 2.44, 2.32.2 low privilege users were able to override JDK download credentials (SECURITY-392... |
| CVE-2017-2608 | HIGH | 8.8 | 6.3% | May 15, 2018 | Jenkins before versions 2.44, 2.32.2 is vulnerable to a remote code execution vulnerability involving the deserializatio... |
| CVE-2017-2600 | MEDIUM | 4.3 | 1.1% | May 15, 2018 | In jenkins before versions 2.44, 2.32.2 node monitor data could be viewed by low privilege users via the remote API. The... |
| CVE-2017-2815 | HIGH | 8.1 | 0.9% | May 15, 2018 | An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafte... |
| CVE-2017-14439 | HIGH | 7.5 | 1.7% | May 14, 2018 | Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030... |
| CVE-2017-14438 | HIGH | 7.5 | 1.9% | May 14, 2018 | Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030... |
| CVE-2017-14437 | HIGH | 7.5 | 2.2% | May 14, 2018 | An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031... |
| CVE-2017-14436 | HIGH | 7.5 | 2.2% | May 14, 2018 | An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031... |
| CVE-2017-14435 | HIGH | 7.5 | 2.2% | May 14, 2018 | An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031... |
| CVE-2017-14434 | HIGH | 8.8 | 4.5% | May 14, 2018 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031... |
| CVE-2017-14433 | HIGH | 8.8 | 4.8% | May 14, 2018 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031... |
| CVE-2017-14432 | HIGH | 8.8 | 4.5% | May 14, 2018 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031... |
| CVE-2017-12129 | HIGH | 8 | 0.7% | May 14, 2018 | An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1... |
| CVE-2017-12128 | HIGH | 7.5 | 48.1% | May 14, 2018 | An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build ... |
| CVE-2017-12127 | MEDIUM | 4.4 | 0.4% | May 14, 2018 | A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. An at... |
| CVE-2017-12126 | HIGH | 8.8 | 1.0% | May 14, 2018 | An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 buil... |
| CVE-2017-12125 | HIGH | 8.8 | 4.0% | May 14, 2018 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031... |
| CVE-2017-12124 | MEDIUM | 6.5 | 1.9% | May 14, 2018 | An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031... |
| CVE-2017-12123 | HIGH | 8.8 | 1.0% | May 14, 2018 | An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Mo... |
| CVE-2017-12121 | HIGH | 8.8 | 4.3% | May 14, 2018 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031... |
| CVE-2017-12120 | HIGH | 8.8 | 4.3% | May 14, 2018 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now