2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7688 | — | — | 3.0% | Jul 17, 2017 | Apache OpenMeetings 1.0.0 updates user password in insecure manner. |
| CVE-2017-7685 | — | — | 2.9% | Jul 17, 2017 | Apache OpenMeetings 1.0.0 responds to the following insecure HTTP methods: PUT, DELETE, HEAD, and PATCH. |
| CVE-2017-7684 | — | — | 2.8% | Jul 17, 2017 | Apache OpenMeetings 1.0.0 doesn't check contents of files being uploaded. An attacker can cause a denial of service by u... |
| CVE-2017-7683 | — | — | 2.0% | Jul 17, 2017 | Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure. |
| CVE-2017-7682 | — | — | 1.6% | Jul 17, 2017 | Apache OpenMeetings 3.2.0 is vulnerable to parameter manipulation attacks, as a result attacker has access to restricted... |
| CVE-2017-7681 | — | — | 1.3% | Jul 17, 2017 | Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the... |
| CVE-2017-7680 | — | — | 1.8% | Jul 17, 2017 | Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from... |
| CVE-2017-7673 | — | — | 1.6% | Jul 17, 2017 | Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget pas... |
| CVE-2017-7666 | — | — | 0.8% | Jul 17, 2017 | Apache OpenMeetings 1.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, XSS attacks, click-jacking, and MI... |
| CVE-2017-7664 | — | — | 2.3% | Jul 17, 2017 | Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0. |
| CVE-2017-7663 | — | — | 2.7% | Jul 17, 2017 | Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0. |
| CVE-2017-3103 | — | — | 3.3% | Jul 17, 2017 | Adobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could... |
| CVE-2017-3102 | — | — | 2.9% | Jul 17, 2017 | Adobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability. Successful exploitation co... |
| CVE-2017-3101 | — | — | 5.6% | Jul 17, 2017 | Adobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful exploitation could lead to a clic... |
| CVE-2017-3100 | MEDIUM | 6.5 | 3.7% | Jul 17, 2017 | Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Scr... |
| CVE-2017-3099 | HIGH | 8.8 | 8.6% | Jul 17, 2017 | Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Scr... |
| CVE-2017-3080 | MEDIUM | 6.5 | 4.2% | Jul 17, 2017 | Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by... |
| CVE-2017-2349 | CRITICAL | 9.9 | 2.3% | Jul 17, 2017 | A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allo... |
| CVE-2017-2348 | HIGH | 7.5 | 1.3% | Jul 17, 2017 | The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid ... |
| CVE-2017-2347 | MEDIUM | 6.5 | 1.9% | Jul 17, 2017 | A denial of service vulnerability in rpd daemon of Juniper Networks Junos OS allows a malformed MPLS ping packet to cras... |
| CVE-2017-2346 | MEDIUM | 5.9 | 1.1% | Jul 17, 2017 | An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway ... |
| CVE-2017-2345 | CRITICAL | 9.8 | 3.6% | Jul 17, 2017 | On Junos OS devices with SNMP enabled, a network based attacker with unfiltered access to the RE can cause the Junos OS ... |
| CVE-2017-2344 | HIGH | 7.8 | 0.5% | Jul 17, 2017 | A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow. Malicious exploitation of this... |
| CVE-2017-2343 | CRITICAL | 10 | 2.7% | Jul 17, 2017 | The Integrated User Firewall (UserFW) feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series d... |
| CVE-2017-2342 | HIGH | 8.1 | 0.6% | Jul 17, 2017 | MACsec feature on Juniper Networks Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series does not report errors when a... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now