2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-15266 | — | — | 1.4% | Oct 11, 2017 | In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample ... |
| CVE-2017-13722 | — | — | 0.4% | Oct 11, 2017 | In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary ... |
| CVE-2017-13720 | — | — | 0.4% | Oct 11, 2017 | In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with acce... |
| CVE-2017-12188 | HIGH | 7.8 | 0.4% | Oct 11, 2017 | arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse gu... |
| CVE-2017-15220 | — | — | 7.1% | Oct 11, 2017 | Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginni... |
| CVE-2017-7352 | MEDIUM | 5.4 | 0.6% | Oct 11, 2017 | Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject... |
| CVE-2017-15238 | — | — | 1.8% | Oct 11, 2017 | ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26 has a use-after-free issue when the height or width is zero, re... |
| CVE-2017-15236 | — | — | 3.6% | Oct 11, 2017 | Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to ... |
| CVE-2017-15235 | — | — | 5.5% | Oct 11, 2017 | The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication... |
| CVE-2017-15232 | — | — | 2.4% | Oct 11, 2017 | libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file. |
| CVE-2017-15215 | — | — | 1.5% | Oct 11, 2017 | Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtags... |
| CVE-2017-15214 | — | — | 0.9% | Oct 11, 2017 | Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain ad... |
| CVE-2017-15213 | — | — | 0.8% | Oct 11, 2017 | Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administra... |
| CVE-2017-15212 | — | — | 1.2% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can at least see the names of tags of a private ... |
| CVE-2017-15211 | — | — | 1.0% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link to a private project of... |
| CVE-2017-15210 | — | — | 1.1% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private pr... |
| CVE-2017-15209 | — | — | 0.9% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of... |
| CVE-2017-15208 | — | — | 1.0% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic actions from a private proj... |
| CVE-2017-15207 | — | — | 1.0% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a private project of another u... |
| CVE-2017-15206 | — | — | 1.0% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link to a private project of... |
| CVE-2017-15205 | — | — | 1.1% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments from a private project ... |
| CVE-2017-15204 | — | — | 1.0% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions to a private project o... |
| CVE-2017-15203 | — | — | 1.0% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories from a private project of ... |
| CVE-2017-15202 | — | — | 1.0% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of another... |
| CVE-2017-15201 | — | — | 1.2% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a private project of another us... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now