2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-17478 | — | — | 0.5% | Feb 27, 2018 | An XSS issue was discovered in Designer Studio in Pegasystems Pega Platform 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2, 7.2.1, and... |
| CVE-2017-16770 | — | — | 1.9% | Feb 27, 2018 | File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Sur... |
| CVE-2017-16767 | — | — | 1.0% | Feb 27, 2018 | Cross-site scripting (XSS) vulnerability in User Profile in Synology Surveillance Station before 8.1.2-5469 allows remot... |
| CVE-2017-15693 | — | — | 2.6% | Feb 27, 2018 | In Apache Geode before v1.4.0, the Geode server stores application objects in serialized form. Certain cluster operation... |
| CVE-2017-15692 | — | — | 5.1% | Feb 27, 2018 | In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an... |
| CVE-2017-10939 | — | — | — | Feb 27, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-10938 | — | — | — | Feb 27, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-18202 | HIGH | 7 | 0.4% | Feb 27, 2018 | The __oom_reap_task_mm function in mm/oom_kill.c in the Linux kernel before 4.14.4 mishandles gather operations, which a... |
| CVE-2017-16814 | — | — | 1.1% | Feb 26, 2018 | A Directory Traversal issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs by abusing the URL... |
| CVE-2017-16813 | — | — | 0.8% | Feb 26, 2018 | A denial-of-service issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs when a user uploads ... |
| CVE-2017-16229 | — | — | 1.0% | Feb 26, 2018 | In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in s... |
| CVE-2017-11635 | — | — | 1.2% | Feb 26, 2018 | An issue was discovered on Wireless IP Camera 360 devices. Attackers can read recordings by navigating to /mnt/idea0 or ... |
| CVE-2017-11634 | — | — | 2.4% | Feb 26, 2018 | An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly encoded admin password... |
| CVE-2017-11633 | — | — | 1.4% | Feb 26, 2018 | An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover RTSP credentials by connecting ... |
| CVE-2017-11632 | — | — | 2.5% | Feb 26, 2018 | An issue was discovered on Wireless IP Camera 360 devices. A root account with a known SHA-512 password hash exists, whi... |
| CVE-2017-18195 | MEDIUM | 5.3 | 11.1% | Feb 26, 2018 | An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An unauthenticated user can enum... |
| CVE-2017-18201 | — | — | 3.4% | Feb 26, 2018 | An issue was discovered in GNU libcdio before 2.0.0. There is a double free in get_cdtext_generic() in lib/driver/_cdio_... |
| CVE-2017-1774 | — | — | 1.7% | Feb 26, 2018 | IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users. The info... |
| CVE-2017-9426 | — | — | 2.8% | Feb 26, 2018 | ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag o... |
| CVE-2017-9425 | — | — | 1.4% | Feb 26, 2018 | The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action. |
| CVE-2017-18200 | — | — | 0.3% | Feb 26, 2018 | The f2fs implementation in the Linux kernel before 4.14 mishandles reference counts associated with f2fs_wait_discard_bi... |
| CVE-2017-15696 | — | — | 2.0% | Feb 26, 2018 | When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properl... |
| CVE-2017-18199 | — | — | 3.5% | Feb 24, 2018 | realloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer... |
| CVE-2017-18198 | — | — | 3.6% | Feb 24, 2018 | print_iso9660_recurse in iso-info.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (he... |
| CVE-2017-18197 | — | — | 3.0% | Feb 24, 2018 | In mxGraphViewImageReader.java in mxGraph before 3.7.6, the SAXParserFactory instance in convert() is missing flags to p... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now