2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-13679 | — | — | 0.3% | Oct 10, 2017 | A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attackers to make... |
| CVE-2017-13675 | — | — | 0.3% | Oct 10, 2017 | A denial of service (DoS) attack in Symantec Endpoint Encryption before SEE 11.1.3HF2 allows remote attackers to make a ... |
| CVE-2017-15216 | — | — | 0.8% | Oct 10, 2017 | MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to a... |
| CVE-2017-12623 | — | — | 1.9% | Oct 10, 2017 | An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML Extern... |
| CVE-2017-13706 | — | — | 2.0% | Oct 10, 2017 | XML external entity (XXE) vulnerability in the import package functionality of the deployment module in Lansweeper befor... |
| CVE-2017-12861 | — | — | 3.3% | Oct 10, 2017 | The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are a... |
| CVE-2017-12860 | — | — | 3.5% | Oct 10, 2017 | The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are a... |
| CVE-2017-14943 | — | — | 1.1% | Oct 10, 2017 | Trapeze TransitMaster is vulnerable to information disclosure (emails / hashed passwords) via a modified userID field in... |
| CVE-2017-5637 | — | — | 73.7% | Oct 10, 2017 | Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper... |
| CVE-2017-15038 | — | — | 0.3% | Oct 10, 2017 | Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users t... |
| CVE-2017-14980 | — | — | 22.5% | Oct 10, 2017 | Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username... |
| CVE-2017-14614 | — | — | 1.6% | Oct 10, 2017 | Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before ... |
| CVE-2017-14603 | — | — | 3.2% | Oct 10, 2017 | In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cer... |
| CVE-2017-13723 | — | — | 0.4% | Oct 10, 2017 | In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overfl... |
| CVE-2017-13721 | — | — | 0.4% | Oct 10, 2017 | In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared ... |
| CVE-2017-15185 | — | — | 1.6% | Oct 9, 2017 | plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbis_block_clear function with uninitialized data upon detection... |
| CVE-2017-14973 | — | — | 0.5% | Oct 9, 2017 | IDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) is vulnerable to Stored Cross-Site Scripting (XSS) v... |
| CVE-2017-14972 | — | — | 1.3% | Oct 9, 2017 | InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Del... |
| CVE-2017-14971 | — | — | 0.9% | Oct 9, 2017 | Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted M... |
| CVE-2017-15084 | — | — | 1.5% | Oct 6, 2017 | The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22. |
| CVE-2017-15079 | — | — | 2.5% | Oct 6, 2017 | The Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory traversal. |
| CVE-2017-13069 | — | — | 1.7% | Oct 6, 2017 | QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0... |
| CVE-2017-9273 | — | — | 0.8% | Oct 6, 2017 | The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes. |
| CVE-2017-9272 | — | — | 1.0% | Oct 6, 2017 | The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack. |
| CVE-2017-15078 | — | — | — | Oct 6, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now