2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6144 | — | — | 0.6% | Oct 20, 2017 | In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS, the serv... |
| CVE-2017-6141 | — | — | 1.1% | Oct 20, 2017 | In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS a... |
| CVE-2017-12628 | — | — | 0.8% | Oct 20, 2017 | The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issu... |
| CVE-2017-14937 | — | — | 1.0% | Oct 20, 2017 | The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access (SA) data to th... |
| CVE-2017-2133 | — | — | 1.2% | Oct 20, 2017 | SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allows ... |
| CVE-2017-2132 | — | — | 1.2% | Oct 20, 2017 | Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to delete arbitrary ... |
| CVE-2017-2131 | — | — | 1.2% | Oct 20, 2017 | Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to bypass access res... |
| CVE-2017-15651 | — | — | 1.3% | Oct 20, 2017 | PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .e... |
| CVE-2017-15650 | — | — | 2.0% | Oct 19, 2017 | musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback in network/lookup_name.... |
| CVE-2017-14019 | — | — | 0.4% | Oct 19, 2017 | An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted searc... |
| CVE-2017-14017 | — | — | 0.7% | Oct 19, 2017 | An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An uncontrolled ... |
| CVE-2017-15649 | — | — | 1.0% | Oct 19, 2017 | net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls ... |
| CVE-2017-15648 | — | — | 0.7% | Oct 19, 2017 | In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XSS via the page_title parameter. |
| CVE-2017-15647 | — | — | 26.6% | Oct 19, 2017 | On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a cra... |
| CVE-2017-15646 | — | — | 4.8% | Oct 19, 2017 | Webmin before 1.860 has XSS with resultant remote code execution. Under the 'Others/File Manager' menu, there is a 'Down... |
| CVE-2017-15645 | — | — | 3.2% | Oct 19, 2017 | CSRF exists in Webmin 1.850. By sending a GET request to at/create_job.cgi containing dir=/&cmd= in the URI, an attacker... |
| CVE-2017-15644 | — | — | 8.9% | Oct 19, 2017 | SSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link.cgi, as demonstrated by a GET request for tunnel/link.cgi/h... |
| CVE-2017-15643 | — | — | 6.1% | Oct 19, 2017 | An active network attacker (MiTM) can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. IKA... |
| CVE-2017-10933 | — | — | 2.1% | Oct 19, 2017 | All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by direct... |
| CVE-2017-5636 | — | — | 3.6% | Oct 19, 2017 | In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization... |
| CVE-2017-5635 | — | — | 3.3% | Oct 19, 2017 | In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to... |
| CVE-2017-15642 | — | — | 1.5% | Oct 19, 2017 | In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supp... |
| CVE-2017-15639 | — | — | 6.8% | Oct 19, 2017 | tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the ... |
| CVE-2017-10955 | HIGH | 8.8 | 6.7% | Oct 19, 2017 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection ... |
| CVE-2017-3588 | — | — | 0.5% | Oct 19, 2017 | Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: HA for MySQL). Suppor... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now