2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-10605 | HIGH | 8.6 | 1.6% | Jul 17, 2017 | On all vSRX and SRX Series devices, when the DHCP or DHCP relay is configured, specially crafted packet might cause the ... |
| CVE-2017-10604 | MEDIUM | 5.3 | 0.9% | Jul 17, 2017 | When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempt... |
| CVE-2017-10603 | HIGH | 7 | 0.4% | Jul 17, 2017 | An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbi... |
| CVE-2017-10602 | HIGH | 7 | 0.4% | Jul 17, 2017 | A buffer overflow vulnerability in Junos OS CLI may allow a local authenticated user with read only privileges and acces... |
| CVE-2017-10601 | CRITICAL | 9.8 | 1.8% | Jul 17, 2017 | A specific device configuration can result in a commit failure condition. When this occurs, a user is logged in without ... |
| CVE-2017-1000363 | HIGH | 7.8 | 0.6% | Jul 17, 2017 | Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is sta... |
| CVE-2017-1000362 | — | — | 1.7% | Jul 17, 2017 | The re-key admin monitor was introduced in Jenkins 1.498 and re-encrypted all secrets in JENKINS_HOME with a new key. It... |
| CVE-2017-1000081 | CRITICAL | 9.8 | 3.0% | Jul 17, 2017 | Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code exec... |
| CVE-2017-1000080 | HIGH | 7.5 | 1.0% | Jul 17, 2017 | Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets. |
| CVE-2017-1000079 | HIGH | 7.5 | 1.3% | Jul 17, 2017 | Linux foundation ONOS 1.9.0 is vulnerable to a DoS. |
| CVE-2017-1000078 | MEDIUM | 6.1 | 0.7% | Jul 17, 2017 | Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration |
| CVE-2017-1000075 | — | — | 2.0% | Jul 17, 2017 | Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function |
| CVE-2017-1000074 | — | — | 2.0% | Jul 17, 2017 | Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function. |
| CVE-2017-1000073 | — | — | 2.9% | Jul 17, 2017 | Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary c... |
| CVE-2017-1000072 | — | — | 2.1% | Jul 17, 2017 | Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravity_value resulting potentially leading to modificati... |
| CVE-2017-1000071 | — | — | 3.5% | Jul 17, 2017 | Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to au... |
| CVE-2017-1000070 | — | — | 1.0% | Jul 17, 2017 | The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and te... |
| CVE-2017-1000069 | — | — | 0.7% | Jul 17, 2017 | CSRF in Bitly oauth2_proxy 2.1 during authentication flow |
| CVE-2017-1000068 | HIGH | 7.5 | 1.8% | Jul 17, 2017 | TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resu... |
| CVE-2017-1000067 | — | — | 1.1% | Jul 17, 2017 | MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape m... |
| CVE-2017-1000066 | — | — | 1.4% | Jul 17, 2017 | The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, whi... |
| CVE-2017-1000065 | — | — | 0.7% | Jul 17, 2017 | Multiple Cross-site scripting (XSS) vulnerabilities in rpc.php in OpenMediaVault release 2.1 in Access Rights Management... |
| CVE-2017-1000064 | — | — | 1.3% | Jul 17, 2017 | kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS |
| CVE-2017-1000063 | — | — | 0.8% | Jul 17, 2017 | kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure |
| CVE-2017-1000062 | — | — | 3.9% | Jul 17, 2017 | kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now