2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-8918 | — | — | 2.2% | Sep 12, 2017 | XXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows attackers to remotely ... |
| CVE-2017-14346 | — | — | 2.1% | Sep 12, 2017 | upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image... |
| CVE-2017-14345 | — | — | 1.1% | Sep 12, 2017 | SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php. |
| CVE-2017-14344 | — | — | 1.8% | Sep 12, 2017 | This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must... |
| CVE-2017-14343 | — | — | 1.4% | Sep 12, 2017 | ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file. |
| CVE-2017-14342 | — | — | 1.4% | Sep 12, 2017 | ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file. |
| CVE-2017-1000250 | — | — | 7.8% | Sep 12, 2017 | All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which... |
| CVE-2017-14337 | — | — | 0.9% | Sep 12, 2017 | When MISP before 2.4.80 is configured with X.509 certificate authentication (CertAuth) in conjunction with a non-MISP ex... |
| CVE-2017-14319 | — | — | 0.4% | Sep 12, 2017 | A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV spec... |
| CVE-2017-14318 | — | — | 0.4% | Sep 12, 2017 | An issue was discovered in Xen 4.5.x through 4.9.x. The function `__gnttab_cache_flush` handles GNTTABOP_cache_flush gra... |
| CVE-2017-14317 | — | — | 0.3% | Sep 12, 2017 | A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting down... |
| CVE-2017-14316 | — | — | 0.4% | Sep 12, 2017 | A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to sp... |
| CVE-2017-14315 | — | — | 1.0% | Sep 12, 2017 | In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP (Low Energy Audio Protocol), a large aud... |
| CVE-2017-14335 | — | — | 27.8% | Sep 12, 2017 | On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT requ... |
| CVE-2017-14333 | — | — | 1.2% | Sep 12, 2017 | The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (I... |
| CVE-2017-14326 | — | — | 1.1% | Sep 12, 2017 | In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which al... |
| CVE-2017-14325 | — | — | 2.3% | Sep 12, 2017 | In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, w... |
| CVE-2017-14324 | — | — | 1.5% | Sep 12, 2017 | In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which al... |
| CVE-2017-7735 | — | — | 0.8% | Sep 12, 2017 | A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0 through 5.4.4 allows at... |
| CVE-2017-7734 | — | — | 0.8% | Sep 12, 2017 | A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows attackers to execute unauth... |
| CVE-2017-3133 | — | — | 8.9% | Sep 12, 2017 | A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthor... |
| CVE-2017-3132 | — | — | 8.1% | Sep 12, 2017 | A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthor... |
| CVE-2017-3131 | — | — | 7.7% | Sep 12, 2017 | A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to exec... |
| CVE-2017-14314 | — | — | 1.9% | Sep 12, 2017 | Off-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows remote attackers to cause ... |
| CVE-2017-14313 | — | — | 1.5% | Sep 12, 2017 | The shibboleth_login_form function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XS... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now