2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-15975 | — | — | 3.0% | Oct 29, 2017 | Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability ... |
| CVE-2017-15974 | — | — | 3.7% | Oct 29, 2017 | tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php. |
| CVE-2017-15973 | — | — | 2.9% | Oct 29, 2017 | Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/members_view.php. |
| CVE-2017-15972 | — | — | 2.9% | Oct 29, 2017 | SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php... |
| CVE-2017-15971 | CRITICAL | 9.8 | 2.0% | Oct 29, 2017 | Same Sex Dating Software Pro 1.0 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php send... |
| CVE-2017-15970 | — | — | 2.2% | Oct 29, 2017 | PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter. |
| CVE-2017-15969 | — | — | 2.1% | Oct 29, 2017 | PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag, friends/index, users/profile, or video_cata... |
| CVE-2017-15968 | — | — | 2.1% | Oct 29, 2017 | MyBuilder Clone 1.0 allows SQL Injection via the phpsqlsearch_genxml.php subcategory parameter. |
| CVE-2017-15967 | — | — | 2.1% | Oct 29, 2017 | Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the e... |
| CVE-2017-15966 | — | — | 3.4% | Oct 29, 2017 | The Zh YandexMap (aka com_zhyandexmap) component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parame... |
| CVE-2017-15965 | — | — | 3.4% | Oct 29, 2017 | The NS Download Shop (aka com_ns_downloadshop) component 2.2.6 for Joomla! allows SQL Injection via the id parameter in ... |
| CVE-2017-15964 | — | — | 2.1% | Oct 29, 2017 | Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI. |
| CVE-2017-15963 | — | — | 2.1% | Oct 29, 2017 | iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser pa... |
| CVE-2017-15962 | — | — | 4.9% | Oct 29, 2017 | iStock Management System 1.0 allows Arbitrary File Upload via user/profile. |
| CVE-2017-15961 | — | — | 2.1% | Oct 29, 2017 | iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php. |
| CVE-2017-15960 | — | — | 2.1% | Oct 29, 2017 | Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php. |
| CVE-2017-15959 | — | — | 2.1% | Oct 29, 2017 | Adult Script Pro 2.2.4 allows SQL Injection via the PATH_INFO to a /download URI, a different vulnerability than CVE-200... |
| CVE-2017-15958 | — | — | 2.1% | Oct 29, 2017 | D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php. |
| CVE-2017-15957 | — | — | 3.9% | Oct 29, 2017 | my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file. |
| CVE-2017-15956 | — | — | 4.7% | Oct 29, 2017 | ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php. |
| CVE-2017-15955 | — | — | 0.9% | Oct 28, 2017 | bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on destination operand" a... |
| CVE-2017-15954 | — | — | 1.0% | Oct 28, 2017 | bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow (with a resultant invalid f... |
| CVE-2017-15953 | — | — | 1.0% | Oct 28, 2017 | bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a... |
| CVE-2017-15951 | HIGH | 7.8 | 0.4% | Oct 28, 2017 | The KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions of updating versus find... |
| CVE-2017-15949 | — | — | 0.9% | Oct 28, 2017 | Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the log_... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now