2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-8055 | — | — | 1.6% | Apr 22, 2017 | WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login request that contains a... |
| CVE-2017-8054 | — | — | 1.1% | Apr 22, 2017 | The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause ... |
| CVE-2017-8053 | — | — | 0.9% | Apr 22, 2017 | PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfPa... |
| CVE-2017-8052 | — | — | 0.7% | Apr 22, 2017 | Craft CMS before 2.6.2974 allows XSS attacks. |
| CVE-2017-7991 | — | — | 2.1% | Apr 22, 2017 | Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey parameter) in the api function ... |
| CVE-2017-8051 | — | — | 16.5% | Apr 21, 2017 | Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI.... |
| CVE-2017-8050 | — | — | 0.9% | Apr 21, 2017 | Tenable Appliance 4.4.0, and possibly prior, contains a flaw in the Web UI that allows for the unauthorized manipulation... |
| CVE-2017-7994 | — | — | 2.6% | Apr 21, 2017 | The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denia... |
| CVE-2017-7992 | — | — | 0.7% | Apr 21, 2017 | Heartland Payment Systems Payment Gateway PHP SDK hps/heartland-php v2.8.17 is vulnerable to a reflected XSS in examples... |
| CVE-2017-7951 | — | — | 0.6% | Apr 21, 2017 | WonderCMS before 2.0.3 has CSRF because of lack of a token in an unspecified context. |
| CVE-2017-7409 | — | — | 1.0% | Apr 21, 2017 | Palo Alto Networks PAN-OS before 7.0.15 has XSS in the GlobalProtect external interface via crafted request parameters, ... |
| CVE-2017-7220 | — | — | 2.0% | Apr 21, 2017 | OpenText Documentum Content Server allows superuser access via sys_obj_save or save of a crafted object, followed by an ... |
| CVE-2017-7990 | — | — | 1.1% | Apr 21, 2017 | The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication i... |
| CVE-2017-6619 | — | — | 2.6% | Apr 20, 2017 | A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticate... |
| CVE-2017-6618 | — | — | 0.9% | Apr 20, 2017 | A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticate... |
| CVE-2017-6617 | — | — | 1.0% | Apr 20, 2017 | A vulnerability in the session identification management functionality of the web-based GUI of Cisco Integrated Manageme... |
| CVE-2017-6616 | — | — | 4.2% | Apr 20, 2017 | A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c) could allow an authenticate... |
| CVE-2017-6615 | — | — | 1.7% | Apr 20, 2017 | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16 could allow an authentic... |
| CVE-2017-6614 | — | — | 1.7% | Apr 20, 2017 | A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 cou... |
| CVE-2017-6613 | — | — | 2.0% | Apr 20, 2017 | A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, remo... |
| CVE-2017-6611 | — | — | 1.2% | Apr 20, 2017 | A vulnerability in the web framework code of Cisco Prime Infrastructure 2.2(2) could allow an unauthenticated, remote at... |
| CVE-2017-6610 | — | — | 3.0% | Apr 20, 2017 | A vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code of Cisco ASA Software could allow an authentic... |
| CVE-2017-6609 | — | — | 2.8% | Apr 20, 2017 | A vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote attacker to cause a reload ... |
| CVE-2017-6608 | — | — | 4.6% | Apr 20, 2017 | A vulnerability in the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) code of Cisco ASA Software could al... |
| CVE-2017-6607 | — | — | 2.4% | Apr 20, 2017 | A vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause an affect... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now