2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-11666 | — | — | 0.8% | Jul 26, 2017 | Cross-site scripting (XSS) vulnerability in js/ViewerPanel.js in the file previewer plugin in Kopano WebApp versions 3.3... |
| CVE-2017-5691 | — | — | 1.4% | Jul 26, 2017 | Incorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families, Intel Xeon E3-1500M v5 an... |
| CVE-2017-11658 | — | — | 3.3% | Jul 26, 2017 | In the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characte... |
| CVE-2017-11615 | — | — | 0.8% | Jul 26, 2017 | A sandbox escape in the Lua interface in Wube Factorio before 0.15.31 allows remote game servers or user-assisted attack... |
| CVE-2017-11612 | — | — | 1.0% | Jul 26, 2017 | In Joomla! before 3.7.4, inadequate filtering of potentially malicious HTML tags leads to XSS vulnerabilities in various... |
| CVE-2017-11655 | HIGH | 7.5 | 2.5% | Jul 26, 2017 | A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was mismanaged.... |
| CVE-2017-11654 | MEDIUM | 5.9 | 2.0% | Jul 26, 2017 | An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination o... |
| CVE-2017-6005 | — | — | 0.3% | Jul 26, 2017 | Waves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File Version 1.1.6.0. This serv... |
| CVE-2017-11651 | MEDIUM | 6.1 | 0.7% | Jul 26, 2017 | NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag. |
| CVE-2017-11644 | — | — | 1.6% | Jul 26, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() functio... |
| CVE-2017-11643 | — | — | 2.2% | Jul 26, 2017 | GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple fra... |
| CVE-2017-11642 | — | — | 1.8% | Jul 26, 2017 | GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage() function in coders/map.c when processing a n... |
| CVE-2017-11641 | — | — | 2.0% | Jul 26, 2017 | GraphicsMagick 1.3.26 has a Memory Leak in the PersistCache function in magick/pixel_cache.c during writing of Magick Pe... |
| CVE-2017-11640 | — | — | 2.7% | Jul 26, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTI... |
| CVE-2017-11639 | — | — | 2.7% | Jul 26, 2017 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteC... |
| CVE-2017-11638 | — | — | 1.7% | Jul 26, 2017 | GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage() function in coders/map.c when processing a non... |
| CVE-2017-11637 | — | — | 2.1% | Jul 26, 2017 | GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of mo... |
| CVE-2017-11636 | — | — | 3.1% | Jul 26, 2017 | GraphicsMagick 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing multiple frame... |
| CVE-2017-11631 | — | — | 1.0% | Jul 26, 2017 | dapur/app/app_user/controller/status.php in Fiyo CMS 2.0.7 has SQL injection via the id parameter. |
| CVE-2017-11630 | — | — | 1.8% | Jul 26, 2017 | dapur\apps\app_config\controller\backuper.php in Fiyo CMS 2.0.7 allows remote attackers to delete arbitrary files via di... |
| CVE-2017-11629 | — | — | 1.9% | Jul 26, 2017 | dayrui FineCms through 5.0.10 has Cross Site Scripting (XSS) in controllers/api.php via the function parameter in a c=ap... |
| CVE-2017-11613 | — | — | 2.7% | Jul 26, 2017 | In LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted input will lead to a de... |
| CVE-2017-11628 | — | — | 3.4% | Jul 25, 2017 | In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in the zend_ini_do_op() f... |
| CVE-2017-11627 | — | — | 1.3% | Jul 25, 2017 | A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of servic... |
| CVE-2017-11626 | — | — | 1.2% | Jul 25, 2017 | A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of servic... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now