2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-1000443 | — | — | 1.1% | Jan 2, 2018 | Eleix Openhacker version 0.1.47 is vulnerable to a XSS vulnerability in the bank transactions component resulting in arb... |
| CVE-2017-1000442 | — | — | 0.5% | Jan 2, 2018 | Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace |
| CVE-2017-9966 | — | — | 1.6% | Jan 2, 2018 | A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. ... |
| CVE-2017-9965 | — | — | 4.7% | Jan 2, 2018 | An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2... |
| CVE-2017-9964 | — | — | 2.0% | Jan 2, 2018 | A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sn... |
| CVE-2017-18015 | — | — | 1.5% | Jan 2, 2018 | The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter. |
| CVE-2017-18013 | — | — | 2.9% | Jan 1, 2018 | In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by... |
| CVE-2017-18012 | — | — | 1.5% | Jan 1, 2018 | The Z-URL Preview plugin 1.6.1 for WordPress has XSS via the class.zlinkpreview.php url parameter. |
| CVE-2017-18011 | — | — | 1.6% | Jan 1, 2018 | The MyCBGenie Affiliate Ads for Clickbank Products plugin through 1.6 for WordPress has XSS via the text_ads_ajax.php bo... |
| CVE-2017-18010 | — | — | 1.4% | Jan 1, 2018 | The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/cus... |
| CVE-2017-18009 | — | — | 2.3% | Jan 1, 2018 | In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodec... |
| CVE-2017-18008 | — | — | 2.6% | Jan 1, 2018 | In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c. |
| CVE-2017-18006 | — | — | 0.7% | Jan 1, 2018 | netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447. |
| CVE-2017-18004 | — | — | 0.6% | Dec 31, 2017 | Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint. |
| CVE-2017-18001 | — | — | 13.7% | Dec 31, 2017 | Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the de... |
| CVE-2017-17704 | — | — | 1.0% | Dec 31, 2017 | A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction... |
| CVE-2017-17089 | — | — | 0.8% | Dec 30, 2017 | custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the descript... |
| CVE-2017-14855 | — | — | 1.4% | Dec 30, 2017 | Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to... |
| CVE-2017-17997 | — | — | 1.8% | Dec 30, 2017 | In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissecto... |
| CVE-2017-12813 | — | — | 0.6% | Dec 30, 2017 | PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section. |
| CVE-2017-12812 | — | — | 0.6% | Dec 30, 2017 | PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab. |
| CVE-2017-12811 | — | — | 0.6% | Dec 30, 2017 | PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item. |
| CVE-2017-12810 | — | — | 0.6% | Dec 30, 2017 | PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel. |
| CVE-2017-1000447 | — | — | — | Dec 30, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-15955. Reason: This candidate is a reservation ... |
| CVE-2017-1000446 | — | — | — | Dec 30, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-15954. Reason: This candidate is a reservation ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now