2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-15100 | MEDIUM | 6.1 | 1.1% | Nov 27, 2017 | An attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on certain pages: (1) Facts pa... |
| CVE-2017-1001004 | — | — | 1.9% | Nov 27, 2017 | typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with Ja... |
| CVE-2017-1001003 | — | — | 1.7% | Nov 27, 2017 | math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode cha... |
| CVE-2017-1001002 | — | — | 2.4% | Nov 27, 2017 | math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScrip... |
| CVE-2017-1000214 | — | — | 2.5% | Nov 27, 2017 | GitPHP by xiphux is vulnerable to OS Command Injections |
| CVE-2017-8045 | — | — | 3.6% | Nov 27, 2017 | In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsaf... |
| CVE-2017-8044 | MEDIUM | 6.1 | 0.9% | Nov 27, 2017 | In Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3), certain pages allow... |
| CVE-2017-8039 | MEDIUM | 5.9 | 1.0% | Nov 27, 2017 | An issue was discovered in Pivotal Spring Web Flow through 2.4.5. Applications that do not change the value of the MvcVi... |
| CVE-2017-8038 | — | — | 0.9% | Nov 27, 2017 | In Cloud Foundry Foundation Credhub-release version 1.1.0, access control lists (ACLs) enforce whether an authenticated ... |
| CVE-2017-8031 | MEDIUM | 5.3 | 1.1% | Nov 27, 2017 | An issue was discovered in Cloud Foundry Foundation cf-release (all versions prior to v279) and UAA (30.x versions prior... |
| CVE-2017-8028 | — | — | 2.6% | Nov 27, 2017 | In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, when no additional attributes are bo... |
| CVE-2017-4995 | HIGH | 8.1 | 2.5% | Nov 27, 2017 | An issue was discovered in Pivotal Spring Security 4.2.0.RELEASE through 4.2.2.RELEASE, and Spring Security 5.0.0.M1. Wh... |
| CVE-2017-16962 | — | — | 2.2% | Nov 27, 2017 | The WebMail components (Crystal, pronto, and pronto4) in CommuniGate Pro before 6.2.1 have stored XSS vulnerabilities vi... |
| CVE-2017-16961 | — | — | 1.4% | Nov 27, 2017 | A SQL injection vulnerability in core/inc/auto-modules.php in BigTree CMS through 4.2.19 allows remote authenticated att... |
| CVE-2017-16960 | — | — | 2.4% | Nov 27, 2017 | TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell... |
| CVE-2017-16959 | — | — | 1.9% | Nov 27, 2017 | The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users ... |
| CVE-2017-16958 | — | — | 2.9% | Nov 27, 2017 | TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell... |
| CVE-2017-16957 | — | — | 5.6% | Nov 27, 2017 | TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allow remote authenticated users to execute arbitrary commands via shell... |
| CVE-2017-16956 | — | — | 0.7% | Nov 27, 2017 | b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a secon... |
| CVE-2017-16955 | — | — | 2.0% | Nov 27, 2017 | SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitr... |
| CVE-2017-14390 | — | — | 1.4% | Nov 27, 2017 | In Cloud Foundry Foundation cf-deployment v0.35.0, a misconfiguration with Loggregator and syslog-drain causes logs to b... |
| CVE-2017-14176 | — | — | 6.0% | Nov 27, 2017 | Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh U... |
| CVE-2017-16948 | — | — | 0.3% | Nov 26, 2017 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possib... |
| CVE-2017-16946 | — | — | 1.1% | Nov 25, 2017 | The admin_edit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enable_password field, which... |
| CVE-2017-16944 | — | — | 63.3% | Nov 25, 2017 | The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now