2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-15296 | — | — | 0.5% | Oct 16, 2017 | The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964. |
| CVE-2017-15295 | — | — | 2.4% | Oct 16, 2017 | Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 25... |
| CVE-2017-15294 | — | — | 1.0% | Oct 16, 2017 | The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964. |
| CVE-2017-15293 | — | — | 3.9% | Oct 16, 2017 | Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal r... |
| CVE-2017-14952 | — | — | 5.1% | Oct 16, 2017 | Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote atta... |
| CVE-2017-15376 | CRITICAL | 9.8 | 3.8% | Oct 16, 2017 | The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote attackers to execute a... |
| CVE-2017-15375 | — | — | 0.9% | Oct 16, 2017 | Multiple client-side cross site scripting vulnerabilities have been discovered in the WpJobBoard v4.5.1 web-application ... |
| CVE-2017-15374 | — | — | 4.8% | Oct 16, 2017 | Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management... |
| CVE-2017-15373 | — | — | 1.7% | Oct 16, 2017 | E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the search private area). |
| CVE-2017-15372 | — | — | 1.6% | Oct 16, 2017 | There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14... |
| CVE-2017-15371 | — | — | 1.6% | Oct 16, 2017 | There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A... |
| CVE-2017-15370 | — | — | 1.7% | Oct 16, 2017 | There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted i... |
| CVE-2017-15369 | — | — | 1.2% | Oct 16, 2017 | The build_filter_chain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a... |
| CVE-2017-15368 | — | — | 1.3% | Oct 16, 2017 | The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service... |
| CVE-2017-15362 | — | — | 1.2% | Oct 16, 2017 | osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/ticket... |
| CVE-2017-15303 | — | — | 1.5% | Oct 16, 2017 | In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because... |
| CVE-2017-15302 | — | — | 0.4% | Oct 16, 2017 | In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver (e.g., cpuz143_x64.sys for version... |
| CVE-2017-15364 | — | — | 1.4% | Oct 15, 2017 | The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and a... |
| CVE-2017-15363 | HIGH | 7.5 | 13.6% | Oct 15, 2017 | Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used ... |
| CVE-2017-15360 | — | — | 0.5% | Oct 15, 2017 | PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, relat... |
| CVE-2017-15300 | — | — | 1.1% | Oct 15, 2017 | The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort ... |
| CVE-2017-15305 | — | — | 0.9% | Oct 15, 2017 | XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php. |
| CVE-2017-15304 | — | — | 1.2% | Oct 15, 2017 | /bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own se... |
| CVE-2017-15299 | — | — | 0.5% | Oct 14, 2017 | The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is uni... |
| CVE-2017-12629 | CRITICAL | 9.8 | 91.9% | Oct 14, 2017 | Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction wi... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now