2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-13793 | — | — | 1.5% | Nov 13, 2017 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud... |
| CVE-2017-13792 | — | — | 5.8% | Nov 13, 2017 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud... |
| CVE-2017-13791 | — | — | 5.8% | Nov 13, 2017 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud... |
| CVE-2017-13790 | — | — | 0.9% | Nov 13, 2017 | An issue was discovered in certain Apple products. Safari before 11.0.1 is affected. The issue involves the "Safari" com... |
| CVE-2017-13789 | — | — | 0.9% | Nov 13, 2017 | An issue was discovered in certain Apple products. Safari before 11.0.1 is affected. The issue involves the "Safari" com... |
| CVE-2017-13788 | — | — | 1.5% | Nov 13, 2017 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud... |
| CVE-2017-13786 | — | — | 0.3% | Nov 13, 2017 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "APFS" compo... |
| CVE-2017-13785 | — | — | 5.8% | Nov 13, 2017 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud... |
| CVE-2017-13784 | — | — | 5.8% | Nov 13, 2017 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud... |
| CVE-2017-13783 | — | — | 5.8% | Nov 13, 2017 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud... |
| CVE-2017-13782 | — | — | 1.1% | Nov 13, 2017 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" com... |
| CVE-2017-16799 | — | — | 0.5% | Nov 12, 2017 | In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible via the m1_name parameter to a... |
| CVE-2017-16798 | MEDIUM | 5.4 | 0.9% | Nov 12, 2017 | In CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload.php only blocks file ex... |
| CVE-2017-16797 | — | — | 1.2% | Nov 12, 2017 | In SWFTools 0.9.2, the png_load function in lib/png.c does not properly validate an alloclen_64 multiplication of width ... |
| CVE-2017-16796 | — | — | 1.2% | Nov 12, 2017 | In SWFTools 0.9.2, the png_load function in lib/png.c does not check the return value of a realloc call, which allows re... |
| CVE-2017-16794 | — | — | 1.0% | Nov 12, 2017 | The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-p... |
| CVE-2017-16793 | — | — | 1.2% | Nov 12, 2017 | The wav_convert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote at... |
| CVE-2017-16520 | — | — | 1.1% | Nov 11, 2017 | Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners. |
| CVE-2017-16785 | — | — | 1.0% | Nov 10, 2017 | Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php. |
| CVE-2017-16784 | — | — | 0.7% | Nov 10, 2017 | In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter. |
| CVE-2017-16783 | CRITICAL | 9.8 | 8.0% | Nov 10, 2017 | In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter. |
| CVE-2017-16782 | — | — | 0.8% | Nov 10, 2017 | In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markd... |
| CVE-2017-16781 | — | — | 1.6% | Nov 10, 2017 | The installer in MyBB before 1.8.13 has XSS. |
| CVE-2017-16780 | — | — | 5.8% | Nov 10, 2017 | The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration fi... |
| CVE-2017-16765 | MEDIUM | 6.1 | 1.0% | Nov 10, 2017 | XSS exists on D-Link DWR-933 1.00(WW)B17 devices via cgi-bin/gui.cgi. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now