2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-8046 | CRITICAL | 9.8 | 72.8% | Jan 4, 2018 | Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions pri... |
| CVE-2017-18020 | — | — | 0.4% | Jan 4, 2018 | On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary ... |
| CVE-2017-14383 | — | — | 0.8% | Jan 4, 2018 | In Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions prior to Operating Environ... |
| CVE-2017-18019 | — | — | 1.2% | Jan 4, 2018 | In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the ... |
| CVE-2017-18018 | HIGH | 7.1 | 0.3% | Jan 4, 2018 | In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symli... |
| CVE-2017-1000487 | CRITICAL | 9.8 | 6.5% | Jan 3, 2018 | Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of doub... |
| CVE-2017-1000486 | CRITICAL | 9.8 | 94.1% | Jan 3, 2018 | Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution |
| CVE-2017-1000485 | — | — | 0.3% | Jan 3, 2018 | Nylas Mail Lives 2.2.2 uses 0755 permissions for $HOME/.nylas-mail, which allows local users to obtain sensitive authent... |
| CVE-2017-1000484 | — | — | 0.7% | Jan 3, 2018 | By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you to his own website. On its... |
| CVE-2017-1000473 | — | — | 1.1% | Jan 3, 2018 | Linux Dash up to version v2 is vulnerable to multiple command injection vulnerabilities in the way module names are pars... |
| CVE-2017-1000472 | — | — | 1.7% | Jan 3, 2018 | The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restri... |
| CVE-2017-1000471 | — | — | 8.6% | Jan 3, 2018 | EmbedThis GoAhead Webserver version 4.0.0 is vulnerable to a NULL pointer dereference in the CGI handler resulting in me... |
| CVE-2017-1000470 | — | — | 7.9% | Jan 3, 2018 | EmbedThis GoAhead Webserver versions 4.0.0 and earlier is vulnerable to an integer overflow in the HTTP listener resulti... |
| CVE-2017-1000469 | — | — | 5.6% | Jan 3, 2018 | Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in ... |
| CVE-2017-1000462 | — | — | 0.8% | Jan 3, 2018 | BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result i... |
| CVE-2017-1000461 | — | — | 1.0% | Jan 3, 2018 | Brave Software's Brave Browser, version 0.19.73 (and earlier) is vulnerable to an incorrect access control issue in the ... |
| CVE-2017-1000460 | — | — | 0.5% | Jan 3, 2018 | In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of ... |
| CVE-2017-1000483 | — | — | 0.9% | Jan 3, 2018 | Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an ... |
| CVE-2017-1000482 | — | — | 0.6% | Jan 3, 2018 | A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this execu... |
| CVE-2017-1000481 | — | — | 0.7% | Jan 3, 2018 | When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'came_from' parameter... |
| CVE-2017-1000480 | — | — | 3.1% | Jan 3, 2018 | Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resou... |
| CVE-2017-1000479 | — | — | 32.8% | Jan 3, 2018 | pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged e... |
| CVE-2017-1000478 | — | — | 0.8% | Jan 3, 2018 | ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitr... |
| CVE-2017-1000477 | — | — | 1.1% | Jan 3, 2018 | XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks. |
| CVE-2017-1000476 | — | — | 2.8% | Jan 3, 2018 | ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which al... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now