2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-13985 | — | — | 2.7% | Sep 30, 2017 | An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.... |
| CVE-2017-13984 | — | — | 2.0% | Sep 30, 2017 | An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.... |
| CVE-2017-13983 | — | — | 6.1% | Sep 30, 2017 | An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.... |
| CVE-2017-13982 | — | — | 3.4% | Sep 30, 2017 | A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product version... |
| CVE-2017-13684 | — | — | 0.4% | Sep 30, 2017 | Unisys Libra 64xx and 84xx and FS601 class systems with MCP-FIRMWARE before 43.211 allow remote authenticated users to c... |
| CVE-2017-9790 | — | — | 2.4% | Sep 29, 2017 | When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2... |
| CVE-2017-8448 | — | — | 0.8% | Sep 29, 2017 | An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapped to certain built-... |
| CVE-2017-8447 | — | — | 0.6% | Sep 29, 2017 | An error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement. If a user has either 'delete' or 'index'... |
| CVE-2017-8444 | — | — | 0.5% | Sep 29, 2017 | The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. I... |
| CVE-2017-7687 | — | — | 2.4% | Sep 29, 2017 | When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1... |
| CVE-2017-7554 | — | — | 0.9% | Sep 29, 2017 | It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use th... |
| CVE-2017-7553 | — | — | 0.7% | Sep 29, 2017 | The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use... |
| CVE-2017-7552 | — | — | 1.4% | Sep 29, 2017 | A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allo... |
| CVE-2017-14867 | — | — | 36.0% | Sep 29, 2017 | Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsaf... |
| CVE-2017-14866 | — | — | 0.8% | Sep 29, 2017 | There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lea... |
| CVE-2017-14865 | — | — | 0.8% | Sep 29, 2017 | There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26. A Crafted input will le... |
| CVE-2017-14863 | — | — | 0.9% | Sep 29, 2017 | A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerabili... |
| CVE-2017-14861 | — | — | 1.0% | Sep 29, 2017 | There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A C... |
| CVE-2017-14860 | — | — | 0.8% | Sep 29, 2017 | There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Cr... |
| CVE-2017-14858 | — | — | 0.8% | Sep 29, 2017 | There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lea... |
| CVE-2017-14857 | — | — | 0.8% | Sep 29, 2017 | In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted in... |
| CVE-2017-14507 | — | — | 5.2% | Sep 29, 2017 | Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to exec... |
| CVE-2017-12236 | — | — | 3.1% | Sep 29, 2017 | A vulnerability in the implementation of the Locator/ID Separation Protocol (LISP) in Cisco IOS XE 3.2 through 16.5 coul... |
| CVE-2017-12230 | — | — | 3.2% | Sep 29, 2017 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE 16.2 could allow an authenticated, remote attac... |
| CVE-2017-12229 | — | — | 5.1% | Sep 29, 2017 | A vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1 through 16.5 could allow an... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now