2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7429 | HIGH | 8.8 | 0.9% | Mar 2, 2018 | The certificate upload in NetIQ eDirectory PKI plugin before 8.8.8 Patch 10 Hotfix 1 could be abused to upload JSP code ... |
| CVE-2017-7419 | MEDIUM | 4.6 | 0.8% | Mar 2, 2018 | A OAuth application in NetIQ Access Manager 4.3 before 4.3.2 and 4.2 before 4.2.4 allowed cross site scripting attacks d... |
| CVE-2017-5189 | MEDIUM | 4.3 | 1.2% | Mar 2, 2018 | NetIQ iManager before 3.0.3 delivered a SSL private key in a Java application (JAR file) for authentication to Sentinel,... |
| CVE-2017-14802 | MEDIUM | 5.4 | 1.0% | Mar 2, 2018 | Novell Access Manager Admin Console and IDP servers before 4.3.3 have a URL that could be used by remote attackers to tr... |
| CVE-2017-14801 | MEDIUM | 4.6 | 0.8% | Mar 2, 2018 | Reflected XSS in the NetIQ Access Manager before 4.3.3 allowed attackers to reflect back xss into the called page using ... |
| CVE-2017-1787 | MEDIUM | 4.4 | 0.4% | Mar 2, 2018 | IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administr... |
| CVE-2017-1654 | MEDIUM | 4 | 0.4% | Mar 2, 2018 | IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump f... |
| CVE-2017-15130 | — | — | 2.6% | Mar 2, 2018 | A denial of service flaw was found in dovecot before 2.2.34. An attacker able to generate random SNI server names could ... |
| CVE-2017-14461 | MEDIUM | 5.9 | 17.6% | Mar 2, 2018 | A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resultin... |
| CVE-2017-6932 | — | — | 1.2% | Mar 1, 2018 | Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is us... |
| CVE-2017-6931 | — | — | 1.1% | Mar 1, 2018 | In Drupal versions 8.4.x versions before 8.4.5 the Settings Tray module has a vulnerability that allows users to update ... |
| CVE-2017-6930 | — | — | 1.3% | Mar 1, 2018 | In Drupal versions 8.4.x versions before 8.4.5 when using node access controls with a multilingual site, Drupal marks th... |
| CVE-2017-6929 | — | — | 1.3% | Mar 1, 2018 | A jQuery cross site scripting vulnerability is present when making Ajax requests to untrusted domains. This vulnerabilit... |
| CVE-2017-6928 | — | — | 1.1% | Mar 1, 2018 | Drupal core 7.x versions before 7.57 when using Drupal's private file system, Drupal will check to make sure a user has ... |
| CVE-2017-6927 | — | — | 1.7% | Mar 1, 2018 | Drupal 8.4.x versions before 8.4.5 and Drupal 7.x versions before 7.57 has a Drupal.checkPlain() JavaScript function whi... |
| CVE-2017-6926 | — | — | 1.2% | Mar 1, 2018 | In Drupal versions 8.4.x versions before 8.4.5 users with permission to post comments are able to view content and comme... |
| CVE-2017-18212 | — | — | 1.9% | Mar 1, 2018 | An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex fu... |
| CVE-2017-15134 | — | — | 4.1% | Mar 1, 2018 | A stack buffer overflow flaw was found in the way 389-ds-base 1.3.6.x before 1.3.6.13, 1.3.7.x before 1.3.7.9, 1.4.x bef... |
| CVE-2017-18211 | — | — | 4.1% | Mar 1, 2018 | In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/o... |
| CVE-2017-18210 | — | — | 2.6% | Mar 1, 2018 | In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in Magic... |
| CVE-2017-18209 | — | — | 3.0% | Mar 1, 2018 | In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulner... |
| CVE-2017-9286 | HIGH | 7.8 | 1.2% | Mar 1, 2018 | The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts runnin... |
| CVE-2017-9274 | HIGH | 7.8 | 2.3% | Mar 1, 2018 | A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager w... |
| CVE-2017-9271 | LOW | 3.3 | 0.3% | Mar 1, 2018 | The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to g... |
| CVE-2017-9270 | HIGH | 8.7 | 2.0% | Mar 1, 2018 | In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryp... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now