2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12255 | — | — | 0.4% | Sep 21, 2017 | A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell acce... |
| CVE-2017-12254 | — | — | 2.3% | Sep 21, 2017 | A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacke... |
| CVE-2017-12253 | — | — | 1.2% | Sep 21, 2017 | A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwa... |
| CVE-2017-12252 | — | — | 0.4% | Sep 21, 2017 | A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a ... |
| CVE-2017-12250 | — | — | 3.1% | Sep 21, 2017 | A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated... |
| CVE-2017-12248 | — | — | 1.7% | Sep 21, 2017 | A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, ... |
| CVE-2017-12219 | — | — | 2.7% | Sep 21, 2017 | A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones... |
| CVE-2017-12215 | — | — | 1.7% | Sep 21, 2017 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance ... |
| CVE-2017-12214 | — | — | 2.2% | Sep 21, 2017 | A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality f... |
| CVE-2017-14621 | — | — | 0.6% | Sep 20, 2017 | Portus 2.2.0 has XSS via the Team field, related to typeahead. |
| CVE-2017-14619 | — | — | 2.2% | Sep 20, 2017 | Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web scrip... |
| CVE-2017-14618 | — | — | 2.4% | Sep 20, 2017 | Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject ... |
| CVE-2017-14617 | — | — | 0.9% | Sep 20, 2017 | In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potentia... |
| CVE-2017-14616 | — | — | 1.6% | Sep 20, 2017 | An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made in the XML-RPC interface... |
| CVE-2017-14615 | — | — | 0.9% | Sep 20, 2017 | An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt is made to the login en... |
| CVE-2017-14610 | — | — | 0.3% | Sep 20, 2017 | bareos-dir, bareos-fd, and bareos-sd in bareos-core in Bareos 16.2.6 and earlier create a PID file after dropping privil... |
| CVE-2017-14609 | — | — | 0.4% | Sep 20, 2017 | The server daemons in Kannel 1.5.0 and earlier create a PID file after dropping privileges to a non-root account, which ... |
| CVE-2017-14596 | — | — | 6.3% | Sep 20, 2017 | In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username ... |
| CVE-2017-14595 | — | — | 1.8% | Sep 20, 2017 | In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these artic... |
| CVE-2017-9804 | — | — | 9.5% | Sep 20, 2017 | In Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12, if an application allows entering a URL in a form field an... |
| CVE-2017-9793 | — | — | 7.3% | Sep 20, 2017 | The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library... |
| CVE-2017-14608 | — | — | 2.1% | Sep 20, 2017 | In LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c ... |
| CVE-2017-14607 | — | — | 2.3% | Sep 20, 2017 | In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An a... |
| CVE-2017-12611 | — | — | 88.0% | Sep 20, 2017 | In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag in... |
| CVE-2017-9649 | — | — | 0.5% | Sep 20, 2017 | A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Tran... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now