2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-5082 | — | — | 0.4% | Oct 27, 2017 | Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for An... |
| CVE-2017-5080 | — | — | 1.3% | Oct 27, 2017 | A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote a... |
| CVE-2017-5074 | — | — | 0.9% | Oct 27, 2017 | A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform ... |
| CVE-2017-5072 | — | — | 1.2% | Oct 27, 2017 | Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to ... |
| CVE-2017-5064 | — | — | 1.4% | Oct 27, 2017 | Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker ... |
| CVE-2017-5058 | — | — | 1.3% | Oct 27, 2017 | A use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potenti... |
| CVE-2017-5055 | — | — | 2.5% | Oct 27, 2017 | A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to ... |
| CVE-2017-1521 | — | — | 1.0% | Oct 26, 2017 | IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 and 9.5) is v... |
| CVE-2017-1232 | — | — | 0.8% | Oct 26, 2017 | IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security-critical data in cleartext... |
| CVE-2017-1230 | — | — | 1.3% | Oct 26, 2017 | IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) uses insufficiently random numbers or values in a security... |
| CVE-2017-1228 | — | — | 1.2% | Oct 26, 2017 | IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive informat... |
| CVE-2017-1226 | — | — | 1.0% | Oct 26, 2017 | IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error logs that includes sen... |
| CVE-2017-1225 | — | — | 1.3% | Oct 26, 2017 | IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL parameters. This may l... |
| CVE-2017-1222 | — | — | 1.1% | Oct 26, 2017 | IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) does not perform an authentication check for a critical re... |
| CVE-2017-1220 | — | — | 1.3% | Oct 26, 2017 | IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) discloses sensitive information to unauthorized users. The... |
| CVE-2017-15366 | — | — | 1.4% | Oct 26, 2017 | Before Thornberry NDoc version 8.0, laptop clients and the server have default database (Cache) users set up with a sing... |
| CVE-2017-15922 | — | — | 1.3% | Oct 26, 2017 | In GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTOR_dvi_extract_method function in plugins/dvi_extr... |
| CVE-2017-15919 | — | — | 2.5% | Oct 26, 2017 | The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection,... |
| CVE-2017-3771 | — | — | 0.8% | Oct 26, 2017 | System boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because systems were shipped fro... |
| CVE-2017-15917 | — | — | 0.7% | Oct 26, 2017 | In Paessler PRTG Network Monitor 17.3.33.2830, it's possible to create a Map as a read-only user, by forging a request a... |
| CVE-2017-15911 | — | — | 0.7% | Oct 26, 2017 | The Admin Console in Ignite Realtime Openfire Server before 4.1.7 allows arbitrary client-side JavaScript code execution... |
| CVE-2017-15096 | — | — | 0.3% | Oct 26, 2017 | A flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in send_brick_req function in gluste... |
| CVE-2017-12159 | — | — | 2.4% | Oct 26, 2017 | It was found that the cookie used for CSRF prevention in Keycloak was not unique to each session. An attacker could use ... |
| CVE-2017-12158 | — | — | 1.0% | Oct 26, 2017 | It was found that Keycloak would accept a HOST header URL in the admin console and use it to determine web resource loca... |
| CVE-2017-7732 | — | — | 2.1% | Oct 26, 2017 | A reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0 through 5.2.9, and 5.3... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now