2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12677 | — | — | 1.0% | Aug 8, 2017 | IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS in an Angular expression on the authorize response page, wh... |
| CVE-2017-9942 | — | — | 0.3% | Aug 8, 2017 | A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker wit... |
| CVE-2017-9941 | — | — | 0.9% | Aug 8, 2017 | A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker in ... |
| CVE-2017-9940 | — | — | 0.9% | Aug 8, 2017 | A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker wit... |
| CVE-2017-9939 | — | — | 2.1% | Aug 8, 2017 | A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker wit... |
| CVE-2017-9938 | — | — | 2.9% | Aug 8, 2017 | A vulnerability was discovered in Siemens SIMATIC Logon (All versions before V1.6) that could allow specially crafted pa... |
| CVE-2017-6873 | — | — | 1.0% | Aug 8, 2017 | A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker t... |
| CVE-2017-6872 | — | — | 0.8% | Aug 8, 2017 | A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker w... |
| CVE-2017-6871 | — | — | 0.3% | Aug 8, 2017 | A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2) and SIMAT... |
| CVE-2017-6870 | — | — | 0.9% | Aug 8, 2017 | A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The exis... |
| CVE-2017-6869 | — | — | 3.0% | Aug 8, 2017 | A vulnerability was discovered in Siemens ViewPort for Web Office Portal before revision number 1453 that could allow an... |
| CVE-2017-6866 | — | — | 1.1% | Aug 7, 2017 | A vulnerability was discovered in Siemens XHQ server 4 and 5 (4 before V4.7.1.3 and 5 before V5.0.0.2) that could allow ... |
| CVE-2017-12676 | — | — | 0.9% | Aug 7, 2017 | In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which all... |
| CVE-2017-12675 | — | — | 0.9% | Aug 7, 2017 | In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in... |
| CVE-2017-12674 | — | — | 1.6% | Aug 7, 2017 | In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which all... |
| CVE-2017-12673 | — | — | 1.1% | Aug 7, 2017 | In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c, which all... |
| CVE-2017-12672 | — | — | 0.9% | Aug 7, 2017 | In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows... |
| CVE-2017-12671 | — | — | 1.1% | Aug 7, 2017 | In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function ... |
| CVE-2017-12670 | — | — | 1.5% | Aug 7, 2017 | In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function De... |
| CVE-2017-6212 | — | — | — | Aug 7, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its request... |
| CVE-2017-12655 | — | — | 0.7% | Aug 7, 2017 | Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action. |
| CVE-2017-12654 | — | — | 1.1% | Aug 7, 2017 | The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 allows attackers to cause a denial of service (memory... |
| CVE-2017-12653 | — | — | 2.0% | Aug 7, 2017 | 360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any di... |
| CVE-2017-12651 | — | — | 0.7% | Aug 7, 2017 | Cross Site Request Forgery (CSRF) exists in the Blacklist and Whitelist IP Wizard in init.php in the Loginizer plugin be... |
| CVE-2017-12650 | — | — | 1.8% | Aug 7, 2017 | SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now