2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-8035 | HIGH | 7.5 | 1.4% | Jul 25, 2017 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and p... |
| CVE-2017-8033 | HIGH | 7.8 | 1.0% | Jul 25, 2017 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 a... |
| CVE-2017-7541 | HIGH | 7.8 | 0.5% | Jul 25, 2017 | The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel b... |
| CVE-2017-1382 | — | — | 0.4% | Jul 24, 2017 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the ... |
| CVE-2017-1380 | — | — | 1.0% | Jul 24, 2017 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows... |
| CVE-2017-1287 | — | — | 0.6% | Jul 24, 2017 | IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By... |
| CVE-2017-1249 | — | — | 0.6% | Jul 24, 2017 | IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja... |
| CVE-2017-1245 | — | — | 0.5% | Jul 24, 2017 | IBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability all... |
| CVE-2017-9554 | — | — | 75.0% | Jul 24, 2017 | An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allo... |
| CVE-2017-9553 | — | — | 1.4% | Jul 24, 2017 | A design flaw in SYNO.API.Encryption in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to... |
| CVE-2017-8036 | HIGH | 7.8 | 1.4% | Jul 24, 2017 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The ... |
| CVE-2017-2605 | — | — | — | Jul 24, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-1000362. Reason: This candidate is a duplicate o... |
| CVE-2017-11327 | — | — | 0.9% | Jul 24, 2017 | An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-... |
| CVE-2017-11326 | — | — | 1.0% | Jul 24, 2017 | An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file uplo... |
| CVE-2017-11325 | — | — | 1.2% | Jul 24, 2017 | An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on actionphp/download.File... |
| CVE-2017-11324 | — | — | 1.1% | Jul 24, 2017 | An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.S... |
| CVE-2017-10711 | — | — | 0.7% | Jul 24, 2017 | In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences... |
| CVE-2017-11608 | — | — | 1.1% | Jul 24, 2017 | There is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp in LibSass 3.4.5. A cra... |
| CVE-2017-11422 | HIGH | 8.8 | 0.9% | Jul 24, 2017 | Statamic framework before 2.6.0 does not correctly check a session's permissions when the methods from a user's class ar... |
| CVE-2017-11605 | — | — | 1.5% | Jul 24, 2017 | There is a heap based buffer over-read in LibSass 3.4.5, related to address 0xb4803ea1. A crafted input will lead to a r... |
| CVE-2017-11600 | HIGH | 7 | 0.4% | Jul 24, 2017 | net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the... |
| CVE-2017-11594 | — | — | 1.2% | Jul 24, 2017 | Cross-site scripting (XSS) vulnerability in the Markdown parser in Loomio before 1.8.0 allows remote attackers to inject... |
| CVE-2017-11593 | — | — | 0.8% | Jul 24, 2017 | Cross-site scripting (XSS) vulnerability in the Markdown Preview Plus extension before 0.5.7 for Chrome allows remote at... |
| CVE-2017-11592 | — | — | 1.7% | Jul 24, 2017 | There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that wi... |
| CVE-2017-11591 | HIGH | 7.5 | 3.1% | Jul 24, 2017 | There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now