2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-14077 | — | — | 0.8% | Nov 18, 2017 | HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message b... |
| CVE-2017-16566 | CRITICAL | 9.8 | 2.6% | Nov 17, 2017 | On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attack... |
| CVE-2017-1000221 | — | — | 0.8% | Nov 17, 2017 | In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules... |
| CVE-2017-1000217 | — | — | 1.9% | Nov 17, 2017 | Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media... |
| CVE-2017-1000128 | — | — | 1.1% | Nov 17, 2017 | Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser |
| CVE-2017-1000127 | — | — | 1.0% | Nov 17, 2017 | Exiv2 0.26 contains a heap buffer overflow in tiff parser |
| CVE-2017-1000126 | — | — | 1.1% | Nov 17, 2017 | exiv2 0.26 contains a Stack out of bounds read in webp parser |
| CVE-2017-4939 | — | — | 1.3% | Nov 17, 2017 | VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loade... |
| CVE-2017-16880 | — | — | 0.8% | Nov 17, 2017 | The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS. |
| CVE-2017-1000230 | — | — | 1.0% | Nov 17, 2017 | The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 pr... |
| CVE-2017-1000227 | — | — | 0.6% | Nov 17, 2017 | Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost... |
| CVE-2017-1000190 | CRITICAL | 9.1 | 4.7% | Nov 17, 2017 | SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and s... |
| CVE-2017-1000163 | — | — | 2.1% | Nov 17, 2017 | The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to u... |
| CVE-2017-16845 | CRITICAL | 10 | 3.0% | Nov 17, 2017 | hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds acce... |
| CVE-2017-14111 | — | — | 2.2% | Nov 17, 2017 | The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and ... |
| CVE-2017-1000215 | — | — | 6.5% | Nov 17, 2017 | ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code... |
| CVE-2017-1000204 | — | — | — | Nov 17, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9920. Reason: This candidate is a reservation ... |
| CVE-2017-6168 | — | — | 21.6% | Nov 17, 2017 | On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (f... |
| CVE-2017-1000161 | — | — | — | Nov 17, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA d... |
| CVE-2017-13703 | — | — | 1.0% | Nov 17, 2017 | An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur. |
| CVE-2017-13702 | — | — | 0.9% | Nov 17, 2017 | An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused. |
| CVE-2017-13700 | — | — | 0.5% | Nov 17, 2017 | An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface. |
| CVE-2017-1000233 | — | — | — | Nov 17, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11667. Reason: This candidate is a reservation... |
| CVE-2017-1000222 | — | — | — | Nov 17, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA d... |
| CVE-2017-1000170 | HIGH | 7.5 | 57.6% | Nov 17, 2017 | jqueryFileTree 2.1.5 and older Directory Traversal |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now