2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12110 | HIGH | 8.8 | 2.1% | Nov 20, 2017 | An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS... |
| CVE-2017-3157 | — | — | 3.1% | Nov 20, 2017 | By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that a... |
| CVE-2017-16908 | — | — | 1.8% | Nov 20, 2017 | In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource. This can be leveraged for ... |
| CVE-2017-16907 | — | — | 1.1% | Nov 20, 2017 | In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action. |
| CVE-2017-16906 | — | — | 1.1% | Nov 20, 2017 | In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event" action. |
| CVE-2017-12608 | HIGH | 7.8 | 2.9% | Nov 20, 2017 | A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, all... |
| CVE-2017-16904 | — | — | 0.7% | Nov 20, 2017 | The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled duri... |
| CVE-2017-16903 | — | — | 2.0% | Nov 20, 2017 | LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences i... |
| CVE-2017-15527 | — | — | 1.1% | Nov 20, 2017 | Prior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory traversal exploit, which is a t... |
| CVE-2017-12607 | HIGH | 7.8 | 2.6% | Nov 20, 2017 | A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to cra... |
| CVE-2017-16902 | — | — | 8.0% | Nov 20, 2017 | On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or logi... |
| CVE-2017-16899 | — | — | 1.4% | Nov 20, 2017 | An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack o... |
| CVE-2017-9806 | HIGH | 7.8 | 1.8% | Nov 20, 2017 | A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, all... |
| CVE-2017-16898 | — | — | 0.8% | Nov 20, 2017 | The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, w... |
| CVE-2017-16896 | — | — | 1.5% | Nov 20, 2017 | A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login par... |
| CVE-2017-16544 | HIGH | 8.8 | 6.2% | Nov 20, 2017 | In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used... |
| CVE-2017-11402 | — | — | 1.5% | Nov 20, 2017 | An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OP... |
| CVE-2017-11401 | — | — | 1.4% | Nov 20, 2017 | An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling ... |
| CVE-2017-11400 | — | — | 0.3% | Nov 20, 2017 | An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firm... |
| CVE-2017-15110 | — | — | 1.2% | Nov 20, 2017 | In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participa... |
| CVE-2017-16894 | — | — | 87.0% | Nov 20, 2017 | In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwo... |
| CVE-2017-16892 | — | — | 1.2% | Nov 19, 2017 | In Bftpd before 4.7, there is a memory leak in the file rename function. |
| CVE-2017-16883 | — | — | 1.1% | Nov 18, 2017 | The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereferenc... |
| CVE-2017-16882 | — | — | 0.3% | Nov 18, 2017 | Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file i... |
| CVE-2017-16881 | — | — | 0.8% | Nov 18, 2017 | b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now