2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-13229 | — | — | 1.8% | Feb 12, 2018 | A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.... |
| CVE-2017-13228 | — | — | 1.5% | Feb 12, 2018 | In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an uns... |
| CVE-2017-18179 | — | — | 2.8% | Feb 12, 2018 | Progress Sitefinity 9.1 uses wrap_access_token as a non-expiring authentication token that remains valid after a passwor... |
| CVE-2017-18178 | — | — | 2.3% | Feb 12, 2018 | Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the r... |
| CVE-2017-18177 | — | — | 0.7% | Feb 12, 2018 | Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is f... |
| CVE-2017-18176 | — | — | 0.7% | Feb 12, 2018 | Progress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the same origin as the appl... |
| CVE-2017-18175 | — | — | 0.7% | Feb 12, 2018 | Progress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka Templateconfiguration), as demons... |
| CVE-2017-18174 | — | — | 3.4% | Feb 11, 2018 | In the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregist... |
| CVE-2017-1000510 | — | — | 0.8% | Feb 9, 2018 | Croogo version 2.3.1-17-g6f82e6c contains a Cross Site Scripting (XSS) vulnerability in Page name that can result in exe... |
| CVE-2017-1000509 | — | — | 0.9% | Feb 9, 2018 | Dolibarr version 6.0.2 contains a Cross Site Scripting (XSS) vulnerability in Product details that can result in executi... |
| CVE-2017-1000508 | — | — | 1.1% | Feb 9, 2018 | Invoice Plane version 1.5.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Client's details that can... |
| CVE-2017-1000507 | — | — | 0.8% | Feb 9, 2018 | Canvs Canvas version 3.4.2 contains a Cross Site Scripting (XSS) vulnerability in User's details that can result in deni... |
| CVE-2017-1000506 | — | — | 1.1% | Feb 9, 2018 | Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result ... |
| CVE-2017-0911 | — | — | 0.5% | Feb 9, 2018 | Twitter Kit for iOS versions 3.0 to 3.2.1 is vulnerable to a callback verification flaw in the "Login with Twitter" comp... |
| CVE-2017-10690 | — | — | 1.0% | Feb 9, 2018 | In previous versions of Puppet Agent it was possible for the agent to retrieve facts from an environment that it was not... |
| CVE-2017-10689 | — | — | 0.4% | Feb 9, 2018 | In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5... |
| CVE-2017-1761 | — | — | 1.0% | Feb 9, 2018 | IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to em... |
| CVE-2017-15914 | — | — | 1.9% | Feb 8, 2018 | Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.... |
| CVE-2017-6227 | — | — | 0.6% | Feb 8, 2018 | A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before ... |
| CVE-2017-6225 | — | — | 1.5% | Feb 8, 2018 | Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products run... |
| CVE-2017-17659 | — | — | 3.9% | Feb 8, 2018 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backu... |
| CVE-2017-17658 | — | — | 3.9% | Feb 8, 2018 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backu... |
| CVE-2017-17657 | — | — | 3.9% | Feb 8, 2018 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backu... |
| CVE-2017-17656 | — | — | 3.9% | Feb 8, 2018 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backu... |
| CVE-2017-17655 | — | — | 3.9% | Feb 8, 2018 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backu... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now