2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12647 | — | — | 0.7% | Aug 7, 2017 | XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title. |
| CVE-2017-12646 | — | — | 0.7% | Aug 7, 2017 | XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address. |
| CVE-2017-12645 | — | — | 0.6% | Aug 7, 2017 | XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId. |
| CVE-2017-12567 | — | — | 1.2% | Aug 7, 2017 | SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.1... |
| CVE-2017-9801 | — | — | 6.0% | Aug 7, 2017 | When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the ca... |
| CVE-2017-12644 | HIGH | 8.8 | 2.4% | Aug 7, 2017 | ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c. |
| CVE-2017-12643 | MEDIUM | 6.5 | 2.5% | Aug 7, 2017 | ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c. |
| CVE-2017-12642 | — | — | 1.4% | Aug 7, 2017 | ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c. |
| CVE-2017-12641 | HIGH | 8.8 | 1.4% | Aug 7, 2017 | ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\png.c. |
| CVE-2017-12640 | HIGH | 8.8 | 2.5% | Aug 7, 2017 | ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c. |
| CVE-2017-12479 | — | — | 11.8% | Aug 7, 2017 | It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR env... |
| CVE-2017-12478 | CRITICAL | 9.8 | 78.3% | Aug 7, 2017 | It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of... |
| CVE-2017-12477 | CRITICAL | 9.8 | 68.2% | Aug 7, 2017 | It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xin... |
| CVE-2017-9647 | — | — | 0.5% | Aug 7, 2017 | A Stack-Based Buffer Overflow issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW sev... |
| CVE-2017-9633 | HIGH | 8.8 | 2.2% | Aug 7, 2017 | An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in the Continental AG In... |
| CVE-2017-9632 | — | — | 0.5% | Aug 7, 2017 | A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versio... |
| CVE-2017-9630 | — | — | 1.2% | Aug 7, 2017 | An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWas... |
| CVE-2017-7936 | — | — | 0.3% | Aug 7, 2017 | A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, ... |
| CVE-2017-7932 | — | — | 0.3% | Aug 7, 2017 | An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF... |
| CVE-2017-7928 | — | — | 2.3% | Aug 7, 2017 | An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Secur... |
| CVE-2017-7920 | — | — | 2.7% | Aug 7, 2017 | An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiF... |
| CVE-2017-7916 | — | — | 1.5% | Aug 7, 2017 | A Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and p... |
| CVE-2017-6770 | MEDIUM | 4.2 | 1.7% | Aug 7, 2017 | Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, a... |
| CVE-2017-6769 | — | — | 0.9% | Aug 7, 2017 | A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an aut... |
| CVE-2017-6766 | — | — | 1.2% | Aug 7, 2017 | A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco Firepower System Software 5... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now