2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-11174 | — | — | 1.0% | Jul 12, 2017 | In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL... |
| CVE-2017-11196 | — | — | 0.6% | Jul 12, 2017 | Pulse Connect Secure 8.3R1 has CSRF in logout.cgi. The logout function of the admin panel is not protected by any CSRF t... |
| CVE-2017-11195 | — | — | 0.9% | Jul 12, 2017 | Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is reflected in an IFRAME e... |
| CVE-2017-11194 | — | — | 0.7% | Jul 12, 2017 | Pulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi. In the admin panel, the certid parameter o... |
| CVE-2017-11193 | — | — | 0.6% | Jul 12, 2017 | Pulse Connect Secure 8.3R1 has CSRF in diag.cgi. In the panel, the diag.cgi file is responsible for running commands suc... |
| CVE-2017-2863 | HIGH | 7.8 | 1.2% | Jul 12, 2017 | An out-of-bounds write vulnerability exists in the PDF parsing functionality of Infix 7.1.5. A specially crafted PDF fil... |
| CVE-2017-2820 | HIGH | 8.8 | 4.4% | Jul 12, 2017 | An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Pop... |
| CVE-2017-2818 | HIGH | 7.5 | 2.0% | Jul 12, 2017 | An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically... |
| CVE-2017-2814 | HIGH | 7.5 | 2.7% | Jul 12, 2017 | An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically... |
| CVE-2017-1321 | MEDIUM | 6.1 | 1.0% | Jul 12, 2017 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows u... |
| CVE-2017-1285 | — | — | 1.7% | Jul 12, 2017 | IBM WebSphere MQ 9.0.1 and 9.0.2 could allow an authenticated user with authority to send a specially crafted message th... |
| CVE-2017-9977 | — | — | 1.2% | Jul 12, 2017 | AVG AntiVirus for MacOS with scan engine before 4668 might allow remote attackers to bypass malware detection by leverag... |
| CVE-2017-9845 | — | — | 2.5% | Jul 12, 2017 | disp+work 7400.12.21.30308 in SAP NetWeaver 7.40 allows remote attackers to cause a denial of service (resource consumpt... |
| CVE-2017-9844 | HIGH | 7.5 | 5.5% | Jul 12, 2017 | SAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly execute arbitrary code ... |
| CVE-2017-9843 | LOW | 2.7 | 2.3% | Jul 12, 2017 | SAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a denial of service (proce... |
| CVE-2017-11190 | — | — | 1.0% | Jul 12, 2017 | unrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enabled, might allow remote attackers to cause a denial of servi... |
| CVE-2017-11189 | MEDIUM | 6.5 | 1.3% | Jul 12, 2017 | unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service (NULL pointer dereference and a... |
| CVE-2017-4057 | — | — | 1.2% | Jul 12, 2017 | Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allo... |
| CVE-2017-4055 | — | — | 1.2% | Jul 12, 2017 | Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6... |
| CVE-2017-4054 | — | — | 2.5% | Jul 12, 2017 | Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows ... |
| CVE-2017-4053 | — | — | 3.4% | Jul 12, 2017 | Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows ... |
| CVE-2017-4052 | — | — | 2.1% | Jul 12, 2017 | Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 all... |
| CVE-2017-11188 | — | — | 1.6% | Jul 12, 2017 | The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhau... |
| CVE-2017-11187 | — | — | 1.0% | Jul 12, 2017 | phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly... |
| CVE-2017-7678 | — | — | 3.4% | Jul 12, 2017 | In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now