2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12701 | — | — | 1.3% | Apr 17, 2018 | BMC Medical Luna CPAP Machines released prior to July 1, 2017, contain an improper input validation vulnerability which ... |
| CVE-2017-18102 | MEDIUM | 5.4 | 0.9% | Apr 17, 2018 | The wiki markup component of atlassian-renderer from version 8.0.0 before version 8.0.22 allows remote attackers to inje... |
| CVE-2017-6323 | — | — | 0.5% | Apr 16, 2018 | The Symantec Management Console prior to ITMS 8.1 RU1, ITMS 8.0_POST_HF6, and ITMS 7.6_POST_HF7 has an issue whereby XML... |
| CVE-2017-10140 | — | — | 0.6% | Apr 16, 2018 | Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 might allow local users to gain ... |
| CVE-2017-0372 | — | — | 11.7% | Apr 13, 2018 | Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in mul... |
| CVE-2017-0370 | — | — | 1.4% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw were Spam blacklist is ineffective on encoded URLs inside fil... |
| CVE-2017-0369 | — | — | 1.2% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw, allowing a sysops to undelete pages, although the page is pr... |
| CVE-2017-0368 | — | — | 1.5% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw making rawHTML mode apply to system messages. |
| CVE-2017-0367 | — | — | 1.9% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 contains an unsafe use of temporary directory, where having LocalisationCache directory... |
| CVE-2017-0366 | — | — | 1.3% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values i... |
| CVE-2017-0365 | — | — | 1.2% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText() with non-d... |
| CVE-2017-0364 | — | — | 1.1% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where Special:Search allows redirects to any interwiki link. |
| CVE-2017-0363 | — | — | 1.1% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 has a flaw where Special:UserLogin?returnto=interwiki:foo will redirect to ex... |
| CVE-2017-0362 | — | — | 0.8% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where the "Mark all pages visited" on the watchlist does not ... |
| CVE-2017-0361 | — | — | 0.5% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain pass... |
| CVE-2017-0359 | CRITICAL | 9.8 | 1.9% | Apr 13, 2018 | diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive. |
| CVE-2017-0358 | HIGH | 7.8 | 2.3% | Apr 13, 2018 | Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environm... |
| CVE-2017-0357 | — | — | 3.0% | Apr 13, 2018 | A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading t... |
| CVE-2017-0356 | — | — | 3.5% | Apr 13, 2018 | A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormB... |
| CVE-2017-6158 | — | — | 1.1% | Apr 13, 2018 | In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling ... |
| CVE-2017-6156 | — | — | 0.9% | Apr 13, 2018 | When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tun... |
| CVE-2017-6155 | — | — | 1.3% | Apr 13, 2018 | On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may res... |
| CVE-2017-6148 | — | — | 1.3% | Apr 13, 2018 | Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.... |
| CVE-2017-6143 | — | — | 0.4% | Apr 13, 2018 | X509 certificate verification was not correctly implemented in the IP Intelligence Subscription and IP Intelligence feed... |
| CVE-2017-6910 | — | — | 2.0% | Apr 12, 2018 | The HTTP and WebSocket engine components in the server in Kaazing Gateway before 4.5.3 hotfix-1, Gateway - JMS Edition b... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now