2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-1000440 | — | — | — | Dec 30, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14976. Reason: This candidate is a reservation ... |
| CVE-2017-1000436 | — | — | — | Dec 30, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14975. Reason: This candidate is a reservation ... |
| CVE-2017-1000435 | — | — | — | Dec 30, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-16227. Reason: This candidate is a reservation ... |
| CVE-2017-17995 | — | — | 0.5% | Dec 30, 2017 | Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request. |
| CVE-2017-17994 | — | — | 0.5% | Dec 30, 2017 | Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria r... |
| CVE-2017-17993 | — | — | 0.5% | Dec 30, 2017 | Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition_deduction requ... |
| CVE-2017-17992 | — | — | 1.7% | Dec 30, 2017 | Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index... |
| CVE-2017-17991 | — | — | 0.5% | Dec 30, 2017 | Biometric Shift Employee Management System has XSS via the expense_name parameter in an index.php?user=expenses request. |
| CVE-2017-17990 | — | — | 0.5% | Dec 30, 2017 | Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action. |
| CVE-2017-17989 | — | — | 0.5% | Dec 30, 2017 | Biometric Shift Employee Management System has XSS via the index.php holiday_name parameter in an edit_holiday action. |
| CVE-2017-17988 | — | — | 0.5% | Dec 30, 2017 | PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_add.php event_title parameter. |
| CVE-2017-17987 | — | — | 1.0% | Dec 30, 2017 | PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails_edit.php. |
| CVE-2017-17986 | — | — | 0.5% | Dec 30, 2017 | PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter. |
| CVE-2017-17985 | — | — | 0.5% | Dec 30, 2017 | PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter. |
| CVE-2017-17984 | — | — | 0.5% | Dec 30, 2017 | PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter. |
| CVE-2017-17983 | — | — | 0.9% | Dec 30, 2017 | PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem_id parameter. |
| CVE-2017-17982 | — | — | 0.4% | Dec 30, 2017 | PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php. |
| CVE-2017-17981 | — | — | 0.5% | Dec 30, 2017 | PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter. |
| CVE-2017-17975 | — | — | 0.4% | Dec 30, 2017 | Use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel through 4.14.10 a... |
| CVE-2017-17901 | — | — | 2.3% | Dec 29, 2017 | ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service (CPU consumption) via a flood of IP packets... |
| CVE-2017-17974 | — | — | 1.7% | Dec 29, 2017 | BA SYSTEMS BAS Web on BAS920 devices (with Firmware 01.01.00*, HTTPserv 00002, and Script 02.*) and ISC2000 devices allo... |
| CVE-2017-17910 | — | — | 0.3% | Dec 29, 2017 | On Hoermann BiSecur devices before 2018, a vulnerability can be exploited by recording a single radio transmission. An a... |
| CVE-2017-17971 | — | — | 1.0% | Dec 29, 2017 | The test_sql_and_script_inject function in htdocs/main.inc.php in Dolibarr ERP/CRM 6.0.4 blocks some event attributes bu... |
| CVE-2017-17920 | — | — | 1.5% | Dec 29, 2017 | SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execut... |
| CVE-2017-17968 | — | — | 39.4% | Dec 29, 2017 | A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remot... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now