2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-15876 | — | — | 2.2% | Dec 19, 2017 | Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, inc... |
| CVE-2017-15875 | — | — | 1.3% | Dec 19, 2017 | SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL comman... |
| CVE-2017-15524 | — | — | 1.2% | Dec 19, 2017 | The Application Firewall Pack (AFP, aka Web Application Firewall) component on Kemp Load Balancer devices with software ... |
| CVE-2017-11562 | — | — | 1.0% | Dec 19, 2017 | A Session Fixation Vulnerability exists in the MT4 Networks SenhaSegura Web Application 2.2.23.8 via login_if.php. |
| CVE-2017-15700 | — | — | 1.9% | Dec 18, 2017 | A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 al... |
| CVE-2017-15104 | HIGH | 7.8 | 0.4% | Dec 18, 2017 | An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having lo... |
| CVE-2017-15103 | — | — | 5.5% | Dec 18, 2017 | A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user c... |
| CVE-2017-17721 | — | — | 3.6% | Dec 18, 2017 | CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, ass... |
| CVE-2017-14583 | — | — | 1.0% | Dec 18, 2017 | NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an at... |
| CVE-2017-12630 | — | — | 1.1% | Dec 18, 2017 | In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML ... |
| CVE-2017-17651 | — | — | 3.0% | Dec 18, 2017 | Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum para... |
| CVE-2017-17649 | — | — | 2.5% | Dec 18, 2017 | Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter. |
| CVE-2017-17645 | — | — | 3.0% | Dec 18, 2017 | Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php. |
| CVE-2017-17643 | CRITICAL | 9.8 | 3.0% | Dec 18, 2017 | FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/. |
| CVE-2017-17741 | — | — | 0.5% | Dec 18, 2017 | The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information f... |
| CVE-2017-17740 | HIGH | 7.5 | 7.0% | Dec 18, 2017 | contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are ena... |
| CVE-2017-17739 | — | — | 11.9% | Dec 18, 2017 | The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html ... |
| CVE-2017-17738 | — | — | 5.8% | Dec 18, 2017 | The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools... |
| CVE-2017-17737 | — | — | 2.1% | Dec 18, 2017 | The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diag... |
| CVE-2017-17735 | — | — | 1.1% | Dec 18, 2017 | CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies. |
| CVE-2017-17734 | — | — | 1.1% | Dec 18, 2017 | CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions. |
| CVE-2017-17733 | — | — | 44.1% | Dec 18, 2017 | Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request. |
| CVE-2017-17731 | — | — | 13.2% | Dec 18, 2017 | DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php. |
| CVE-2017-17730 | — | — | 1.1% | Dec 18, 2017 | DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php. |
| CVE-2017-17727 | — | — | 1.5% | Dec 18, 2017 | DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now