2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-3456 | MEDIUM | 4.9 | 3.0% | Apr 24, 2017 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are aff... |
| CVE-2017-3453 | MEDIUM | 6.5 | 3.1% | Apr 24, 2017 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that a... |
| CVE-2017-5160 | MEDIUM | 5.3 | 0.5% | Apr 20, 2017 | An Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version... |
| CVE-2017-2806 | MEDIUM | 4.3 | 0.9% | Apr 20, 2017 | An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functiona... |
| CVE-2017-7718 | MEDIUM | 5.5 | 0.5% | Apr 20, 2017 | hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of ser... |
| CVE-2017-7938 | MEDIUM | 6.6 | 5.0% | Apr 20, 2017 | Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cau... |
| CVE-2017-7188 | MEDIUM | 5.4 | 1.4% | Apr 14, 2017 | Zurmo 3.1.1 Stable allows a Cross-Site Scripting (XSS) attack with a base64-encoded SCRIPT element within a data: URL in... |
| CVE-2017-7725 | MEDIUM | 6.1 | 2.8% | Apr 13, 2017 | concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "ca... |
| CVE-2017-7697 | MEDIUM | 5.5 | 0.9% | Apr 11, 2017 | In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted ... |
| CVE-2017-7377 | MEDIUM | 6 | 0.4% | Apr 10, 2017 | The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS pri... |
| CVE-2017-3887 | MEDIUM | 5.9 | 1.3% | Apr 7, 2017 | A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco Firepower System Softw... |
| CVE-2017-0888 | MEDIUM | 4.3 | 1.5% | Apr 5, 2017 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navi... |
| CVE-2017-0887 | MEDIUM | 4.3 | 0.9% | Apr 5, 2017 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing ... |
| CVE-2017-0886 | MEDIUM | 6.5 | 1.2% | Apr 5, 2017 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application lo... |
| CVE-2017-0885 | MEDIUM | 4.3 | 0.9% | Apr 5, 2017 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share.... |
| CVE-2017-0884 | MEDIUM | 4.3 | 0.7% | Apr 5, 2017 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permis... |
| CVE-2017-7306 | MEDIUM | 6.4 | 0.4% | Apr 4, 2017 | Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proxi... |
| CVE-2017-7305 | MEDIUM | 4.6 | 0.3% | Apr 4, 2017 | Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate attac... |
| CVE-2017-7389 | MEDIUM | 6.1 | 0.8% | Apr 1, 2017 | Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release_3.5.4'. The vulnerabilities exist due to insu... |
| CVE-2017-7388 | MEDIUM | 6.1 | 0.8% | Apr 1, 2017 | A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'. The vulnerability exists due to insufficient filtrat... |
| CVE-2017-7320 | MEDIUM | 6.1 | 0.9% | Mar 30, 2017 | setup/controllers/language.php in MODX Revolution 2.5.4-pl and earlier does not properly constrain the language paramete... |
| CVE-2017-5973 | MEDIUM | 5.5 | 0.5% | Mar 27, 2017 | The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to... |
| CVE-2017-7264 | MEDIUM | 5.3 | 1.4% | Mar 26, 2017 | Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote a... |
| CVE-2017-7251 | MEDIUM | 6.1 | 1.0% | Mar 23, 2017 | A Cross-Site Scripting (XSS) was discovered in pi-engine/pi 2.5.0. The vulnerability exists due to insufficient filtrati... |
| CVE-2017-7200 | MEDIUM | 5.8 | 2.1% | Mar 21, 2017 | An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allo... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now