2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-17137 | — | — | 0.1% | Mar 5, 2018 | PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP63... |
| CVE-2017-17136 | — | — | 0.1% | Mar 5, 2018 | PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP63... |
| CVE-2017-17135 | — | — | 0.2% | Mar 5, 2018 | PEM module of Huawei DP300 V500R002C00; IPS Module V500R001C00; V500R001C30; NGFW Module V500R001C00; V500R002C00; NIP63... |
| CVE-2017-17134 | — | — | 0.2% | Mar 5, 2018 | XML parser in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00... |
| CVE-2017-17133 | — | — | 0.2% | Mar 5, 2018 | Huawei VP9660 V500R002C10 has a null pointer reference vulnerability in license module due to insufficient verification.... |
| CVE-2017-17132 | — | — | 0.2% | Mar 5, 2018 | Huawei VP9660 V500R002C10 has a uncontrolled format string vulnerability when the license module output the log informat... |
| CVE-2017-17131 | — | — | 0.8% | Mar 5, 2018 | Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V600R006C00; TE50 V600R006C00; TE60 V100R001... |
| CVE-2017-18216 | — | — | 0.5% | Mar 5, 2018 | In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL point... |
| CVE-2017-18215 | — | — | 2.3% | Mar 5, 2018 | xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to crashes or ... |
| CVE-2017-17428 | — | — | 15.0% | Mar 5, 2018 | Cavium Nitrox SSL, Nitrox V SSL, and TurboSSL software development kits (SDKs) allow remote attackers to decrypt TLS cip... |
| CVE-2017-16922 | — | — | 1.4% | Mar 5, 2018 | In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directo... |
| CVE-2017-7633 | — | — | 1.3% | Mar 5, 2018 | QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this ma... |
| CVE-2017-7437 | MEDIUM | 4.6 | 0.8% | Mar 5, 2018 | NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via the "type" and "acco... |
| CVE-2017-7427 | MEDIUM | 5.4 | 0.8% | Mar 5, 2018 | Multiple cross site scripting attacks were found in the Identity Manager Plug-in, hosted on iManager 2.7.7.7, before Ide... |
| CVE-2017-18214 | HIGH | 7.5 | 3.7% | Mar 4, 2018 | The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string... |
| CVE-2017-18213 | — | — | 1.4% | Mar 4, 2018 | In Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges. |
| CVE-2017-9285 | MEDIUM | 5.4 | 1.2% | Mar 2, 2018 | NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted acces... |
| CVE-2017-9280 | MEDIUM | 4.3 | 1.1% | Mar 2, 2018 | Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potenti... |
| CVE-2017-9279 | LOW | 2 | 0.9% | Mar 2, 2018 | NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes ... |
| CVE-2017-9278 | LOW | 3.3 | 0.9% | Mar 2, 2018 | The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password,... |
| CVE-2017-9277 | MEDIUM | 4.2 | 1.4% | Mar 2, 2018 | The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open... |
| CVE-2017-9276 | MEDIUM | 5.4 | 0.8% | Mar 2, 2018 | Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be re... |
| CVE-2017-9267 | MEDIUM | 6.5 | 1.0% | Mar 2, 2018 | In Novell eDirectory before 9.0.3.1 the LDAP interface was not strictly enforcing cipher restrictions allowing weaker ci... |
| CVE-2017-7438 | MEDIUM | 4.6 | 0.6% | Mar 2, 2018 | NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed cross site scripting attacks via javascript DOM modif... |
| CVE-2017-7434 | LOW | 3.3 | 0.9% | Mar 2, 2018 | In the JDBC driver of NetIQ Identity Manager before 4.6 sending out incorrect XML configurations could result in passwor... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now