2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6732 | — | — | 0.3% | Jul 10, 2017 | A vulnerability in the installation procedure for Cisco Prime Network Software could allow an authenticated, local attac... |
| CVE-2017-6731 | — | — | 1.6% | Jul 10, 2017 | A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could ... |
| CVE-2017-6730 | — | — | 1.7% | Jul 10, 2017 | A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unaut... |
| CVE-2017-6729 | — | — | 2.3% | Jul 10, 2017 | A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for C... |
| CVE-2017-6728 | — | — | 0.3% | Jul 10, 2017 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary co... |
| CVE-2017-6727 | — | — | 2.2% | Jul 10, 2017 | A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an... |
| CVE-2017-6726 | — | — | 0.3% | Jul 10, 2017 | A vulnerability in the CLI of the Cisco Prime Network Gateway could allow an authenticated, local attacker to retrieve s... |
| CVE-2017-5652 | — | — | 1.2% | Jul 10, 2017 | During a routine security analysis, it was found that one of the ports in Apache Impala (incubating) 2.7.0 to 2.8.0 sent... |
| CVE-2017-5640 | — | — | 2.9% | Jul 10, 2017 | It was noticed that a malicious process impersonating an Impala daemon in Apache Impala (incubating) 2.7.0 to 2.8.0 coul... |
| CVE-2017-7175 | — | — | 6.5% | Jul 10, 2017 | NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt pa... |
| CVE-2017-7670 | — | — | 4.8% | Jul 10, 2017 | The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial ... |
| CVE-2017-11166 | — | — | 1.4% | Jul 10, 2017 | The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory e... |
| CVE-2017-11163 | — | — | 1.3% | Jul 10, 2017 | Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti 1.1.12 allows remote authenticated users to in... |
| CVE-2017-9791 | CRITICAL | 9.8 | 98.9% | Jul 10, 2017 | The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passe... |
| CVE-2017-1398 | — | — | 1.0% | Jul 10, 2017 | IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker ... |
| CVE-2017-1337 | — | — | 1.5% | Jul 10, 2017 | IBM WebSphere MQ 9.0.1 and 9.0.2 Java/JMS application can incorrectly transmit user credentials in plain text. IBM X-For... |
| CVE-2017-1284 | — | — | 0.3% | Jul 10, 2017 | IBM WebSphere MQ 9.0.1 and 9.0.2 could allow a local user with ability to run or enable trace, to obtain sensitive infor... |
| CVE-2017-11147 | CRITICAL | 9.1 | 4.7% | Jul 10, 2017 | In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious arch... |
| CVE-2017-11146 | — | — | — | Jul 10, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-11145 | — | — | 4.8% | Jul 10, 2017 | In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsi... |
| CVE-2017-11144 | — | — | 6.2% | Jul 10, 2017 | In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check th... |
| CVE-2017-11143 | — | — | 6.8% | Jul 10, 2017 | In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able ... |
| CVE-2017-11142 | — | — | 8.3% | Jul 10, 2017 | In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumption denial o... |
| CVE-2017-11141 | — | — | 1.7% | Jul 10, 2017 | The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory e... |
| CVE-2017-11140 | — | — | 1.8% | Jul 10, 2017 | The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now