2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12779 | — | — | 2.2% | Nov 10, 2017 | The Node_GetData function in corec/corec/node/node.c in mkvalidator 0.5.1 allows remote attackers to cause a denial of s... |
| CVE-2017-11461 | — | — | 1.0% | Nov 10, 2017 | NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or ... |
| CVE-2017-11309 | — | — | 9.4% | Nov 10, 2017 | Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary co... |
| CVE-2017-16759 | — | — | 2.2% | Nov 9, 2017 | The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/... |
| CVE-2017-16758 | — | — | 1.0% | Nov 9, 2017 | Cross-site scripting (XSS) vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed p... |
| CVE-2017-16757 | — | — | 0.4% | Nov 9, 2017 | Hola VPN 1.34 has weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges via a ... |
| CVE-2017-16711 | — | — | 1.2% | Nov 9, 2017 | The swf_DefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failur... |
| CVE-2017-16651 | HIGH | 7.8 | 42.8% | Nov 9, 2017 | Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary file... |
| CVE-2017-16674 | — | — | 0.7% | Nov 9, 2017 | Datto Windows Agent allows unauthenticated remote command execution via a modified command in conjunction with CVE-2017-... |
| CVE-2017-16673 | — | — | 0.4% | Nov 9, 2017 | Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonat... |
| CVE-2017-16672 | — | — | 4.7% | Nov 9, 2017 | An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified ... |
| CVE-2017-16671 | — | — | 3.3% | Nov 9, 2017 | A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1... |
| CVE-2017-16669 | — | — | 3.4% | Nov 9, 2017 | coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow a... |
| CVE-2017-11512 | — | — | 79.6% | Nov 8, 2017 | The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the path... |
| CVE-2017-11511 | — | — | 3.5% | Nov 8, 2017 | The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the path... |
| CVE-2017-15865 | — | — | 2.5% | Nov 8, 2017 | bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, all... |
| CVE-2017-15087 | — | — | 2.1% | Nov 8, 2017 | It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster... |
| CVE-2017-15086 | — | — | 1.7% | Nov 8, 2017 | It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster... |
| CVE-2017-15085 | — | — | 1.7% | Nov 8, 2017 | It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster... |
| CVE-2017-16667 | — | — | 1.5% | Nov 8, 2017 | backintime (aka Back in Time) before 1.1.24 did improper escaping/quoting of file paths used as arguments to the 'notify... |
| CVE-2017-16665 | — | — | 0.6% | Nov 8, 2017 | RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a reflected Cross Site Scripting (XSS) attack via the serv... |
| CVE-2017-9096 | — | — | 9.9% | Nov 8, 2017 | The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote a... |
| CVE-2017-14360 | MEDIUM | 5.9 | 2.3% | Nov 8, 2017 | A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability... |
| CVE-2017-12824 | — | — | 1.5% | Nov 8, 2017 | Special crafted InPage document leads to arbitrary code execution in InPage reader. |
| CVE-2017-16663 | — | — | 0.9% | Nov 8, 2017 | In sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in input-bmp.ci in the functio... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now