2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12719 | — | — | 3.1% | Nov 6, 2017 | An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote a... |
| CVE-2017-15306 | — | — | 0.4% | Nov 6, 2017 | The kvm_vm_ioctl_check_extension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local ... |
| CVE-2017-16001 | — | — | 0.9% | Nov 6, 2017 | In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently su... |
| CVE-2017-15672 | — | — | 2.0% | Nov 6, 2017 | The read_header function in libavcodec/ffv1dec.c in FFmpeg 2.4 and 3.3.4 and possibly earlier allows remote attackers to... |
| CVE-2017-11177 | — | — | 1.0% | Nov 6, 2017 | TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory. |
| CVE-2017-16570 | — | — | 2.2% | Nov 6, 2017 | KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF parameter and value, aka SecureL... |
| CVE-2017-16569 | — | — | 0.5% | Nov 6, 2017 | An Open URL Redirect issue exists in Zurmo 3.2.1.57987acc3018 via an http: URL in the redirectUrl parameter to app/index... |
| CVE-2017-16565 | — | — | 0.5% | Nov 6, 2017 | Cross-Site Request Forgery (CSRF) in /cgi-bin/login on Vonage (Grandstream) HT802 devices allows attackers to authentica... |
| CVE-2017-16564 | — | — | 0.6% | Nov 6, 2017 | Stored Cross-site scripting (XSS) vulnerability in /cgi-bin/config2 on Vonage (Grandstream) HT802 devices allows remote ... |
| CVE-2017-16563 | — | — | 0.4% | Nov 6, 2017 | Cross-Site Request Forgery (CSRF) in the Basic Settings screen on Vonage (Grandstream) HT802 devices allows attackers to... |
| CVE-2017-16524 | — | — | 30.3% | Nov 6, 2017 | Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_u... |
| CVE-2017-15039 | — | — | 0.5% | Nov 6, 2017 | Cross-site scripting (XSS) exists in Zurmo 3.2.1.57987acc3018 via a data: URL in the redirectUrl parameter to app/index.... |
| CVE-2017-16547 | — | — | 2.3% | Nov 6, 2017 | The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are asso... |
| CVE-2017-16545 | — | — | 2.2% | Nov 5, 2017 | The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which ... |
| CVE-2017-16543 | — | — | 5.6% | Nov 5, 2017 | Zoho ManageEngine Applications Manager 13 before build 13500 allows SQL injection via GraphicalView.do, as demonstrated ... |
| CVE-2017-16542 | — | — | 5.5% | Nov 5, 2017 | Zoho ManageEngine Applications Manager 13 before build 13500 allows Post-authentication SQL injection via the name param... |
| CVE-2017-16540 | — | — | 1.3% | Nov 4, 2017 | OpenEMR before 5.0.0 Patch 5 allows unauthenticated remote database copying because setup.php exposes functionality for ... |
| CVE-2017-16538 | — | — | 0.4% | Nov 4, 2017 | drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to cause a denial of servi... |
| CVE-2017-16537 | — | — | 0.4% | Nov 4, 2017 | The imon_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a den... |
| CVE-2017-16536 | — | — | 0.4% | Nov 4, 2017 | The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows l... |
| CVE-2017-16535 | — | — | 0.4% | Nov 4, 2017 | The usb_get_bos_descriptor function in drivers/usb/core/config.c in the Linux kernel before 4.13.10 allows local users t... |
| CVE-2017-14359 | — | — | 0.5% | Nov 3, 2017 | A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could... |
| CVE-2017-1000171 | — | — | 1.4% | Nov 3, 2017 | Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text. |
| CVE-2017-1000157 | — | — | 0.7% | Nov 3, 2017 | Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable t... |
| CVE-2017-1000156 | — | — | 0.8% | Nov 3, 2017 | Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to a group's configuration ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now