2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-13703 | — | — | 1.0% | Nov 17, 2017 | An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur. |
| CVE-2017-13702 | — | — | 0.9% | Nov 17, 2017 | An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused. |
| CVE-2017-13700 | — | — | 0.5% | Nov 17, 2017 | An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface. |
| CVE-2017-1000233 | — | — | — | Nov 17, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11667. Reason: This candidate is a reservation... |
| CVE-2017-1000222 | — | — | — | Nov 17, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA d... |
| CVE-2017-1000169 | — | — | 4.3% | Nov 17, 2017 | QuickerBB version <= 0.7.2 is vulnerable to arbitrary file writes which can lead to remote code execution. This can lead... |
| CVE-2017-1000168 | — | — | 1.3% | Nov 17, 2017 | sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys |
| CVE-2017-16877 | — | — | 14.1% | Nov 17, 2017 | ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to ... |
| CVE-2017-16819 | — | — | 1.9% | Nov 17, 2017 | A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows re... |
| CVE-2017-1000192 | — | — | 0.9% | Nov 17, 2017 | Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files ... |
| CVE-2017-1000191 | — | — | 1.3% | Nov 17, 2017 | Jool 3.5.0-3.5.1 is vulnerable to a kernel crashing packet resulting in a DOS. |
| CVE-2017-16875 | — | — | 3.3% | Nov 17, 2017 | An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue... |
| CVE-2017-1000212 | — | — | 2.9% | Nov 17, 2017 | Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. A malicious w... |
| CVE-2017-1000211 | — | — | 1.7% | Nov 17, 2017 | Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTM... |
| CVE-2017-1000206 | — | — | 2.0% | Nov 17, 2017 | samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in p... |
| CVE-2017-1000203 | — | — | 3.9% | Nov 17, 2017 | ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon result... |
| CVE-2017-4938 | — | — | 0.4% | Nov 17, 2017 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulne... |
| CVE-2017-4937 | — | — | 0.4% | Nov 17, 2017 | VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds ... |
| CVE-2017-4936 | — | — | 0.4% | Nov 17, 2017 | VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds ... |
| CVE-2017-4935 | — | — | 0.4% | Nov 17, 2017 | VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds ... |
| CVE-2017-4934 | — | — | 0.4% | Nov 17, 2017 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VM... |
| CVE-2017-4929 | — | — | 1.0% | Nov 17, 2017 | VMware NSX Edge (6.2.x before 6.2.9 and 6.3.x before 6.3.5) contains a moderate Cross-Site Scripting (XSS) issue which m... |
| CVE-2017-4928 | — | — | 1.2% | Nov 17, 2017 | The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere ... |
| CVE-2017-4927 | — | — | 2.3% | Nov 17, 2017 | VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP ne... |
| CVE-2017-10890 | — | — | 0.4% | Nov 17, 2017 | Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now