2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-18083 | — | — | 0.6% | Feb 2, 2018 | The editinword resource in Atlassian Confluence Server before version 6.4.0 allows remote attackers to inject arbitrary ... |
| CVE-2017-18082 | — | — | 0.6% | Feb 2, 2018 | The plan configure branches resource in Atlassian Bamboo before version 6.2.3 allows remote attackers to inject arbitrar... |
| CVE-2017-18081 | — | — | 0.8% | Feb 2, 2018 | The signupUser resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to inject arbitrary HTML or Jav... |
| CVE-2017-18080 | — | — | 0.5% | Feb 2, 2018 | The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security s... |
| CVE-2017-18042 | — | — | 0.7% | Feb 2, 2018 | The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user ... |
| CVE-2017-18041 | — | — | 0.6% | Feb 2, 2018 | The viewDeploymentVersionJiraIssuesDialog resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to i... |
| CVE-2017-18040 | — | — | 0.6% | Feb 2, 2018 | The viewDeploymentVersionCommits resource in Atlassian Bamboo before version 6.2.0 allows remote attackers to inject arb... |
| CVE-2017-18039 | — | — | 1.1% | Feb 2, 2018 | The IncomingMailServers resource in Atlassian Jira from version 6.2.1 before version 7.4.4 allows remote attackers to in... |
| CVE-2017-18038 | — | — | 1.5% | Feb 2, 2018 | The repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote attackers to read the ... |
| CVE-2017-18037 | — | — | 1.3% | Feb 2, 2018 | The git repository tag rest resource in Atlassian Bitbucket Server from version 3.7.0 before 4.14.11 (the fixed version ... |
| CVE-2017-18036 | — | — | 0.9% | Feb 2, 2018 | The Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote attackers to determine i... |
| CVE-2017-18035 | — | — | 0.8% | Feb 2, 2018 | The /rest/review-coverage-chart/1.0/data/<repository_name>/.json resource in Atlassian Fisheye and Crucible before versi... |
| CVE-2017-18034 | — | — | 0.6% | Feb 2, 2018 | The source browse resource in Atlassian Fisheye and Crucible before version 4.5.1 and 4.6.0 allows allows remote attacke... |
| CVE-2017-14180 | — | — | 0.4% | Feb 2, 2018 | Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to cre... |
| CVE-2017-14179 | — | — | 0.4% | Feb 2, 2018 | Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create cert... |
| CVE-2017-14178 | — | — | 1.8% | Feb 2, 2018 | In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and theref... |
| CVE-2017-14177 | — | — | 0.4% | Feb 2, 2018 | Apport through 2.20.7 does not properly handle core dumps from setuid binaries allowing local users to create certain fi... |
| CVE-2017-18120 | — | — | 1.8% | Feb 2, 2018 | A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-s... |
| CVE-2017-2297 | — | — | 0.6% | Feb 1, 2018 | Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled ... |
| CVE-2017-2296 | — | — | 0.9% | Feb 1, 2018 | In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Clas... |
| CVE-2017-2293 | — | — | 0.7% | Feb 1, 2018 | Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the p... |
| CVE-2017-3160 | — | — | 3.8% | Feb 1, 2018 | After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, th... |
| CVE-2017-16861 | — | — | 2.0% | Feb 1, 2018 | It was possible for double OGNL evaluation in certain redirect action and in WebWork URL and Anchor tags in JSP files to... |
| CVE-2017-1000409 | — | — | 1.2% | Feb 1, 2018 | A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH environ... |
| CVE-2017-1000408 | — | — | 1.5% | Feb 1, 2018 | A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environme... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now