2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-18010 | — | — | 1.4% | Jan 1, 2018 | The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/cus... |
| CVE-2017-18009 | — | — | 2.3% | Jan 1, 2018 | In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodec... |
| CVE-2017-18008 | — | — | 2.6% | Jan 1, 2018 | In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c. |
| CVE-2017-18006 | — | — | 0.7% | Jan 1, 2018 | netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447. |
| CVE-2017-18005 | MEDIUM | 5.5 | 0.8% | Dec 31, 2017 | Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted meta... |
| CVE-2017-18004 | — | — | 0.6% | Dec 31, 2017 | Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint. |
| CVE-2017-18001 | — | — | 13.7% | Dec 31, 2017 | Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the de... |
| CVE-2017-17704 | — | — | 1.0% | Dec 31, 2017 | A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction... |
| CVE-2017-17089 | — | — | 0.8% | Dec 30, 2017 | custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the descript... |
| CVE-2017-14855 | — | — | 1.4% | Dec 30, 2017 | Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to... |
| CVE-2017-17997 | — | — | 1.8% | Dec 30, 2017 | In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissecto... |
| CVE-2017-12813 | — | — | 0.6% | Dec 30, 2017 | PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section. |
| CVE-2017-12812 | — | — | 0.6% | Dec 30, 2017 | PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab. |
| CVE-2017-12811 | — | — | 0.6% | Dec 30, 2017 | PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item. |
| CVE-2017-12810 | — | — | 0.6% | Dec 30, 2017 | PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel. |
| CVE-2017-1000447 | — | — | — | Dec 30, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-15955. Reason: This candidate is a reservation ... |
| CVE-2017-1000446 | — | — | — | Dec 30, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-15954. Reason: This candidate is a reservation ... |
| CVE-2017-1000440 | — | — | — | Dec 30, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14976. Reason: This candidate is a reservation ... |
| CVE-2017-1000436 | — | — | — | Dec 30, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14975. Reason: This candidate is a reservation ... |
| CVE-2017-1000435 | — | — | — | Dec 30, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-16227. Reason: This candidate is a reservation ... |
| CVE-2017-17995 | — | — | 0.5% | Dec 30, 2017 | Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request. |
| CVE-2017-17994 | — | — | 0.5% | Dec 30, 2017 | Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria r... |
| CVE-2017-17993 | — | — | 0.5% | Dec 30, 2017 | Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition_deduction requ... |
| CVE-2017-17992 | — | — | 1.7% | Dec 30, 2017 | Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index... |
| CVE-2017-17991 | — | — | 0.5% | Dec 30, 2017 | Biometric Shift Employee Management System has XSS via the expense_name parameter in an index.php?user=expenses request. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now