2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-15242 | — | — | 2.5% | Oct 11, 2017 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial... |
| CVE-2017-15241 | — | — | 2.0% | Oct 11, 2017 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly ha... |
| CVE-2017-15240 | — | — | 2.0% | Oct 11, 2017 | IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly ha... |
| CVE-2017-15239 | — | — | 2.0% | Oct 11, 2017 | IrfanView 4.44 - 32bit with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspe... |
| CVE-2017-15083 | — | — | — | Oct 11, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-1642. Reason: This candidate is a reservation ... |
| CVE-2017-14588 | — | — | 1.1% | Oct 11, 2017 | Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTML... |
| CVE-2017-14587 | — | — | 0.9% | Oct 11, 2017 | The administration user deletion resource in Atlassian Fisheye and Crucible before version 4.4.2 allows remote attackers... |
| CVE-2017-0903 | — | — | 15.9% | Oct 11, 2017 | RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deseri... |
| CVE-2017-15267 | — | — | 2.6% | Oct 11, 2017 | In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c. |
| CVE-2017-15266 | — | — | 1.4% | Oct 11, 2017 | In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample ... |
| CVE-2017-13722 | — | — | 0.4% | Oct 11, 2017 | In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary ... |
| CVE-2017-13720 | — | — | 0.4% | Oct 11, 2017 | In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with acce... |
| CVE-2017-15220 | — | — | 7.1% | Oct 11, 2017 | Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginni... |
| CVE-2017-15238 | — | — | 1.8% | Oct 11, 2017 | ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26 has a use-after-free issue when the height or width is zero, re... |
| CVE-2017-15236 | — | — | 3.6% | Oct 11, 2017 | Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to ... |
| CVE-2017-15235 | — | — | 5.5% | Oct 11, 2017 | The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication... |
| CVE-2017-15232 | — | — | 2.4% | Oct 11, 2017 | libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file. |
| CVE-2017-15215 | — | — | 1.5% | Oct 11, 2017 | Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags... |
| CVE-2017-15214 | — | — | 0.9% | Oct 11, 2017 | Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain ad... |
| CVE-2017-15213 | — | — | 0.8% | Oct 11, 2017 | Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administra... |
| CVE-2017-15212 | — | — | 1.2% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private ... |
| CVE-2017-15211 | — | — | 1.0% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of... |
| CVE-2017-15210 | — | — | 1.1% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private pr... |
| CVE-2017-15209 | — | — | 0.9% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of... |
| CVE-2017-15208 | — | — | 1.0% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private proj... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now