2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9150 | — | — | 1.3% | May 22, 2017 | The do_check function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allow_ptr_leaks value... |
| CVE-2017-1320 | — | — | 0.5% | May 22, 2017 | IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embe... |
| CVE-2017-1289 | — | — | 3.6% | May 22, 2017 | IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A rem... |
| CVE-2017-1282 | — | — | 0.5% | May 22, 2017 | IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed... |
| CVE-2017-1159 | — | — | 0.6% | May 22, 2017 | IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redire... |
| CVE-2017-1092 | — | — | 75.8% | May 22, 2017 | IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system a... |
| CVE-2017-9149 | — | — | 1.8% | May 22, 2017 | Metadata Anonymisation Toolkit (MAT) 0.6 and 0.6.1 silently fails to perform "Clean metadata" actions upon invocation fr... |
| CVE-2017-9147 | — | — | 7.0% | May 22, 2017 | LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to cau... |
| CVE-2017-9146 | — | — | 2.4% | May 22, 2017 | The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before... |
| CVE-2017-5657 | — | — | 0.9% | May 22, 2017 | Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A ... |
| CVE-2017-2175 | — | — | 1.4% | May 22, 2017 | Untrusted search path vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to gain... |
| CVE-2017-2174 | — | — | 1.2% | May 22, 2017 | Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to injec... |
| CVE-2017-2173 | — | — | 0.9% | May 22, 2017 | Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote authenticated atta... |
| CVE-2017-2171 | — | — | 0.9% | May 22, 2017 | Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Mu... |
| CVE-2017-2169 | — | — | 1.4% | May 22, 2017 | Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows r... |
| CVE-2017-2168 | — | — | 1.4% | May 22, 2017 | Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium ... |
| CVE-2017-2162 | — | — | 0.6% | May 22, 2017 | FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series ... |
| CVE-2017-2161 | — | — | 0.4% | May 22, 2017 | FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series ... |
| CVE-2017-7492 | — | — | — | May 22, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-7503. Reason: This candidate is a reservation du... |
| CVE-2017-4916 | — | — | 5.0% | May 22, 2017 | VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Succes... |
| CVE-2017-4915 | — | — | 5.4% | May 22, 2017 | VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration fil... |
| CVE-2017-9140 | — | — | 9.6% | May 22, 2017 | Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms ... |
| CVE-2017-6999 | — | — | 4.7% | May 22, 2017 | An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO... |
| CVE-2017-6998 | — | — | 4.2% | May 22, 2017 | An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO... |
| CVE-2017-6997 | — | — | 4.7% | May 22, 2017 | An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now