2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9812 | — | — | 11.3% | Jul 17, 2017 | The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus f... |
| CVE-2017-9811 | — | — | 10.5% | Jul 17, 2017 | The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maint... |
| CVE-2017-9810 | — | — | 1.9% | Jul 17, 2017 | There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Mai... |
| CVE-2017-9671 | — | — | 3.2% | Jul 17, 2017 | A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achiev... |
| CVE-2017-9669 | — | — | 3.2% | Jul 17, 2017 | A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achiev... |
| CVE-2017-9609 | — | — | 1.5% | Jul 17, 2017 | Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web s... |
| CVE-2017-9340 | MEDIUM | 6.5 | 1.0% | Jul 17, 2017 | An attacker is logged in as a normal user and can somehow make admin to delete shared folders in ownCloud Server before ... |
| CVE-2017-9339 | MEDIUM | 5.3 | 1.0% | Jul 17, 2017 | A logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for public calendars. Thus gran... |
| CVE-2017-9338 | MEDIUM | 5.4 | 0.6% | Jul 17, 2017 | Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10... |
| CVE-2017-8896 | — | — | 1.2% | Jul 17, 2017 | ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS o... |
| CVE-2017-7947 | — | — | 1.3% | Jul 17, 2017 | NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive passwo... |
| CVE-2017-6744 | HIGH | 8.8 | 7.2% | Jul 17, 2017 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabiliti... |
| CVE-2017-6743 | HIGH | 8.8 | 10.5% | Jul 17, 2017 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabiliti... |
| CVE-2017-6742 | HIGH | 8.8 | 21.4% | Jul 17, 2017 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the aff... |
| CVE-2017-6741 | HIGH | 8.8 | 6.3% | Jul 17, 2017 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the aff... |
| CVE-2017-6740 | HIGH | 8.8 | 10.8% | Jul 17, 2017 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabiliti... |
| CVE-2017-6739 | HIGH | 8.8 | 10.5% | Jul 17, 2017 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the aff... |
| CVE-2017-6738 | HIGH | 8.8 | 10.5% | Jul 17, 2017 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabiliti... |
| CVE-2017-6737 | HIGH | 8.8 | 42.6% | Jul 17, 2017 | A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the aff... |
| CVE-2017-6736 | HIGH | 8.8 | 70.6% | Jul 17, 2017 | The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabiliti... |
| CVE-2017-9639 | — | — | 2.0% | Jul 17, 2017 | An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has been... |
| CVE-2017-3754 | — | — | 0.3% | Jul 17, 2017 | Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enab... |
| CVE-2017-3742 | — | — | 0.5% | Jul 17, 2017 | In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when an ad-hoc connection is... |
| CVE-2017-11399 | — | — | 1.6% | Jul 17, 2017 | Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attac... |
| CVE-2017-11128 | — | — | 0.6% | Jul 17, 2017 | Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now