2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-5957 | MEDIUM | 5.5 | 0.4% | Mar 14, 2017 | Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before... |
| CVE-2017-6314 | MEDIUM | 5.5 | 1.9% | Mar 10, 2017 | The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of ... |
| CVE-2017-6312 | MEDIUM | 5.5 | 2.0% | Mar 10, 2017 | Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation... |
| CVE-2017-6511 | MEDIUM | 6.1 | 0.7% | Mar 7, 2017 | andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the act... |
| CVE-2017-6491 | MEDIUM | 6.1 | 0.8% | Mar 5, 2017 | Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficie... |
| CVE-2017-6490 | MEDIUM | 6.1 | 0.8% | Mar 5, 2017 | Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficie... |
| CVE-2017-6489 | MEDIUM | 6.1 | 0.8% | Mar 5, 2017 | Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficie... |
| CVE-2017-6488 | MEDIUM | 6.1 | 0.8% | Mar 5, 2017 | Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficie... |
| CVE-2017-6487 | MEDIUM | 6.1 | 0.8% | Mar 5, 2017 | Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficie... |
| CVE-2017-6484 | MEDIUM | 6.1 | 0.7% | Mar 5, 2017 | Multiple Cross-Site Scripting (XSS) issues were discovered in INTER-Mediator 5.5. The vulnerabilities exist due to insuf... |
| CVE-2017-6478 | MEDIUM | 6.1 | 2.6% | Mar 5, 2017 | paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter). |
| CVE-2017-5614 | MEDIUM | 6.1 | 1.2% | Mar 3, 2017 | Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and... |
| CVE-2017-6397 | MEDIUM | 6.1 | 0.8% | Mar 2, 2017 | An issue was discovered in FlightAirMap v1.0-beta.10. The vulnerability exists due to insufficient filtration of user-su... |
| CVE-2017-6394 | MEDIUM | 6.1 | 1.2% | Mar 2, 2017 | Multiple Cross-Site Scripting (XSS) issues were discovered in OpenEMR 5.0.0 and 5.0.1-dev. The vulnerabilities exist due... |
| CVE-2017-6415 | MEDIUM | 5.5 | 1.3% | Mar 2, 2017 | The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of ... |
| CVE-2017-5976 | MEDIUM | 5.5 | 2.1% | Mar 1, 2017 | Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60,... |
| CVE-2017-5975 | MEDIUM | 5.5 | 2.1% | Mar 1, 2017 | Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.5... |
| CVE-2017-5974 | MEDIUM | 5.5 | 1.8% | Mar 1, 2017 | Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.5... |
| CVE-2017-6297 | MEDIUM | 5.9 | 0.7% | Feb 27, 2017 | The L2TP Client in MikroTik RouterOS versions 6.38.3 and 6.37.4 does not enable IPsec encryption after a reboot, which a... |
| CVE-2017-6188 | MEDIUM | 5.5 | 0.4% | Feb 22, 2017 | Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET ... |
| CVE-2017-6071 | MEDIUM | 5.3 | 1.6% | Feb 21, 2017 | CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosur... |
| CVE-2017-2371 | MEDIUM | 6.5 | 5.7% | Feb 20, 2017 | An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. The issue involves the "WebKit" compon... |
| CVE-2017-5964 | MEDIUM | 6.1 | 0.9% | Feb 12, 2017 | An issue was discovered in Emoncms through 9.8.0. The vulnerability exists due to insufficient filtration of user-suppli... |
| CVE-2017-5942 | MEDIUM | 6.1 | 1.0% | Feb 10, 2017 | An issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter when composing a mail allo... |
| CVE-2017-5606 | MEDIUM | 5.9 | 0.8% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now