2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12061 | MEDIUM | 6.1 | 2.9% | Aug 1, 2017 | An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x before 2.5.2. Some variables under us... |
| CVE-2017-11381 | — | — | 3.1% | Aug 1, 2017 | A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore a... |
| CVE-2017-11380 | — | — | 1.5% | Aug 1, 2017 | Backup archives were found to be encrypted with a static password across different installations, which suggest the same... |
| CVE-2017-11379 | — | — | 0.5% | Aug 1, 2017 | Configuration and database backup archives are not signed or validated in Trend Micro Deep Discovery Director 1.1. |
| CVE-2017-11136 | — | — | 0.5% | Aug 1, 2017 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.8... |
| CVE-2017-11135 | — | — | 1.1% | Aug 1, 2017 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.8... |
| CVE-2017-11134 | — | — | 0.8% | Aug 1, 2017 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The login credentials are written into a l... |
| CVE-2017-11133 | — | — | 0.7% | Aug 1, 2017 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.8... |
| CVE-2017-11132 | HIGH | 7.5 | 0.5% | Aug 1, 2017 | An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate pinning is implemented; the... |
| CVE-2017-11131 | — | — | 0.5% | Aug 1, 2017 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.8... |
| CVE-2017-11130 | — | — | 0.4% | Aug 1, 2017 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.8... |
| CVE-2017-11129 | — | — | 1.1% | Aug 1, 2017 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The keystore is locked with a hard-coded p... |
| CVE-2017-11552 | — | — | 6.6% | Aug 1, 2017 | mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to... |
| CVE-2017-12131 | — | — | 0.8% | Aug 1, 2017 | The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the... |
| CVE-2017-12068 | — | — | 0.8% | Aug 1, 2017 | The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an el_admin_categ... |
| CVE-2017-12067 | — | — | 1.1% | Aug 1, 2017 | Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c. |
| CVE-2017-12066 | — | — | 1.4% | Aug 1, 2017 | Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti before 1.1.16 allows remote authenticated user... |
| CVE-2017-12065 | — | — | 2.9% | Aug 1, 2017 | spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-star... |
| CVE-2017-12064 | — | — | 1.2% | Aug 1, 2017 | The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass i... |
| CVE-2017-11727 | — | — | 1.1% | Jul 31, 2017 | services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript co... |
| CVE-2017-11726 | — | — | 0.5% | Jul 31, 2017 | services/system_io/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery... |
| CVE-2017-11648 | — | — | 0.4% | Jul 31, 2017 | Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnera... |
| CVE-2017-1496 | — | — | 0.5% | Jul 31, 2017 | IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows user... |
| CVE-2017-1460 | — | — | 1.4% | Jul 31, 2017 | IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a ... |
| CVE-2017-1386 | — | — | 1.2% | Jul 31, 2017 | IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now