2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-17568 | — | — | 1.4% | Dec 13, 2017 | Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the bac... |
| CVE-2017-17567 | — | — | 1.1% | Dec 13, 2017 | Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter. |
| CVE-2017-17538 | — | — | 7.8% | Dec 13, 2017 | MikroTik v6.40.5 devices allow remote attackers to cause a denial of service via a flood of ICMP packets. |
| CVE-2017-5534 | HIGH | 8.8 | 1.3% | Dec 13, 2017 | The tibbr user profiles components of tibbr Community, and tibbr Enterprise expose a weakness in an improperly sandboxed... |
| CVE-2017-5530 | HIGH | 8.1 | 0.9% | Dec 13, 2017 | The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may... |
| CVE-2017-4942 | MEDIUM | 4.9 | 1.7% | Dec 13, 2017 | VMware AirWatch Console (AWC) contains a Broken Access Control vulnerability. Successful exploitation of this issue coul... |
| CVE-2017-14362 | HIGH | 7.3 | 0.5% | Dec 13, 2017 | Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vuln... |
| CVE-2017-14361 | HIGH | 7.4 | 1.0% | Dec 13, 2017 | Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability... |
| CVE-2017-13099 | HIGH | 7.5 | 24.9% | Dec 13, 2017 | wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange i... |
| CVE-2017-13098 | HIGH | 7.5 | 24.3% | Dec 13, 2017 | BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic ... |
| CVE-2017-17566 | — | — | 0.4% | Dec 12, 2017 | An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) or ... |
| CVE-2017-17565 | — | — | 0.4% | Dec 12, 2017 | An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) if ... |
| CVE-2017-17564 | — | — | 0.4% | Dec 12, 2017 | An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gai... |
| CVE-2017-17563 | — | — | 0.4% | Dec 12, 2017 | An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gai... |
| CVE-2017-11939 | — | — | 6.3% | Dec 12, 2017 | Microsoft Office 2016 Click-to-Run (C2R) allows an information disclosure vulnerability due to the way Microsoft Office ... |
| CVE-2017-11936 | — | — | 4.2% | Dec 12, 2017 | Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests a... |
| CVE-2017-11935 | — | — | 18.9% | Dec 12, 2017 | Microsoft Office 2016 Click-to-Run (C2R) allows a remote code execution vulnerability due to the way files are handled i... |
| CVE-2017-11934 | — | — | 12.6% | Dec 12, 2017 | Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulne... |
| CVE-2017-11932 | — | — | 5.9% | Dec 12, 2017 | Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way ... |
| CVE-2017-11930 | — | — | 8.6% | Dec 12, 2017 | ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1... |
| CVE-2017-11927 | — | — | 9.6% | Dec 12, 2017 | Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, ... |
| CVE-2017-11919 | — | — | 6.4% | Dec 12, 2017 | ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1... |
| CVE-2017-11918 | — | — | 62.6% | Dec 12, 2017 | ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to ... |
| CVE-2017-11916 | — | — | 6.2% | Dec 12, 2017 | ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore sc... |
| CVE-2017-11914 | — | — | 62.6% | Dec 12, 2017 | ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain t... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now