2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7009 | — | — | 1.4% | Jul 20, 2017 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS... |
| CVE-2017-7008 | — | — | 1.6% | Jul 20, 2017 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS... |
| CVE-2017-7007 | — | — | 1.9% | Jul 20, 2017 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "EventKitUI" co... |
| CVE-2017-7006 | — | — | 1.3% | Jul 20, 2017 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS... |
| CVE-2017-2517 | — | — | 1.1% | Jul 20, 2017 | An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Safari" compon... |
| CVE-2017-11478 | — | — | 1.8% | Jul 20, 2017 | The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote atta... |
| CVE-2017-6532 | — | — | 1.5% | Jul 20, 2017 | Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 have cleartext credentials in /mib.db. |
| CVE-2017-6531 | — | — | 1.5% | Jul 20, 2017 | On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20, the backup/restore feature lacks access control,... |
| CVE-2017-6530 | — | — | 1.5% | Jul 20, 2017 | Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 do not check password.shtml authorization, leading t... |
| CVE-2017-9785 | — | — | 3.1% | Jul 20, 2017 | Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JS... |
| CVE-2017-11475 | — | — | 1.2% | Jul 20, 2017 | GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php. |
| CVE-2017-11474 | — | — | 1.4% | Jul 20, 2017 | GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via a... |
| CVE-2017-11472 | — | — | 0.4% | Jul 20, 2017 | The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the ope... |
| CVE-2017-11471 | — | — | 1.5% | Jul 20, 2017 | IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the el... |
| CVE-2017-11470 | — | — | 1.5% | Jul 20, 2017 | IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the... |
| CVE-2017-11469 | — | — | 4.9% | Jul 20, 2017 | get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter. |
| CVE-2017-10676 | — | — | 1.1% | Jul 20, 2017 | On D-Link DIR-600M devices before C1_v3.05ENB01_beta_20170306, XSS was found in the form2userconfig.cgi username paramet... |
| CVE-2017-9765 | — | — | 21.9% | Jul 20, 2017 | Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and ot... |
| CVE-2017-11467 | — | — | 73.1% | Jul 20, 2017 | OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which a... |
| CVE-2017-11466 | — | — | 7.7% | Jul 20, 2017 | Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remo... |
| CVE-2017-11465 | — | — | 1.7% | Jul 19, 2017 | The parser_yyerror function in the UTF-8 parser in Ruby 2.4.1 allows attackers to cause a denial of service (invalid wri... |
| CVE-2017-11464 | — | — | 1.3% | Jul 19, 2017 | A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of ... |
| CVE-2017-1309 | — | — | 0.2% | Jul 19, 2017 | IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be rea... |
| CVE-2017-1224 | — | — | 1.3% | Jul 19, 2017 | IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt h... |
| CVE-2017-1223 | — | — | 1.4% | Jul 19, 2017 | IBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now