2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-11625 | — | — | 1.3% | Jul 25, 2017 | A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of servic... |
| CVE-2017-11624 | — | — | 1.2% | Jul 25, 2017 | A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of servic... |
| CVE-2017-9233 | HIGH | 7.5 | 8.7% | Jul 25, 2017 | XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the p... |
| CVE-2017-6755 | — | — | 1.3% | Jul 25, 2017 | A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning (PCP) Tool could allow an unauthenticate... |
| CVE-2017-6753 | — | — | 6.0% | Jul 25, 2017 | A vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could allow an unauthenticated, ... |
| CVE-2017-6751 | HIGH | 7.5 | 2.0% | Jul 25, 2017 | A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated,... |
| CVE-2017-6750 | — | — | 2.7% | Jul 25, 2017 | A vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an unauthenticated, local attacker to ... |
| CVE-2017-6749 | — | — | 1.2% | Jul 25, 2017 | A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an authenticated... |
| CVE-2017-6748 | — | — | 0.8% | Jul 25, 2017 | A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker... |
| CVE-2017-6746 | — | — | 4.4% | Jul 25, 2017 | A vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an authenticated, remote atta... |
| CVE-2017-6672 | — | — | 1.8% | Jul 25, 2017 | A vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000 Series Aggregation Ser... |
| CVE-2017-6612 | — | — | 1.9% | Jul 25, 2017 | A vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation Services Routers 17.3.9.620... |
| CVE-2017-9413 | — | — | 1.8% | Jul 25, 2017 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attacke... |
| CVE-2017-8919 | MEDIUM | 6.5 | 1.3% | Jul 25, 2017 | NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST API... |
| CVE-2017-11460 | — | — | 1.1% | Jul 25, 2017 | Cross-site scripting (XSS) vulnerability in the DataArchivingService servlet in SAP NetWeaver Portal 7.4 allows remote a... |
| CVE-2017-11459 | — | — | 2.4% | Jul 25, 2017 | SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files an... |
| CVE-2017-11458 | MEDIUM | 6.1 | 1.0% | Jul 25, 2017 | Cross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote ... |
| CVE-2017-11457 | MEDIUM | 6.5 | 1.4% | Jul 25, 2017 | XML external entity (XXE) vulnerability in com.sap.km.cm.ice in SAP NetWeaver AS JAVA 7.5 allows remote authenticated us... |
| CVE-2017-11434 | MEDIUM | 5.5 | 0.4% | Jul 25, 2017 | The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of ... |
| CVE-2017-11617 | — | — | 1.0% | Jul 25, 2017 | Cross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary ... |
| CVE-2017-11614 | — | — | 1.1% | Jul 25, 2017 | MEDHOST Connex contains hard-coded credentials that are used for customer database access. An attacker with knowledge of... |
| CVE-2017-11566 | HIGH | 7.8 | 0.8% | Jul 25, 2017 | AppUse 4.0 allows shell command injection via a proxy field. |
| CVE-2017-9457 | — | — | 0.8% | Jul 25, 2017 | Intense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before upgrading the system fi... |
| CVE-2017-7980 | — | — | 0.6% | Jul 25, 2017 | Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest ... |
| CVE-2017-11499 | — | — | 5.5% | Jul 25, 2017 | Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 w... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now