2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-13138 | — | — | 1.2% | Aug 23, 2017 | DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers... |
| CVE-2017-13137 | CRITICAL | 9.8 | 2.3% | Aug 23, 2017 | The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php. |
| CVE-2017-12904 | — | — | 6.4% | Aug 23, 2017 | Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 thr... |
| CVE-2017-12858 | CRITICAL | 9.8 | 3.7% | Aug 23, 2017 | Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecifie... |
| CVE-2017-12844 | — | — | 0.8% | Aug 23, 2017 | Cross-site scripting (XSS) vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated do... |
| CVE-2017-12791 | — | — | 4.6% | Aug 23, 2017 | Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.... |
| CVE-2017-11610 | — | — | 87.5% | Aug 23, 2017 | The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows rem... |
| CVE-2017-13146 | HIGH | 8.8 | 1.3% | Aug 23, 2017 | In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.... |
| CVE-2017-13145 | MEDIUM | 6.5 | 1.6% | Aug 23, 2017 | In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly valida... |
| CVE-2017-13144 | — | — | 2.0% | Aug 23, 2017 | In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the ima... |
| CVE-2017-13143 | — | — | 2.9% | Aug 23, 2017 | In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data,... |
| CVE-2017-13142 | — | — | 1.8% | Aug 23, 2017 | In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insu... |
| CVE-2017-13141 | — | — | 1.2% | Aug 23, 2017 | In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in c... |
| CVE-2017-13140 | — | — | 1.5% | Aug 23, 2017 | In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attacke... |
| CVE-2017-13139 | CRITICAL | 9.8 | 3.8% | Aug 23, 2017 | In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds ... |
| CVE-2017-13134 | — | — | 2.0% | Aug 23, 2017 | In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in cod... |
| CVE-2017-13133 | — | — | 1.6% | Aug 23, 2017 | In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause... |
| CVE-2017-13132 | — | — | 1.1% | Aug 23, 2017 | In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump ... |
| CVE-2017-13131 | — | — | 1.5% | Aug 23, 2017 | In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allo... |
| CVE-2017-13130 | — | — | 0.4% | Aug 23, 2017 | mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working direct... |
| CVE-2017-1422 | — | — | 0.4% | Aug 22, 2017 | IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications whi... |
| CVE-2017-5208 | — | — | 3.6% | Aug 22, 2017 | Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service ... |
| CVE-2017-12787 | — | — | 24.6% | Aug 22, 2017 | A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through N... |
| CVE-2017-12786 | — | — | 25.3% | Aug 22, 2017 | Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW40... |
| CVE-2017-12785 | — | — | 16.0% | Aug 22, 2017 | The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on Novi... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now