2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-18128 | — | — | 1.0% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, improper access control ... |
| CVE-2017-18127 | — | — | 1.4% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD ... |
| CVE-2017-18126 | — | — | 0.9% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MD... |
| CVE-2017-18125 | — | — | 0.7% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MD... |
| CVE-2017-18074 | — | — | 1.3% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9607, MDM9625, MD... |
| CVE-2017-18073 | — | — | 0.9% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon W... |
| CVE-2017-18072 | — | — | 0.9% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MD... |
| CVE-2017-18071 | — | — | 1.3% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MS... |
| CVE-2017-11011 | — | — | 1.3% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, SD... |
| CVE-2017-13678 | — | — | 1.1% | Apr 11, 2018 | Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appl... |
| CVE-2017-13677 | — | — | 5.2% | Apr 11, 2018 | Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A r... |
| CVE-2017-9839 | — | — | 1.1% | Apr 11, 2018 | Dolibarr ERP/CRM is affected by SQL injection in versions before 5.0.4 via product/stats/card.php (type parameter). |
| CVE-2017-9838 | — | — | 0.6% | Apr 11, 2018 | Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting (XSS) vulnerabilities in versions before 5.0.4: ... |
| CVE-2017-18260 | — | — | 1.1% | Apr 11, 2018 | Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.ph... |
| CVE-2017-18259 | — | — | 0.6% | Apr 11, 2018 | Dolibarr ERP/CRM is affected by stored Cross-Site Scripting (XSS) in versions through 7.0.0. |
| CVE-2017-14611 | — | — | 2.0% | Apr 10, 2018 | SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic... |
| CVE-2017-14323 | — | — | 4.5% | Apr 10, 2018 | SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to... |
| CVE-2017-18101 | MEDIUM | 6.5 | 1.1% | Apr 10, 2018 | Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7.... |
| CVE-2017-18100 | — | — | 0.9% | Apr 10, 2018 | The agile wallboard gadget in Atlassian Jira before version 7.8.1 allows remote attackers to inject arbitrary HTML or Ja... |
| CVE-2017-1081 | — | — | 2.7% | Apr 10, 2018 | In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep... |
| CVE-2017-2826 | — | — | 3.4% | Apr 9, 2018 | An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted ... |
| CVE-2017-18258 | MEDIUM | 6.5 | 2.7% | Apr 8, 2018 | The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory con... |
| CVE-2017-18098 | — | — | 0.9% | Apr 6, 2018 | The searchrequest-xml resource in Atlassian Jira before version 7.6.1 allows remote attackers to inject arbitrary HTML o... |
| CVE-2017-18097 | — | — | 0.7% | Apr 6, 2018 | The Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers who can convince a Jir... |
| CVE-2017-14473 | CRITICAL | 10 | 37.3% | Apr 5, 2018 | An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now