2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-1000493 | — | — | 1.7% | Jan 3, 2018 | Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover |
| CVE-2017-1000492 | — | — | 1.0% | Jan 3, 2018 | Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration |
| CVE-2017-1000491 | — | — | 1.1% | Jan 3, 2018 | Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node int... |
| CVE-2017-1000466 | — | — | 0.8% | Jan 3, 2018 | Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page... |
| CVE-2017-1000463 | — | — | 0.7% | Jan 3, 2018 | Leafpub version 1.2.0-beta6 is vulnerable to stored cross-site scripting vulnerability, within the edit blog post page, ... |
| CVE-2017-1000459 | — | — | 0.8% | Jan 3, 2018 | Leanote version <= 2.5 is vulnerable to XSS due to not sanitized input in markdown notes |
| CVE-2017-1000438 | — | — | 0.9% | Jan 2, 2018 | In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another use... |
| CVE-2017-1000437 | — | — | 3.8% | Jan 2, 2018 | Creolabs Gravity 1.0 contains a stack based buffer overflow in the operator_string_add function, resulting in remote cod... |
| CVE-2017-1000434 | — | — | 0.9% | Jan 2, 2018 | Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allo... |
| CVE-2017-1000433 | HIGH | 8.1 | 2.5% | Jan 2, 2018 | pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to... |
| CVE-2017-1000432 | — | — | 1.6% | Jan 2, 2018 | Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from forums Admin access |
| CVE-2017-1000427 | — | — | 1.5% | Jan 2, 2018 | marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser. |
| CVE-2017-1000425 | — | — | 1.0% | Jan 2, 2018 | Cross-site scripting (XSS) vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allow... |
| CVE-2017-1000426 | MEDIUM | 6.1 | 0.8% | Jan 2, 2018 | MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possib... |
| CVE-2017-1000431 | — | — | 0.7% | Jan 2, 2018 | eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is vulnerable to an XSS issue in the search module, ... |
| CVE-2017-1000430 | — | — | 1.5% | Jan 2, 2018 | rust-base64 version <= 0.5.1 is vulnerable to a buffer overflow when calculating the size of a buffer to use when encodi... |
| CVE-2017-1000424 | — | — | 1.0% | Jan 2, 2018 | Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PD... |
| CVE-2017-1000423 | — | — | 2.4% | Jan 2, 2018 | b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic instal... |
| CVE-2017-1000422 | — | — | 2.0% | Jan 2, 2018 | Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in mem... |
| CVE-2017-1000421 | — | — | 2.7% | Jan 2, 2018 | Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code exec... |
| CVE-2017-1000420 | — | — | 1.5% | Jan 2, 2018 | Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite |
| CVE-2017-1000419 | — | — | 1.3% | Jan 2, 2018 | phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar function resulting allowing an attacker to perform port s... |
| CVE-2017-1000458 | — | — | 2.3% | Jan 2, 2018 | Bro before Bro v2.5.2 is vulnerable to an out of bounds write in the ContentLine analyzer allowing remote attackers to c... |
| CVE-2017-1000457 | — | — | 0.8% | Jan 2, 2018 | Cross-site scripting (XSS) vulnerability in Help.aspx in mojoPortal version 2.5.0.0 allows remote attackers to inject ar... |
| CVE-2017-1000456 | — | — | 2.0% | Jan 2, 2018 | freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent c... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now