2017 CVE Vulnerabilities
17,104 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-1000448 | — | — | 2.4% | Jan 2, 2018 | Structured Data Linter versions 2.4.1 and older are vulnerable to a directory traversal attack in the URL input field re... |
| CVE-2017-1000413 | — | — | 1.6% | Jan 2, 2018 | Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable a timing attack in the Montgome... |
| CVE-2017-1000412 | — | — | 1.9% | Jan 2, 2018 | Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the L... |
| CVE-2017-17098 | — | — | 6.6% | Jan 2, 2018 | The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote a... |
| CVE-2017-17097 | — | — | 6.9% | Jan 2, 2018 | gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords ... |
| CVE-2017-1000445 | MEDIUM | 6.5 | 2.3% | Jan 2, 2018 | ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might l... |
| CVE-2017-1000444 | — | — | 3.1% | Jan 2, 2018 | Eleix Openhacker version 0.1.47 is vulnerable to an SQL injection in the account registration and login component result... |
| CVE-2017-1000443 | — | — | 1.1% | Jan 2, 2018 | Eleix Openhacker version 0.1.47 is vulnerable to a XSS vulnerability in the bank transactions component resulting in arb... |
| CVE-2017-1000442 | — | — | 0.5% | Jan 2, 2018 | Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace |
| CVE-2017-9966 | — | — | 1.6% | Jan 2, 2018 | A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. ... |
| CVE-2017-9965 | — | — | 4.7% | Jan 2, 2018 | An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2... |
| CVE-2017-9964 | — | — | 2.0% | Jan 2, 2018 | A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sn... |
| CVE-2017-18015 | — | — | 1.5% | Jan 2, 2018 | The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter. |
| CVE-2017-18013 | — | — | 2.9% | Jan 1, 2018 | In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by... |
| CVE-2017-18012 | — | — | 1.5% | Jan 1, 2018 | The Z-URL Preview plugin 1.6.1 for WordPress has XSS via the class.zlinkpreview.php url parameter. |
| CVE-2017-18011 | — | — | 1.6% | Jan 1, 2018 | The MyCBGenie Affiliate Ads for Clickbank Products plugin through 1.6 for WordPress has XSS via the text_ads_ajax.php bo... |
| CVE-2017-18010 | — | — | 1.4% | Jan 1, 2018 | The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/cus... |
| CVE-2017-18009 | — | — | 2.3% | Jan 1, 2018 | In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodec... |
| CVE-2017-18008 | — | — | 2.6% | Jan 1, 2018 | In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c. |
| CVE-2017-18006 | — | — | 0.7% | Jan 1, 2018 | netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447. |
| CVE-2017-18005 | MEDIUM | 5.5 | 0.8% | Dec 31, 2017 | Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted meta... |
| CVE-2017-18004 | — | — | 0.6% | Dec 31, 2017 | Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint. |
| CVE-2017-18001 | — | — | 13.7% | Dec 31, 2017 | Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the de... |
| CVE-2017-17704 | — | — | 1.0% | Dec 31, 2017 | A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction... |
| CVE-2017-17089 | — | — | 0.8% | Dec 30, 2017 | custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the descript... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now