2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-11447 | MEDIUM | 6.5 | 2.2% | Jul 19, 2017 | The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory leaks, causing denial o... |
| CVE-2017-9340 | MEDIUM | 6.5 | 1.0% | Jul 17, 2017 | An attacker is logged in as a normal user and can somehow make admin to delete shared folders in ownCloud Server before ... |
| CVE-2017-9339 | MEDIUM | 5.3 | 1.0% | Jul 17, 2017 | A logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for public calendars. Thus gran... |
| CVE-2017-9338 | MEDIUM | 5.4 | 0.6% | Jul 17, 2017 | Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10... |
| CVE-2017-3100 | MEDIUM | 6.5 | 3.7% | Jul 17, 2017 | Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Scr... |
| CVE-2017-3080 | MEDIUM | 6.5 | 4.2% | Jul 17, 2017 | Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by... |
| CVE-2017-2347 | MEDIUM | 6.5 | 1.9% | Jul 17, 2017 | A denial of service vulnerability in rpd daemon of Juniper Networks Junos OS allows a malformed MPLS ping packet to cras... |
| CVE-2017-2346 | MEDIUM | 5.9 | 1.1% | Jul 17, 2017 | An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway ... |
| CVE-2017-11352 | MEDIUM | 6.5 | 1.8% | Jul 17, 2017 | In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.... |
| CVE-2017-10604 | MEDIUM | 5.3 | 0.9% | Jul 17, 2017 | When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempt... |
| CVE-2017-1000078 | MEDIUM | 6.1 | 0.7% | Jul 17, 2017 | Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration |
| CVE-2017-1000043 | MEDIUM | 6.1 | 0.9% | Jul 17, 2017 | Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain ... |
| CVE-2017-1321 | MEDIUM | 6.1 | 1.0% | Jul 12, 2017 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows u... |
| CVE-2017-11189 | MEDIUM | 6.5 | 1.3% | Jul 12, 2017 | unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service (NULL pointer dereference and a... |
| CVE-2017-11107 | MEDIUM | 6.1 | 2.1% | Jul 8, 2017 | phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the form, element, rdn, or container parameter. |
| CVE-2017-11104 | MEDIUM | 5.9 | 2.7% | Jul 8, 2017 | Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an... |
| CVE-2017-2245 | MEDIUM | 5 | 2.6% | Jul 7, 2017 | Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitra... |
| CVE-2017-2239 | MEDIUM | 5.3 | 0.5% | Jul 7, 2017 | Marp versions v0.0.10 and earlier may allow an attacker to access local resources and files using JavaScript. |
| CVE-2017-10796 | MEDIUM | 6.5 | 0.9% | Jul 2, 2017 | On TP-Link NC250 devices with firmware through 1.2.1 build 170515, anyone can view video and audio without authenticatio... |
| CVE-2017-2298 | MEDIUM | 6.5 | 1.5% | Jun 30, 2017 | The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path wher... |
| CVE-2017-6030 | MEDIUM | 6.5 | 2.1% | Jun 30, 2017 | A predictable value range from previous values issue was discovered in Schneider Electric Modicon PLCs Modicon M221, fir... |
| CVE-2017-5529 | MEDIUM | 4.1 | 1.3% | Jun 29, 2017 | JasperReports library components contain an information disclosure vulnerability. This vulnerability includes the theore... |
| CVE-2017-10673 | MEDIUM | 6.1 | 0.7% | Jun 29, 2017 | admin/profile.php in GetSimple CMS 3.x has XSS in a name field. |
| CVE-2017-9998 | MEDIUM | 6.5 | 2.0% | Jun 28, 2017 | The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers to cause a... |
| CVE-2017-9929 | MEDIUM | 5.5 | — | Jun 26, 2017 | In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers t... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now