2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-11402 | — | — | 1.5% | Nov 20, 2017 | An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OP... |
| CVE-2017-11401 | — | — | 1.4% | Nov 20, 2017 | An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling ... |
| CVE-2017-11400 | — | — | 0.3% | Nov 20, 2017 | An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firm... |
| CVE-2017-15110 | — | — | 1.2% | Nov 20, 2017 | In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participa... |
| CVE-2017-16894 | — | — | 87.0% | Nov 20, 2017 | In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwo... |
| CVE-2017-16892 | — | — | 1.2% | Nov 19, 2017 | In Bftpd before 4.7, there is a memory leak in the file rename function. |
| CVE-2017-16883 | — | — | 1.1% | Nov 18, 2017 | The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereferenc... |
| CVE-2017-16882 | — | — | 0.3% | Nov 18, 2017 | Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file i... |
| CVE-2017-16881 | — | — | 0.8% | Nov 18, 2017 | b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL... |
| CVE-2017-14077 | — | — | 0.8% | Nov 18, 2017 | HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message b... |
| CVE-2017-1000221 | — | — | 0.8% | Nov 17, 2017 | In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules... |
| CVE-2017-1000217 | — | — | 1.9% | Nov 17, 2017 | Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media... |
| CVE-2017-1000128 | — | — | 1.1% | Nov 17, 2017 | Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser |
| CVE-2017-1000127 | — | — | 1.0% | Nov 17, 2017 | Exiv2 0.26 contains a heap buffer overflow in tiff parser |
| CVE-2017-1000126 | — | — | 1.1% | Nov 17, 2017 | exiv2 0.26 contains a Stack out of bounds read in webp parser |
| CVE-2017-4939 | — | — | 1.3% | Nov 17, 2017 | VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loade... |
| CVE-2017-16880 | — | — | 0.8% | Nov 17, 2017 | The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS. |
| CVE-2017-1000230 | — | — | 1.0% | Nov 17, 2017 | The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 pr... |
| CVE-2017-1000227 | — | — | 0.6% | Nov 17, 2017 | Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost... |
| CVE-2017-1000163 | — | — | 2.1% | Nov 17, 2017 | The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to u... |
| CVE-2017-14111 | — | — | 2.2% | Nov 17, 2017 | The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and ... |
| CVE-2017-1000215 | — | — | 6.5% | Nov 17, 2017 | ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code... |
| CVE-2017-1000204 | — | — | — | Nov 17, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9920. Reason: This candidate is a reservation ... |
| CVE-2017-6168 | — | — | 21.6% | Nov 17, 2017 | On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (f... |
| CVE-2017-1000161 | — | — | — | Nov 17, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA d... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now