2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12464 | — | — | 1.6% | Feb 7, 2018 | ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (NULL pointer d... |
| CVE-2017-12463 | — | — | 1.4% | Feb 7, 2018 | Memory leak in the ccnl_app_RX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cau... |
| CVE-2017-12412 | — | — | 1.3% | Feb 7, 2018 | ccn-lite-ccnb2xml in CCN-lite before 2.0.0 allows context-dependent attackers to have unspecified impact via a crafted f... |
| CVE-2017-17482 | — | — | 0.6% | Feb 7, 2018 | An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A ... |
| CVE-2017-17663 | — | — | 2.5% | Feb 6, 2018 | The htpasswd implementation of mini_httpd before v1.28 and of thttpd before v2.28 is affected by a buffer overflow that ... |
| CVE-2017-6201 | — | — | 1.9% | Feb 6, 2018 | A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote ... |
| CVE-2017-6200 | — | — | 2.4% | Feb 6, 2018 | Sandstorm before build 0.203 allows remote attackers to read any specified file under /etc or /run via the sandbox backu... |
| CVE-2017-6199 | — | — | 3.0% | Feb 6, 2018 | A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address... |
| CVE-2017-6198 | — | — | 1.4% | Feb 6, 2018 | The Supervisor in Sandstorm doesn't set and enforce the resource limits of a process. This allows remote attackers to ca... |
| CVE-2017-17996 | — | — | 5.2% | Feb 6, 2018 | A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise <= 10.3.14. The ... |
| CVE-2017-6279 | — | — | 0.2% | Feb 6, 2018 | NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may caus... |
| CVE-2017-6258 | — | — | 0.2% | Feb 6, 2018 | NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may caus... |
| CVE-2017-6169 | — | — | 1.4% | Feb 6, 2018 | In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature ma... |
| CVE-2017-9414 | — | — | 15.7% | Feb 5, 2018 | Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote atta... |
| CVE-2017-15536 | — | — | 0.9% | Feb 5, 2018 | An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. Several web application vulnerabilit... |
| CVE-2017-8783 | — | — | 0.9% | Feb 4, 2018 | Synacor Zimbra Collaboration Suite (ZCS) before 8.7.10 has Persistent XSS. |
| CVE-2017-17703 | — | — | 1.0% | Feb 4, 2018 | Synacor Zimbra Collaboration Suite (ZCS) before 8.8.3 has Persistent XSS. |
| CVE-2017-18123 | — | — | 2.6% | Feb 3, 2018 | The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads... |
| CVE-2017-17108 | — | — | 2.2% | Feb 3, 2018 | Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform version 8.7 and earlier could al... |
| CVE-2017-5727 | — | — | 0.3% | Feb 2, 2018 | Pointer dereference in subsystem in Intel Graphics Driver 15.40.x.x, 15.45.x.x, 15.46.x.x allows unprivileged user to el... |
| CVE-2017-18122 | — | — | 1.1% | Feb 2, 2018 | A signature-validation bypass issue was discovered in SimpleSAMLphp through 1.14.16. A SimpleSAMLphp Service Provider us... |
| CVE-2017-18121 | — | — | 1.2% | Feb 2, 2018 | The consentAdmin module in SimpleSAMLphp through 1.14.15 is vulnerable to a Cross-Site Scripting attack, allowing an att... |
| CVE-2017-18086 | — | — | 0.8% | Feb 2, 2018 | Various resources in Atlassian Confluence Server before version 6.4.2 allow remote attackers to inject arbitrary HTML or... |
| CVE-2017-18085 | — | — | 0.8% | Feb 2, 2018 | The viewdefaultdecorator resource in Atlassian Confluence Server before version 6.6.1 allows remote attackers to inject ... |
| CVE-2017-18084 | — | — | 0.6% | Feb 2, 2018 | The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now