2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7879 | — | — | 1.0% | Apr 14, 2017 | SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database. |
| CVE-2017-7878 | — | — | 1.0% | Apr 14, 2017 | SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database. |
| CVE-2017-7877 | — | — | 0.9% | Apr 14, 2017 | CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations. |
| CVE-2017-7875 | — | — | 2.3% | Apr 14, 2017 | In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to tri... |
| CVE-2017-7871 | — | — | 0.7% | Apr 14, 2017 | trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php (challenge parameter). |
| CVE-2017-7696 | — | — | 36.2% | Apr 14, 2017 | SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service (memory consu... |
| CVE-2017-7357 | — | — | 2.6% | Apr 14, 2017 | Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbi... |
| CVE-2017-6554 | — | — | 15.6% | Apr 14, 2017 | pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to wr... |
| CVE-2017-3447 | — | — | — | Apr 14, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was associated with multiple... |
| CVE-2017-1205 | — | — | 0.3% | Apr 14, 2017 | IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges a... |
| CVE-2017-1152 | — | — | 0.6% | Apr 14, 2017 | IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could ... |
| CVE-2017-7457 | — | — | 1.8% | Apr 14, 2017 | XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure. |
| CVE-2017-7456 | — | — | 29.3% | Apr 14, 2017 | Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView ... |
| CVE-2017-7455 | — | — | 16.3% | Apr 14, 2017 | Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control. |
| CVE-2017-7218 | — | — | 0.5% | Apr 14, 2017 | The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privile... |
| CVE-2017-7217 | — | — | 1.1% | Apr 14, 2017 | The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers t... |
| CVE-2017-7870 | — | — | 3.9% | Apr 14, 2017 | LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Po... |
| CVE-2017-7869 | — | — | 2.8% | Apr 14, 2017 | GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related... |
| CVE-2017-7868 | — | — | 4.4% | Apr 14, 2017 | International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based... |
| CVE-2017-7867 | — | — | 4.6% | Apr 14, 2017 | International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based... |
| CVE-2017-7866 | — | — | 2.5% | Apr 14, 2017 | FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf f... |
| CVE-2017-7865 | — | — | 2.6% | Apr 14, 2017 | FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode... |
| CVE-2017-7864 | — | — | 3.8% | Apr 14, 2017 | FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tt_size_re... |
| CVE-2017-7863 | — | — | 2.6% | Apr 14, 2017 | FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_c... |
| CVE-2017-7862 | — | — | 2.6% | Apr 14, 2017 | FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame f... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now