2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-17929 | — | — | 0.5% | Dec 27, 2017 | PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter. |
| CVE-2017-17928 | — | — | 1.2% | Dec 27, 2017 | PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter. |
| CVE-2017-17927 | — | — | 1.5% | Dec 27, 2017 | PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a cra... |
| CVE-2017-17926 | — | — | 1.1% | Dec 27, 2017 | PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attacke... |
| CVE-2017-17925 | — | — | 0.5% | Dec 27, 2017 | PHP Scripts Mall Professional Service Script has XSS via the admin/general_settingupd.php website_title parameter. |
| CVE-2017-17924 | — | — | 1.5% | Dec 27, 2017 | PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the i... |
| CVE-2017-17915 | — | — | 1.8% | Dec 27, 2017 | In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, rela... |
| CVE-2017-17914 | — | — | 2.0% | Dec 27, 2017 | In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows att... |
| CVE-2017-17913 | — | — | 1.6% | Dec 27, 2017 | In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, ... |
| CVE-2017-17912 | — | — | 1.8% | Dec 27, 2017 | In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, ... |
| CVE-2017-17911 | — | — | 0.6% | Dec 27, 2017 | packages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact request, ... |
| CVE-2017-17909 | — | — | 0.5% | Dec 27, 2017 | PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter. |
| CVE-2017-17908 | — | — | 0.5% | Dec 27, 2017 | PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general. |
| CVE-2017-17907 | — | — | 0.7% | Dec 27, 2017 | PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php webs... |
| CVE-2017-17906 | — | — | 1.2% | Dec 27, 2017 | PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter. |
| CVE-2017-17905 | — | — | 0.5% | Dec 27, 2017 | PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php. |
| CVE-2017-17904 | — | — | 0.5% | Dec 27, 2017 | FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_pro... |
| CVE-2017-17903 | — | — | 0.5% | Dec 27, 2017 | FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel. |
| CVE-2017-17900 | — | — | 1.9% | Dec 27, 2017 | SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbi... |
| CVE-2017-17899 | — | — | 1.9% | Dec 27, 2017 | SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers... |
| CVE-2017-17898 | — | — | 2.1% | Dec 27, 2017 | Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtai... |
| CVE-2017-17897 | — | — | 1.9% | Dec 27, 2017 | SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute a... |
| CVE-2017-17896 | — | — | 0.7% | Dec 27, 2017 | Readymade Job Site Script has XSS via the keyword parameter to the /job URI. |
| CVE-2017-17895 | — | — | 1.2% | Dec 27, 2017 | Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI. |
| CVE-2017-17894 | — | — | 0.5% | Dec 27, 2017 | Readymade Job Site Script has CSRF via the /job URI. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now