2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-1558 | — | — | 1.0% | Dec 13, 2017 | IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirec... |
| CVE-2017-1546 | — | — | 0.7% | Dec 13, 2017 | IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows ... |
| CVE-2017-1421 | — | — | 1.1% | Dec 13, 2017 | IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in ... |
| CVE-2017-17648 | — | — | 3.8% | Dec 13, 2017 | Entrepreneur Dating Script 2.0.1 has SQL Injection via the search_result.php marital, gender, country, or profileid para... |
| CVE-2017-17549 | — | — | 1.6% | Dec 13, 2017 | Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build ... |
| CVE-2017-17427 | — | — | 15.6% | Dec 13, 2017 | Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertext... |
| CVE-2017-17382 | — | — | 13.8% | Dec 13, 2017 | Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build ... |
| CVE-2017-14590 | — | — | 2.4% | Dec 13, 2017 | Bamboo did not check that the name of a branch in a Mercurial repository contained argument parameters. An attacker who ... |
| CVE-2017-14589 | — | — | 1.9% | Dec 13, 2017 | It was possible for double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags to occur. An attacker ... |
| CVE-2017-17642 | — | — | 2.2% | Dec 13, 2017 | Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job. |
| CVE-2017-17641 | — | — | 2.2% | Dec 13, 2017 | Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter. |
| CVE-2017-17640 | — | — | 2.2% | Dec 13, 2017 | Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country pa... |
| CVE-2017-17639 | — | — | 2.2% | Dec 13, 2017 | Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter. |
| CVE-2017-17638 | — | — | 2.2% | Dec 13, 2017 | Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter. |
| CVE-2017-17637 | — | — | 2.2% | Dec 13, 2017 | Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter. |
| CVE-2017-17636 | — | — | 2.2% | Dec 13, 2017 | MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter. |
| CVE-2017-17635 | — | — | 2.2% | Dec 13, 2017 | MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eve... |
| CVE-2017-17634 | — | — | 2.2% | Dec 13, 2017 | Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter. |
| CVE-2017-17633 | — | — | 2.2% | Dec 13, 2017 | Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php ... |
| CVE-2017-17632 | — | — | 2.2% | Dec 13, 2017 | Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter. |
| CVE-2017-17631 | — | — | 2.2% | Dec 13, 2017 | Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter. |
| CVE-2017-17630 | — | — | 2.2% | Dec 13, 2017 | Yoga Class Script 1.0 has SQL Injection via the /list city parameter. |
| CVE-2017-17629 | — | — | 2.2% | Dec 13, 2017 | Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the single_d... |
| CVE-2017-17628 | — | — | 2.2% | Dec 13, 2017 | Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter. |
| CVE-2017-17627 | — | — | 2.2% | Dec 13, 2017 | Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now