2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7559 | — | — | 1.7% | Jan 10, 2018 | In Undertow 2.x before 2.0.0.Alpha2, 1.4.x before 1.4.17.Final, and 1.3.x before 1.3.31.Final, it was found that the fix... |
| CVE-2017-12169 | — | — | 1.9% | Jan 10, 2018 | It was found that FreeIPA 4.2.0 and later could disclose password hashes to users having the 'System: Read Stage Users' ... |
| CVE-2017-15717 | — | — | 2.9% | Jan 10, 2018 | A flaw in the way URLs are escaped and encoded in the org.apache.sling.xss.impl.XSSAPIImpl#getValidHref and org.apache.s... |
| CVE-2017-15704 | — | — | — | Jan 10, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-18026 | — | — | 2.8% | Jan 10, 2018 | Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and --debugger flags to the... |
| CVE-2017-9796 | — | — | 1.5% | Jan 10, 2018 | When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions with... |
| CVE-2017-9795 | — | — | 4.2% | Jan 10, 2018 | When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions with... |
| CVE-2017-12622 | — | — | 2.1% | Jan 10, 2018 | When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode clu... |
| CVE-2017-1000428 | — | — | 0.8% | Jan 10, 2018 | flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of $_SERVER['PHP_SELF'] to build... |
| CVE-2017-1000465 | — | — | 0.8% | Jan 9, 2018 | Sulu-standard version 1.6.6 is vulnerable to stored cross-site scripting vulnerability, within the page creation page, w... |
| CVE-2017-9663 | — | — | 1.1% | Jan 9, 2018 | An Cleartext Storage of Sensitive Information issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS ... |
| CVE-2017-16740 | — | — | 7.1% | Jan 9, 2018 | A Buffer Overflow issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1400 Controllers, Series B and C ... |
| CVE-2017-15131 | — | — | 0.3% | Jan 9, 2018 | It was found that system umask policy is not being honored when creating XDG user directories, since Xsession sources xd... |
| CVE-2017-15124 | — | — | 2.8% | Jan 9, 2018 | VNC server implementation in Quick Emulator (QEMU) 2.11.0 and older was found to be vulnerable to an unbounded memory al... |
| CVE-2017-12697 | — | — | 1.4% | Jan 9, 2018 | A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful... |
| CVE-2017-12695 | — | — | 1.9% | Jan 9, 2018 | An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Suc... |
| CVE-2017-1000429 | — | — | 0.8% | Jan 9, 2018 | rui Li finecms 5.0.10 is vulnerable to a reflected XSS in the file Weixin.php. |
| CVE-2017-1671 | — | — | 2.7% | Jan 9, 2018 | IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to traverse directories on the system. ... |
| CVE-2017-1670 | — | — | 1.9% | Jan 9, 2018 | IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to SQL injection. A remote attacker could send speciall... |
| CVE-2017-1668 | — | — | 1.0% | Jan 9, 2018 | IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to conduct phishing attacks, using an o... |
| CVE-2017-1666 | — | — | 1.7% | Jan 9, 2018 | IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to a XML External Entity Injection (XXE) attack when pr... |
| CVE-2017-1612 | — | — | 0.4% | Jan 9, 2018 | IBM WebSphere MQ 7.0, 7.1, 7.5, 8.0, and 9.0 service trace module could be used to execute untrusted code under 'mqm' us... |
| CVE-2017-1493 | — | — | 0.7% | Jan 9, 2018 | IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have acces... |
| CVE-2017-1000415 | — | — | 0.5% | Jan 9, 2018 | MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resul... |
| CVE-2017-7998 | — | — | 2.0% | Jan 8, 2018 | Multiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject arbitrary w... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now