2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6776 | — | — | 0.9% | Aug 17, 2017 | A vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote a... |
| CVE-2017-6775 | — | — | 0.3% | Aug 17, 2017 | A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating syste... |
| CVE-2017-6774 | — | — | 1.2% | Aug 17, 2017 | A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could all... |
| CVE-2017-6773 | — | — | 0.4% | Aug 17, 2017 | A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating syste... |
| CVE-2017-6772 | — | — | 0.9% | Aug 17, 2017 | A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to view sensiti... |
| CVE-2017-6771 | — | — | 1.7% | Aug 17, 2017 | A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, rem... |
| CVE-2017-6768 | — | — | 0.4% | Aug 17, 2017 | A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application P... |
| CVE-2017-6767 | — | — | 1.2% | Aug 17, 2017 | A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attack... |
| CVE-2017-6710 | — | — | 1.8% | Aug 17, 2017 | A vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an authenticated, remote attacke... |
| CVE-2017-12910 | — | — | 1.3% | Aug 17, 2017 | SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands vi... |
| CVE-2017-12909 | — | — | 1.4% | Aug 17, 2017 | SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via... |
| CVE-2017-12908 | — | — | 1.3% | Aug 17, 2017 | SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands... |
| CVE-2017-12907 | — | — | 0.7% | Aug 17, 2017 | Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php. |
| CVE-2017-7556 | — | — | 0.7% | Aug 17, 2017 | Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the us... |
| CVE-2017-7555 | — | — | 5.0% | Aug 17, 2017 | Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escap... |
| CVE-2017-12445 | — | — | 0.9% | Aug 17, 2017 | The JB2BitmapCoder::code_row_by_refinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service (i... |
| CVE-2017-12444 | — | — | 0.9% | Aug 17, 2017 | The mdjvu_bitmap_get_bounding_box function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memo... |
| CVE-2017-12443 | — | — | 0.9% | Aug 17, 2017 | The mdjvu_bitmap_pack_row function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read ... |
| CVE-2017-12442 | — | — | 0.9% | Aug 17, 2017 | The row_is_empty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service (invalid memory read and a... |
| CVE-2017-12441 | — | — | 0.9% | Aug 17, 2017 | The row_is_empty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service (invalid memory read and a... |
| CVE-2017-11664 | MEDIUM | 6.5 | 8.4% | Aug 17, 2017 | The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory ... |
| CVE-2017-11663 | — | — | 5.5% | Aug 17, 2017 | The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory ... |
| CVE-2017-11662 | — | — | 9.7% | Aug 17, 2017 | The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and appli... |
| CVE-2017-11661 | — | — | 10.8% | Aug 17, 2017 | The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory ... |
| CVE-2017-12892 | HIGH | 7.8 | 3.3% | Aug 16, 2017 | Foxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading vulnerability, wherein... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now