2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-3948 | — | — | 0.5% | Jun 23, 2017 | Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.... |
| CVE-2017-8813 | — | — | — | Jun 23, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-8831. Reason: This candidate is a duplicate of... |
| CVE-2017-9356 | — | — | 0.8% | Jun 23, 2017 | Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results... |
| CVE-2017-9776 | — | — | 2.0% | Jun 22, 2017 | Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote at... |
| CVE-2017-9775 | — | — | 4.3% | Jun 22, 2017 | Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of s... |
| CVE-2017-0897 | — | — | 4.0% | Jun 22, 2017 | ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy. Successf... |
| CVE-2017-1326 | — | — | 0.8% | Jun 22, 2017 | IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to u... |
| CVE-2017-9424 | — | — | 2.7% | Jun 22, 2017 | IdeaBlade Breeze Breeze.Server.NET before 1.6.5 allows remote attackers to execute arbitrary code, related to use of Typ... |
| CVE-2017-9815 | — | — | 1.6% | Jun 22, 2017 | In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a malloc operation, which ... |
| CVE-2017-0176 | — | — | 45.9% | Jun 22, 2017 | A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 th... |
| CVE-2017-3631 | — | — | 6.0% | Jun 22, 2017 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versio... |
| CVE-2017-3630 | — | — | 4.5% | Jun 22, 2017 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions t... |
| CVE-2017-3629 | — | — | 5.1% | Jun 22, 2017 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions t... |
| CVE-2017-9807 | — | — | 4.9% | Jun 22, 2017 | An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/co... |
| CVE-2017-9782 | — | — | 1.6% | Jun 21, 2017 | JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) v... |
| CVE-2017-4990 | — | — | 3.0% | Jun 21, 2017 | In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverag... |
| CVE-2017-4989 | — | — | 3.3% | Jun 21, 2017 | In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote ... |
| CVE-2017-4988 | — | — | 1.7% | Jun 21, 2017 | EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability th... |
| CVE-2017-3219 | — | — | 0.5% | Jun 21, 2017 | Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates ... |
| CVE-2017-3218 | — | — | 0.3% | Jun 21, 2017 | Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung... |
| CVE-2017-7922 | — | — | 9.6% | Jun 21, 2017 | An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community string... |
| CVE-2017-7918 | — | — | 6.7% | Jun 21, 2017 | An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuration... |
| CVE-2017-6053 | — | — | 0.8% | Jun 21, 2017 | A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A cross-site scripting vulne... |
| CVE-2017-6050 | — | — | 3.5% | Jun 21, 2017 | A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properl... |
| CVE-2017-6045 | — | — | 1.7% | Jun 21, 2017 | An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed with... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now