2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-15578 | — | — | 1.3% | Oct 18, 2017 | In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php. |
| CVE-2017-15577 | — | — | 1.6% | Oct 18, 2017 | Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obt... |
| CVE-2017-15576 | — | — | 1.6% | Oct 18, 2017 | Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attac... |
| CVE-2017-15575 | — | — | 1.3% | Oct 18, 2017 | In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the Repository module is enabled in... |
| CVE-2017-15574 | — | — | 1.1% | Oct 18, 2017 | In Redmine before 3.2.6 and 3.3.x before 3.3.3, stored XSS is possible by using an SVG document as an attachment. |
| CVE-2017-15573 | — | — | 1.1% | Oct 18, 2017 | In Redmine before 3.2.6 and 3.3.x before 3.3.3, XSS exists because markup is mishandled in wiki content. |
| CVE-2017-15572 | — | — | 2.4% | Oct 18, 2017 | In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens... |
| CVE-2017-15571 | — | — | 1.2% | Oct 18, 2017 | In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/issues/_list.html.erb via c... |
| CVE-2017-15570 | — | — | 1.2% | Oct 18, 2017 | In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/timelog/_list.html.erb via ... |
| CVE-2017-15569 | — | — | 0.9% | Oct 18, 2017 | In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/queries_helper.rb via a m... |
| CVE-2017-15568 | — | — | 0.9% | Oct 18, 2017 | In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/application_helper.rb via... |
| CVE-2017-9625 | — | — | 2.3% | Oct 17, 2017 | An Improper Authentication issue was discovered in Envitech EnviDAS Ultimate Versions prior to v1.0.0.5. The web applica... |
| CVE-2017-15565 | — | — | 2.1% | Oct 17, 2017 | In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via ... |
| CVE-2017-14013 | — | — | 0.9% | Oct 17, 2017 | A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interf... |
| CVE-2017-14011 | — | — | 0.6% | Oct 17, 2017 | A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application ... |
| CVE-2017-14009 | — | — | 0.7% | Oct 17, 2017 | An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When an authenticated... |
| CVE-2017-14007 | — | — | 0.9% | Oct 17, 2017 | An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's... |
| CVE-2017-14005 | — | — | 1.4% | Oct 17, 2017 | An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When setting a ... |
| CVE-2017-13999 | — | — | 2.8% | Oct 17, 2017 | A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-base... |
| CVE-2017-15539 | — | — | 1.2% | Oct 17, 2017 | SQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php. |
| CVE-2017-6273 | — | — | 0.3% | Oct 17, 2017 | NVIDIA ADSP Firmware contains a vulnerability in the ADSP Loader component where there is the potential to write to a me... |
| CVE-2017-5531 | HIGH | 8 | 1.3% | Oct 17, 2017 | Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Inter... |
| CVE-2017-3761 | — | — | 4.2% | Oct 17, 2017 | The Lenovo Service Framework Android application executes some system commands without proper sanitization of external i... |
| CVE-2017-3760 | — | — | 0.8% | Oct 17, 2017 | The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verificat... |
| CVE-2017-3759 | — | — | 1.7% | Oct 17, 2017 | The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now