2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-11624 | — | — | 1.2% | Jul 25, 2017 | A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of servic... |
| CVE-2017-6755 | — | — | 1.3% | Jul 25, 2017 | A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning (PCP) Tool could allow an unauthenticate... |
| CVE-2017-6753 | — | — | 6.0% | Jul 25, 2017 | A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, ... |
| CVE-2017-6750 | — | — | 2.7% | Jul 25, 2017 | A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to ... |
| CVE-2017-6749 | — | — | 1.2% | Jul 25, 2017 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated... |
| CVE-2017-6748 | — | — | 0.8% | Jul 25, 2017 | A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker... |
| CVE-2017-6746 | — | — | 4.4% | Jul 25, 2017 | A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote atta... |
| CVE-2017-6672 | — | — | 1.8% | Jul 25, 2017 | A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Ser... |
| CVE-2017-6612 | — | — | 1.9% | Jul 25, 2017 | A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.620... |
| CVE-2017-9413 | — | — | 1.8% | Jul 25, 2017 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attacke... |
| CVE-2017-11460 | — | — | 1.1% | Jul 25, 2017 | Cross-site scripting (XSS) vulnerability in the DataArchivingService servlet in SAP NetWeaver Portal 7.4 allows remote a... |
| CVE-2017-11459 | — | — | 2.4% | Jul 25, 2017 | SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files an... |
| CVE-2017-11617 | — | — | 1.0% | Jul 25, 2017 | Cross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary ... |
| CVE-2017-11614 | — | — | 1.1% | Jul 25, 2017 | MEDHOST Connex contains hard-coded credentials that are used for customer database access. An attacker with knowledge of... |
| CVE-2017-9457 | — | — | 0.8% | Jul 25, 2017 | Intense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before upgrading the system fi... |
| CVE-2017-7980 | — | — | 0.6% | Jul 25, 2017 | Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest ... |
| CVE-2017-11499 | — | — | 5.5% | Jul 25, 2017 | Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 w... |
| CVE-2017-1382 | — | — | 0.4% | Jul 24, 2017 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the ... |
| CVE-2017-1380 | — | — | 1.0% | Jul 24, 2017 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows... |
| CVE-2017-1287 | — | — | 0.6% | Jul 24, 2017 | IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By... |
| CVE-2017-1249 | — | — | 0.6% | Jul 24, 2017 | IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja... |
| CVE-2017-1245 | — | — | 0.5% | Jul 24, 2017 | IBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability all... |
| CVE-2017-9554 | — | — | 75.0% | Jul 24, 2017 | An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allo... |
| CVE-2017-9553 | — | — | 1.4% | Jul 24, 2017 | A design flaw in SYNO.API.Encryption in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to... |
| CVE-2017-2605 | — | — | — | Jul 24, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-1000362. Reason: This candidate is a duplicate o... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now