2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-15100 | MEDIUM | 6.1 | 1.1% | Nov 27, 2017 | An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: (1) Facts pa... |
| CVE-2017-8044 | MEDIUM | 6.1 | 0.9% | Nov 27, 2017 | In Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3), certain pages allow... |
| CVE-2017-8039 | MEDIUM | 5.9 | 1.0% | Nov 27, 2017 | An issue was discovered in Pivotal Spring Web Flow through 2.4.5. Applications that do not change the value of the MvcVi... |
| CVE-2017-8031 | MEDIUM | 5.3 | 1.1% | Nov 27, 2017 | An issue was discovered in Cloud Foundry Foundation cf-release (all versions prior to v279) and UAA (30.x versions prior... |
| CVE-2017-12172 | MEDIUM | 6.7 | 0.6% | Nov 22, 2017 | PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.... |
| CVE-2017-6166 | MEDIUM | 5.9 | 1.9% | Nov 22, 2017 | In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some ... |
| CVE-2017-1000236 | MEDIUM | 6.1 | 0.8% | Nov 17, 2017 | I, Librarian version <=4.6 & 4.7 is vulnerable to Reflected Cross-Site Scripting in the temp.php resulting in an attacke... |
| CVE-2017-1000234 | MEDIUM | 5.3 | 1.2% | Nov 17, 2017 | I, Librarian version <=4.6 & 4.7 is vulnerable to Directory Enumeration in the jqueryFileTree.php resulting in attacker ... |
| CVE-2017-16836 | MEDIUM | 6.1 | 2.0% | Nov 16, 2017 | Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via... |
| CVE-2017-5532 | MEDIUM | 5.4 | 0.7% | Nov 15, 2017 | A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edi... |
| CVE-2017-16833 | MEDIUM | 6.1 | 0.8% | Nov 15, 2017 | Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script... |
| CVE-2017-16821 | MEDIUM | 5.4 | 0.5% | Nov 15, 2017 | b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a craft... |
| CVE-2017-11877 | MEDIUM | 5.5 | 4.5% | Nov 15, 2017 | Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft... |
| CVE-2017-8806 | MEDIUM | 5.5 | 0.4% | Nov 13, 2017 | The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-commo... |
| CVE-2017-16792 | MEDIUM | 6.1 | 1.1% | Nov 13, 2017 | Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject ... |
| CVE-2017-16798 | MEDIUM | 5.4 | 0.9% | Nov 12, 2017 | In CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload.php only blocks file ex... |
| CVE-2017-16765 | MEDIUM | 6.1 | 1.0% | Nov 10, 2017 | XSS exists on D-Link DWR-933 1.00(WW)B17 devices via cgi-bin/gui.cgi. |
| CVE-2017-16568 | MEDIUM | 5.4 | 2.0% | Nov 10, 2017 | Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Radio" functionality.... |
| CVE-2017-16567 | MEDIUM | 5.4 | 2.2% | Nov 10, 2017 | Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature. T... |
| CVE-2017-14360 | MEDIUM | 5.9 | 2.3% | Nov 8, 2017 | A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability... |
| CVE-2017-2913 | MEDIUM | 5.9 | 0.7% | Nov 7, 2017 | An exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL certificates for specific ... |
| CVE-2017-2912 | MEDIUM | 5.9 | 0.7% | Nov 7, 2017 | An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SS... |
| CVE-2017-2911 | MEDIUM | 5.9 | 0.7% | Nov 7, 2017 | An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SS... |
| CVE-2017-12096 | MEDIUM | 6.5 | 0.7% | Nov 7, 2017 | An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same n... |
| CVE-2017-12083 | MEDIUM | 5.8 | 1.1% | Nov 7, 2017 | An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now