2017 CVE Vulnerabilities
17,104 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-1773 | — | — | 0.3% | Jan 31, 2018 | IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS re... |
| CVE-2017-1233 | — | — | 0.3% | Jan 31, 2018 | IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write acc... |
| CVE-2017-16858 | — | — | 0.6% | Jan 31, 2018 | The 'crowd-application' plugin module (notably used by the Google Apps plugin) in Atlassian Crowd from version 1.5.0 bef... |
| CVE-2017-15706 | — | — | 6.2% | Jan 31, 2018 | As part of the fix for bug 61201, the documentation for Apache Tomcat 9.0.0.M22 to 9.0.1, 8.5.16 to 8.5.23, 8.0.45 to 8.... |
| CVE-2017-15698 | — | — | 3.6% | Jan 31, 2018 | When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 ... |
| CVE-2017-1000411 | — | — | 1.6% | Jan 31, 2018 | OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw ... |
| CVE-2017-1000141 | — | — | 0.8% | Jan 30, 2018 | An issue was discovered in Mahara before 18.10.0. It mishandled user requests that could discontinue a user's ability to... |
| CVE-2017-1731 | — | — | 2.9% | Jan 30, 2018 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Admin... |
| CVE-2017-17969 | — | — | 5.0% | Jan 30, 2018 | Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows r... |
| CVE-2017-9513 | — | — | 0.7% | Jan 29, 2018 | Several rest inline action resources of Atlassian Activity Streams before version 6.3.0 allows remote authenticated atta... |
| CVE-2017-7516 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1197. Reason: This candidate is a duplicate of C... |
| CVE-2017-3739 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-17079 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-17078 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-17077 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-17076 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-17075 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-17074 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-17073 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-17072 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-17071 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-17070 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-15133 | — | — | 1.9% | Jan 29, 2018 | A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to... |
| CVE-2017-12626 | HIGH | 7.5 | 10.2% | Jan 29, 2018 | Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: 1) Infinite Loops while parsin... |
| CVE-2017-1000356 | — | — | 7.1% | Jan 29, 2018 | Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an issue in the Jenkins user datab... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now