2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-8895 | — | — | 71.0% | May 10, 2017 | In Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16 before FP1, there is a u... |
| CVE-2017-8892 | — | — | 0.9% | May 10, 2017 | Cross-site scripting (XSS) vulnerability in OpenText Tempo Box 10.0.3 allows remote attackers to inject arbitrary web sc... |
| CVE-2017-8852 | — | — | 3.3% | May 10, 2017 | SAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a crafted CAR archive file... |
| CVE-2017-8891 | — | — | 0.9% | May 10, 2017 | Dropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because the code does not ensur... |
| CVE-2017-3894 | — | — | 0.8% | May 10, 2017 | A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.... |
| CVE-2017-6959 | — | — | — | May 10, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-8879 | — | — | 0.4% | May 10, 2017 | Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the current password, which makes it easier for physica... |
| CVE-2017-7888 | — | — | 1.1% | May 10, 2017 | Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier. |
| CVE-2017-7887 | — | — | 0.9% | May 10, 2017 | Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter. |
| CVE-2017-7886 | — | — | 1.7% | May 10, 2017 | Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter. |
| CVE-2017-7698 | — | — | 1.7% | May 10, 2017 | A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via... |
| CVE-2017-4896 | — | — | 0.3% | May 10, 2017 | Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the... |
| CVE-2017-4895 | — | — | 0.4% | May 10, 2017 | Airwatch Agent for Android contains a vulnerability that may allow a device to bypass root detection. Successful exploit... |
| CVE-2017-1137 | — | — | 1.9% | May 10, 2017 | IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security. A remote attacker could expl... |
| CVE-2017-1103 | — | — | 1.2% | May 10, 2017 | IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when... |
| CVE-2017-8878 | — | — | 1.0% | May 10, 2017 | ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-... |
| CVE-2017-8877 | — | — | 0.9% | May 10, 2017 | ASUS RT-AC* and RT-N* devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID... |
| CVE-2017-8875 | — | — | 0.6% | May 10, 2017 | CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logo... |
| CVE-2017-8874 | — | — | 0.8% | May 10, 2017 | Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authenti... |
| CVE-2017-8868 | — | — | 1.9% | May 10, 2017 | acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp... |
| CVE-2017-5892 | — | — | 1.2% | May 10, 2017 | ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network... |
| CVE-2017-5891 | — | — | 0.5% | May 10, 2017 | ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF. |
| CVE-2017-8859 | — | — | 2.6% | May 9, 2017 | In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root. |
| CVE-2017-8858 | — | — | 2.7% | May 9, 2017 | In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote... |
| CVE-2017-8857 | — | — | 5.7% | May 9, 2017 | In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arb... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now