2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-14752 | — | — | 0.7% | Oct 31, 2017 | Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a u... |
| CVE-2017-14250 | — | — | — | Oct 31, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2017-14163 | — | — | 0.9% | Oct 31, 2017 | An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3.... |
| CVE-2017-14358 | — | — | 1.2% | Oct 31, 2017 | A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version pri... |
| CVE-2017-14357 | — | — | 1.3% | Oct 31, 2017 | A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6... |
| CVE-2017-14356 | — | — | 1.8% | Oct 31, 2017 | An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch ... |
| CVE-2017-1000256 | HIGH | 8.1 | 1.7% | Oct 31, 2017 | libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libvi... |
| CVE-2017-3935 | — | — | 1.0% | Oct 31, 2017 | Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to per... |
| CVE-2017-3934 | — | — | 1.0% | Oct 31, 2017 | Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevent... |
| CVE-2017-3933 | — | — | 0.6% | Oct 31, 2017 | Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote a... |
| CVE-2017-15950 | — | — | 5.5% | Oct 31, 2017 | Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary co... |
| CVE-2017-15993 | — | — | 2.7% | Oct 31, 2017 | Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter. |
| CVE-2017-15992 | — | — | 2.7% | Oct 31, 2017 | Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php. |
| CVE-2017-15991 | — | — | 2.7% | Oct 31, 2017 | Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type... |
| CVE-2017-15990 | CRITICAL | 9.8 | 7.7% | Oct 31, 2017 | Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/edit_myaccountdetail/. |
| CVE-2017-15989 | — | — | 2.7% | Oct 31, 2017 | Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action. |
| CVE-2017-15988 | — | — | 2.7% | Oct 31, 2017 | Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008... |
| CVE-2017-15987 | — | — | 2.0% | Oct 31, 2017 | Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter. |
| CVE-2017-15986 | — | — | 2.7% | Oct 31, 2017 | CPA Lead Reward Script allows SQL Injection via the username parameter. |
| CVE-2017-15985 | — | — | 2.7% | Oct 31, 2017 | Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter. |
| CVE-2017-15984 | — | — | 2.7% | Oct 31, 2017 | Creative Management System (CMS) Lite 1.4 allows SQL Injection via the S parameter to index.php. |
| CVE-2017-15983 | — | — | 2.7% | Oct 31, 2017 | MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing... |
| CVE-2017-15982 | CRITICAL | 9.8 | 2.6% | Oct 31, 2017 | Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editi... |
| CVE-2017-15981 | CRITICAL | 9.8 | 2.6% | Oct 31, 2017 | Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for fo... |
| CVE-2017-15980 | — | — | 2.7% | Oct 31, 2017 | US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now