2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6021 | — | — | 1.7% | May 14, 2018 | In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build ... |
| CVE-2017-16860 | — | — | 0.9% | May 14, 2018 | The invalidRedirectUrl template in Atlassian Application Links before version 5.2.7, from version 5.3.0 before version 5... |
| CVE-2017-6015 | — | — | 0.7% | May 11, 2018 | Without quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk Activation version 4.00.02 ... |
| CVE-2017-18267 | — | — | 1.9% | May 10, 2018 | The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a den... |
| CVE-2017-6293 | — | — | 0.2% | May 10, 2018 | In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where ... |
| CVE-2017-6289 | — | — | 0.2% | May 10, 2018 | In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corr... |
| CVE-2017-18266 | — | — | 2.5% | May 10, 2018 | The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program sp... |
| CVE-2017-2601 | MEDIUM | 5.4 | 2.1% | May 10, 2018 | Jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting in parameter names and descriptio... |
| CVE-2017-14481 | CRITICAL | 9.8 | 5.9% | May 9, 2018 | In the MMM::Agent::Helpers::Network::send_arp function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 ... |
| CVE-2017-14480 | CRITICAL | 9.8 | 6.1% | May 9, 2018 | In the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 ... |
| CVE-2017-14479 | CRITICAL | 9.8 | 6.1% | May 9, 2018 | In the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 ... |
| CVE-2017-14478 | CRITICAL | 9.8 | 6.1% | May 9, 2018 | In the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 ... |
| CVE-2017-14477 | CRITICAL | 9.8 | 6.1% | May 9, 2018 | In the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (f... |
| CVE-2017-14476 | CRITICAL | 9.8 | 6.1% | May 9, 2018 | In the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (f... |
| CVE-2017-14475 | CRITICAL | 9.8 | 6.2% | May 9, 2018 | In the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (f... |
| CVE-2017-14474 | CRITICAL | 9.8 | 6.2% | May 9, 2018 | In the MMM::Agent::Helpers::_execute function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1, a specia... |
| CVE-2017-5175 | — | — | 1.6% | May 9, 2018 | Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a maliciou... |
| CVE-2017-18265 | — | — | 1.7% | May 9, 2018 | Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatib... |
| CVE-2017-2606 | MEDIUM | 4.3 | 1.9% | May 8, 2018 | Jenkins before versions 2.44, 2.32.2 is vulnerable to an information exposure in the internal API that allows access to ... |
| CVE-2017-2611 | MEDIUM | 4.3 | 2.1% | May 8, 2018 | Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-... |
| CVE-2017-2594 | MEDIUM | 5.4 | 2.0% | May 8, 2018 | hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that lea... |
| CVE-2017-2592 | MEDIUM | 5.9 | 0.5% | May 8, 2018 | python-oslo-middleware before versions 3.8.1, 3.19.1, 3.23.1 is vulnerable to an information disclosure. Software using ... |
| CVE-2017-17540 | — | — | 2.1% | May 8, 2018 | The presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows attackers to gain unauthorized read/write access v... |
| CVE-2017-17539 | — | — | 2.1% | May 8, 2018 | The presence of a hardcoded account in Fortinet FortiWLC 7.0.11 and earlier allows attackers to gain unauthorized read/w... |
| CVE-2017-15043 | — | — | 4.2% | May 4, 2018 | A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now