2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12649 | — | — | 0.7% | Aug 7, 2017 | XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Disp... |
| CVE-2017-12648 | — | — | 0.7% | Aug 7, 2017 | XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL. |
| CVE-2017-12647 | — | — | 0.7% | Aug 7, 2017 | XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title. |
| CVE-2017-12646 | — | — | 0.7% | Aug 7, 2017 | XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address. |
| CVE-2017-12645 | — | — | 0.6% | Aug 7, 2017 | XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId. |
| CVE-2017-12567 | — | — | 1.2% | Aug 7, 2017 | SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.1... |
| CVE-2017-9801 | — | — | 6.0% | Aug 7, 2017 | When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the ca... |
| CVE-2017-12642 | — | — | 1.4% | Aug 7, 2017 | ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c. |
| CVE-2017-12479 | — | — | 11.8% | Aug 7, 2017 | It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR env... |
| CVE-2017-9647 | — | — | 0.5% | Aug 7, 2017 | A Stack-Based Buffer Overflow issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW sev... |
| CVE-2017-9632 | — | — | 0.5% | Aug 7, 2017 | A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versio... |
| CVE-2017-9630 | — | — | 1.2% | Aug 7, 2017 | An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWas... |
| CVE-2017-7936 | — | — | 0.3% | Aug 7, 2017 | A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, ... |
| CVE-2017-7932 | — | — | 0.3% | Aug 7, 2017 | An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF... |
| CVE-2017-7928 | — | — | 2.3% | Aug 7, 2017 | An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Secur... |
| CVE-2017-7920 | — | — | 2.7% | Aug 7, 2017 | An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiF... |
| CVE-2017-7916 | — | — | 1.5% | Aug 7, 2017 | A Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and p... |
| CVE-2017-6769 | — | — | 0.9% | Aug 7, 2017 | A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an aut... |
| CVE-2017-6766 | — | — | 1.2% | Aug 7, 2017 | A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco Firepower System Software 5... |
| CVE-2017-6765 | — | — | 1.2% | Aug 7, 2017 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.1(6.11) and 9.4(1.2) ... |
| CVE-2017-6764 | — | — | 0.9% | Aug 7, 2017 | A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.5(1) could allow an a... |
| CVE-2017-6763 | — | — | 2.3% | Aug 7, 2017 | A vulnerability in the implementation of the H.264 protocol in Cisco Meeting Server (CMS) 2.1.4 could allow an unauthent... |
| CVE-2017-6762 | — | — | 1.2% | Aug 7, 2017 | A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.6(9), 11.0(0), and 11.0(1) could a... |
| CVE-2017-6761 | — | — | 1.2% | Aug 7, 2017 | A vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could allow an unauthenticate... |
| CVE-2017-6759 | — | — | 1.5% | Aug 7, 2017 | A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticat... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now