2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-17455 | — | — | 0.6% | Feb 20, 2018 | Mahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to being forced, via a man-in... |
| CVE-2017-17454 | — | — | 0.7% | Feb 20, 2018 | Mahara 16.10 before 16.10.7 and 17.04 before 17.04.5 and 17.10 before 17.10.2 have a Cross Site Scripting (XSS) vulnerab... |
| CVE-2017-10963 | — | — | 0.9% | Feb 20, 2018 | In Knox SDS IAM (Identity Access Management) and EMM (Enterprise Mobility Management) 16.11 on Samsung mobile devices, a... |
| CVE-2017-6193 | — | — | 7.8% | Feb 20, 2018 | Buffer overflow in APNGDis 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arb... |
| CVE-2017-6192 | — | — | 7.1% | Feb 20, 2018 | Buffer overflow in APNGDis 2.8 and earlier allows a remote attackers to cause denial of service and possibly execute arb... |
| CVE-2017-16356 | — | — | 2.3% | Feb 20, 2018 | Reflected XSS in Kubik-Rubik SIGE (aka Simple Image Gallery Extended) before 3.3.0 allows attackers to execute JavaScrip... |
| CVE-2017-18192 | — | — | 1.2% | Feb 20, 2018 | smart/calculator/gallerylock/CalculatorActivity.java in the "Photo,Video Locker-Calculator" application through 18 for A... |
| CVE-2017-16835 | — | — | 0.7% | Feb 20, 2018 | The "Photo,Video Locker-Calculator" application 12.0 for Android has android:allowBackup="true" in AndroidManifest.xml, ... |
| CVE-2017-7376 | CRITICAL | 9.8 | 23.3% | Feb 19, 2018 | Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port v... |
| CVE-2017-7375 | CRITICAL | 9.8 | 2.6% | Feb 19, 2018 | A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request en... |
| CVE-2017-17101 | — | — | 1.6% | Feb 19, 2018 | An issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP Camera. An unprotected... |
| CVE-2017-16670 | — | — | 1.7% | Feb 19, 2018 | The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted re... |
| CVE-2017-18191 | — | — | 3.9% | Feb 19, 2018 | An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an e... |
| CVE-2017-12609 | — | — | — | Feb 19, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-18095 | — | — | 1.1% | Feb 19, 2018 | The SnippetRPCServiceImpl class in Atlassian Crucible before version 4.5.1 (the fixed version 4.5.x) and before 4.6.0 al... |
| CVE-2017-18093 | — | — | 0.9% | Feb 19, 2018 | Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 ... |
| CVE-2017-18092 | — | — | 0.7% | Feb 19, 2018 | The print snippet resource in Atlassian Crucible before version 4.4.3 (the fixed version for 4.4.x) and before 4.5.0 all... |
| CVE-2017-16756 | — | — | 0.6% | Feb 19, 2018 | An issue was discovered in Userscape HelpSpot before 4.7.2. A cross-site request forgery vulnerability exists on POST re... |
| CVE-2017-16755 | — | — | 0.9% | Feb 19, 2018 | An issue was discovered in Userscape HelpSpot before 4.7.2. A reflected cross-site scripting vulnerability exists in the... |
| CVE-2017-15712 | — | — | 2.6% | Feb 19, 2018 | Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Ooz... |
| CVE-2017-16924 | — | — | 8.9% | Feb 19, 2018 | Remote Information Disclosure and Escalation of Privileges in ManageEngine Desktop Central MSP 10.0.137 allows attackers... |
| CVE-2017-18091 | — | — | 0.9% | Feb 16, 2018 | The admin backupprogress action in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and... |
| CVE-2017-18090 | — | — | 0.9% | Feb 16, 2018 | Various resources in Atlassian Fisheye before version 4.5.1 (the fixed version for 4.5.x) and before version 4.6.0 allow... |
| CVE-2017-18089 | — | — | 0.7% | Feb 16, 2018 | The view review history resource in Atlassian Crucible before version 4.4.3 (the fixed version for 4.4.x) and 4.5.0 allo... |
| CVE-2017-18190 | — | — | 3.0% | Feb 16, 2018 | A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attacke... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now