2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-1000034 | — | — | 5.7% | Jul 17, 2017 | Akka versions <=2.4.16 and 2.5-M1 are vulnerable to a java deserialization attack in its Remoting component resulting in... |
| CVE-2017-1000033 | — | — | 2.1% | Jul 17, 2017 | Wordpress Plugin Vospari Forms version < 1.4 is vulnerable to a reflected cross site scripting in the form submission re... |
| CVE-2017-1000032 | — | — | 0.9% | Jul 17, 2017 | Cross-Site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject arbitrary web script or HTML... |
| CVE-2017-1000031 | — | — | 1.4% | Jul 17, 2017 | SQL injection vulnerability in graph_templates_inputs.php in Cacti 0.8.8b allows remote attackers to execute arbitrary S... |
| CVE-2017-1000030 | — | — | 1.7% | Jul 17, 2017 | Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store Password Disclosure vulner... |
| CVE-2017-1000029 | — | — | 8.3% | Jul 17, 2017 | Oracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File Inclusion vulnerability, that ... |
| CVE-2017-1000028 | — | — | 99.5% | Jul 17, 2017 | Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and unauthenticated Directory Trave... |
| CVE-2017-1000027 | — | — | 1.2% | Jul 17, 2017 | Koozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect vulnerability in the user w... |
| CVE-2017-1000026 | HIGH | 7.5 | 1.9% | Jul 17, 2017 | Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attacker... |
| CVE-2017-1000025 | — | — | 1.4% | Jul 17, 2017 | GNOME Web (Epiphany) 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18.11, and prior versions... |
| CVE-2017-1000024 | — | — | 1.2% | Jul 17, 2017 | Shotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information disclosure in the web publishin... |
| CVE-2017-1000023 | — | — | 0.5% | Jul 17, 2017 | LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML document. |
| CVE-2017-1000022 | — | — | 1.2% | Jul 17, 2017 | LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could leave to privilege escalati... |
| CVE-2017-1000021 | — | — | 1.2% | Jul 17, 2017 | LogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents. |
| CVE-2017-1000020 | — | — | 2.9% | Jul 17, 2017 | SYN Flood or FIN Flood attack in ECos 1 and other versions embedded devices results in web Authentication Bypass. "eCos ... |
| CVE-2017-1000018 | — | — | 1.8% | Jul 17, 2017 | phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted tabl... |
| CVE-2017-1000017 | — | — | 1.3% | Jul 17, 2017 | phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to... |
| CVE-2017-1000016 | — | — | 1.1% | Jul 17, 2017 | A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies. This is a re-issue of... |
| CVE-2017-1000015 | — | — | 1.0% | Jul 17, 2017 | phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters |
| CVE-2017-1000014 | — | — | 1.8% | Jul 17, 2017 | phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality |
| CVE-2017-1000013 | — | — | 1.1% | Jul 17, 2017 | phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness |
| CVE-2017-1000012 | — | — | 0.8% | Jul 17, 2017 | MySQL Dumper version 1.24 is vulnerable to stored XSS when displaying the data in the database to the user |
| CVE-2017-1000011 | — | — | 0.7% | Jul 17, 2017 | MyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in account takeover or stea... |
| CVE-2017-1000010 | HIGH | 7.8 | 2.1% | Jul 17, 2017 | Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution. |
| CVE-2017-1000009 | CRITICAL | 9.8 | 3.9% | Jul 17, 2017 | Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now