2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12074 | — | — | 2.0% | Aug 24, 2017 | Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server before 2.2.1-3042 all... |
| CVE-2017-9510 | — | — | 0.8% | Aug 24, 2017 | The repository changelog resource in Atlassian Fisheye before version 4.4.1 allows remote attackers to inject arbitrary ... |
| CVE-2017-9509 | — | — | 0.8% | Aug 24, 2017 | The review file upload resource in Atlassian Crucible before version 4.4.1 allows remote attackers to inject arbitrary H... |
| CVE-2017-9508 | — | — | 0.8% | Aug 24, 2017 | Various resources in Atlassian Fisheye and Crucible before version 4.4.1 allow remote attackers to inject arbitrary HTML... |
| CVE-2017-9507 | — | — | 0.8% | Aug 24, 2017 | The review dashboard resource in Atlassian Crucible from version 4.1.0 before version 4.4.1 allows remote attackers to i... |
| CVE-2017-13669 | — | — | 1.5% | Aug 24, 2017 | SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php. |
| CVE-2017-12679 | — | — | 1.5% | Aug 24, 2017 | SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php. |
| CVE-2017-11424 | — | — | 1.8% | Aug 24, 2017 | In PyJWT 1.5.0 and below the `invalid_strings` check in `HMACAlgorithm.prepare_key` does not account for all PEM encoded... |
| CVE-2017-12836 | — | — | 6.0% | Aug 24, 2017 | CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code v... |
| CVE-2017-12137 | — | — | 0.4% | Aug 24, 2017 | arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref. |
| CVE-2017-12136 | — | — | 0.3% | Aug 24, 2017 | Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denial... |
| CVE-2017-12135 | — | — | 0.5% | Aug 24, 2017 | Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain pr... |
| CVE-2017-12134 | — | — | 0.5% | Aug 24, 2017 | The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt bloc... |
| CVE-2017-13666 | — | — | 0.4% | Aug 24, 2017 | An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x... |
| CVE-2017-13658 | — | — | 1.3% | Aug 24, 2017 | In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in code... |
| CVE-2017-0805 | — | — | 0.4% | Aug 24, 2017 | A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.... |
| CVE-2017-13649 | — | — | 0.3% | Aug 23, 2017 | UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow loca... |
| CVE-2017-13648 | — | — | 1.4% | Aug 23, 2017 | In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c. |
| CVE-2017-12847 | — | — | 0.8% | Aug 23, 2017 | Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might all... |
| CVE-2017-9506 | — | — | 71.6% | Aug 23, 2017 | The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before ... |
| CVE-2017-13147 | — | — | 1.5% | Aug 23, 2017 | In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c whe... |
| CVE-2017-12971 | — | — | 2.6% | Aug 23, 2017 | Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or... |
| CVE-2017-12970 | — | — | 2.2% | Aug 23, 2017 | Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authenticati... |
| CVE-2017-12965 | — | — | 15.7% | Aug 23, 2017 | Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID pa... |
| CVE-2017-11159 | — | — | 0.4% | Aug 23, 2017 | Multiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader before 1.4.2-084 on Windo... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now