2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9960 | — | — | 1.1% | Sep 26, 2017 | An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prio... |
| CVE-2017-9959 | — | — | 0.3% | Sep 26, 2017 | A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system ac... |
| CVE-2017-9958 | — | — | 0.3% | Sep 26, 2017 | An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and pri... |
| CVE-2017-9957 | — | — | 1.6% | Sep 26, 2017 | A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web servi... |
| CVE-2017-9956 | — | — | 1.1% | Sep 26, 2017 | An authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior... |
| CVE-2017-7974 | — | — | 4.6% | Sep 26, 2017 | A path traversal information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions ... |
| CVE-2017-7973 | — | — | 1.5% | Sep 26, 2017 | A SQL injection vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which... |
| CVE-2017-7972 | — | — | 0.5% | Sep 26, 2017 | A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and Po... |
| CVE-2017-7971 | — | — | 0.8% | Sep 26, 2017 | A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and Po... |
| CVE-2017-7970 | — | — | 0.6% | Sep 26, 2017 | A vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with PowerSCADA Expert v8.1 and Po... |
| CVE-2017-7969 | — | — | 0.6% | Sep 26, 2017 | A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Any... |
| CVE-2017-14737 | MEDIUM | 5.5 | 0.3% | Sep 26, 2017 | A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.... |
| CVE-2017-14735 | — | — | 1.7% | Sep 25, 2017 | OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: ... |
| CVE-2017-14734 | — | — | 1.6% | Sep 25, 2017 | The build_msps function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (heap-based buf... |
| CVE-2017-14733 | — | — | 2.1% | Sep 25, 2017 | ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows r... |
| CVE-2017-14731 | — | — | 1.3% | Sep 25, 2017 | ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffe... |
| CVE-2017-14730 | — | — | 0.3% | Sep 25, 2017 | The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has "chown -R" calls fo... |
| CVE-2017-14125 | — | — | 3.2% | Sep 25, 2017 | SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to... |
| CVE-2017-12905 | CRITICAL | 10 | 2.6% | Sep 25, 2017 | Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose in... |
| CVE-2017-9551 | — | — | 0.6% | Sep 25, 2017 | Mahara 15.04 before 15.04.14 and 16.04 before 16.04.8 and 16.10 before 16.10.5 and 17.04 before 17.04.3 are vulnerable t... |
| CVE-2017-1555 | — | — | 0.9% | Sep 25, 2017 | IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed t... |
| CVE-2017-1551 | — | — | 0.9% | Sep 25, 2017 | IBM API Connect 5.0.0.0 through 5.0.7.2 could allow a remote attacker to hijack the clicking action of the victim. By pe... |
| CVE-2017-14729 | — | — | 2.3% | Sep 25, 2017 | The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Bin... |
| CVE-2017-1424 | — | — | 0.7% | Sep 25, 2017 | IBM Business Process Manager 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit... |
| CVE-2017-1362 | — | — | 0.3% | Sep 25, 2017 | IBM Security Identity Manager Adapters 6.0 and 7.0 stores user credentials in plain in clear text which can be read by a... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now