2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-15200 | — | — | 1.2% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of anoth... |
| CVE-2017-15199 | — | — | 1.2% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a private project of anothe... |
| CVE-2017-15198 | — | — | 1.4% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a private project of anot... |
| CVE-2017-15197 | — | — | 1.2% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to a private project of a... |
| CVE-2017-15196 | — | — | 1.2% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a private project of ano... |
| CVE-2017-15195 | — | — | 1.2% | Oct 11, 2017 | In Kanboard before 1.0.47, by altering form data, an authenticated user can edit swimlanes of a private project of anoth... |
| CVE-2017-15194 | — | — | 1.1% | Oct 11, 2017 | include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page. |
| CVE-2017-15188 | — | — | 0.8% | Oct 11, 2017 | A persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticate... |
| CVE-2017-5722 | — | — | 0.3% | Oct 11, 2017 | Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions... |
| CVE-2017-5721 | — | — | 0.8% | Oct 11, 2017 | Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH version... |
| CVE-2017-5701 | — | — | 0.3% | Oct 11, 2017 | Insecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versi... |
| CVE-2017-5700 | — | — | 0.4% | Oct 11, 2017 | Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC... |
| CVE-2017-15226 | — | — | 2.2% | Oct 10, 2017 | Zyxel NBG6716 V1.00(AAKG.9)C0 devices allow command injection in the ozkerz component because beginIndex and endIndex ar... |
| CVE-2017-15225 | — | — | 1.4% | Oct 10, 2017 | _bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in G... |
| CVE-2017-8994 | — | — | 9.8% | Oct 10, 2017 | A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows for the exe... |
| CVE-2017-1538 | — | — | 1.4% | Oct 10, 2017 | IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain ... |
| CVE-2017-15219 | — | — | 0.5% | Oct 10, 2017 | The dotCMS 4.1.1 application is vulnerable to Stored Cross-Site Scripting (XSS) affecting a vanity-urls Title field, a c... |
| CVE-2017-15193 | — | — | 2.7% | Oct 10, 2017 | In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addres... |
| CVE-2017-15192 | — | — | 2.4% | Oct 10, 2017 | In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was addressed in epan/dissectors/... |
| CVE-2017-15191 | — | — | 2.7% | Oct 10, 2017 | In Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash. This was addressed in e... |
| CVE-2017-15190 | — | — | 1.7% | Oct 10, 2017 | In Wireshark 2.4.0 to 2.4.1, the RTSP dissector could crash. This was addressed in epan/dissectors/packet-rtsp.c by corr... |
| CVE-2017-15189 | — | — | 1.7% | Oct 10, 2017 | In Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/p... |
| CVE-2017-1503 | — | — | 1.7% | Oct 10, 2017 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to HTTP response splitting attacks. A remote attac... |
| CVE-2017-9717 | — | — | 0.5% | Oct 10, 2017 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while pa... |
| CVE-2017-9715 | — | — | 0.5% | Oct 10, 2017 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while pr... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now