2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9258 | — | — | 4.2% | Jul 27, 2017 | The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to... |
| CVE-2017-11691 | — | — | 2.0% | Jul 27, 2017 | Cross-site scripting (XSS) vulnerability in auth_profile.php in Cacti 1.1.13 allows remote attackers to inject arbitrary... |
| CVE-2017-11687 | — | — | 1.3% | Jul 27, 2017 | Multiple Persistent cross-site scripting (XSS) vulnerabilities in Event log parsing and Display functions in Zoho Manage... |
| CVE-2017-11686 | — | — | 2.3% | Jul 27, 2017 | Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password vi... |
| CVE-2017-11685 | — | — | 1.3% | Jul 27, 2017 | Multiple Reflective cross-site scripting (XSS) vulnerabilities in search and display of event data in Zoho ManageEngine ... |
| CVE-2017-11684 | — | — | 1.6% | Jul 27, 2017 | There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to... |
| CVE-2017-11681 | — | — | 1.2% | Jul 27, 2017 | Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that sh... |
| CVE-2017-11680 | — | — | 0.5% | Jul 27, 2017 | Cross-Site Request Forgery (CSRF) exists in Hashtopussy 0.4.0, allowing an admin password change via users.php. |
| CVE-2017-11679 | — | — | 0.7% | Jul 27, 2017 | Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action... |
| CVE-2017-11678 | — | — | 1.7% | Jul 27, 2017 | SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via th... |
| CVE-2017-11677 | — | — | 0.9% | Jul 27, 2017 | Cross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to inject arbitrary web script or HTM... |
| CVE-2017-11675 | — | — | 2.9% | Jul 27, 2017 | The traverseStrictSanitize function in admin_dir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles... |
| CVE-2017-11674 | — | — | 1.7% | Jul 27, 2017 | Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application crash) via a malformed PRE ... |
| CVE-2017-11673 | — | — | 2.7% | Jul 27, 2017 | Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service (application c... |
| CVE-2017-7659 | — | — | 53.9% | Jul 26, 2017 | A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NUL... |
| CVE-2017-11671 | — | — | 0.4% | Jul 26, 2017 | Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.... |
| CVE-2017-11667 | — | — | 1.4% | Jul 26, 2017 | OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 ... |
| CVE-2017-9835 | — | — | 2.7% | Jul 26, 2017 | The gs_alloc_ref_array function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of... |
| CVE-2017-9740 | — | — | 1.8% | Jul 26, 2017 | The xps_decode_font_char_imp function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to c... |
| CVE-2017-9739 | — | — | 2.5% | Jul 26, 2017 | The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial ... |
| CVE-2017-9727 | — | — | 2.5% | Jul 26, 2017 | The gx_ttfReader__Read function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a... |
| CVE-2017-9726 | — | — | 2.8% | Jul 26, 2017 | The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial ... |
| CVE-2017-9620 | — | — | 1.8% | Jul 26, 2017 | The xps_select_font_encoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to c... |
| CVE-2017-9619 | — | — | 1.8% | Jul 26, 2017 | The xps_true_callback_glyph_name function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers t... |
| CVE-2017-9618 | — | — | 2.1% | Jul 26, 2017 | The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now