2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6600 | — | — | 0.8% | Apr 7, 2017 | A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generat... |
| CVE-2017-6599 | — | — | 2.0% | Apr 7, 2017 | A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthen... |
| CVE-2017-6598 | — | — | 0.4% | Apr 7, 2017 | A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower ... |
| CVE-2017-6597 | — | — | 0.8% | Apr 7, 2017 | A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 ... |
| CVE-2017-3889 | — | — | 0.9% | Apr 7, 2017 | A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote att... |
| CVE-2017-3888 | — | — | 1.2% | Apr 7, 2017 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticat... |
| CVE-2017-3886 | — | — | 1.9% | Apr 7, 2017 | A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker ... |
| CVE-2017-3885 | — | — | 1.5% | Apr 7, 2017 | A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Soft... |
| CVE-2017-3884 | — | — | 2.1% | Apr 7, 2017 | A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager ... |
| CVE-2017-3848 | — | — | 1.2% | Apr 7, 2017 | A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated,... |
| CVE-2017-3817 | — | — | 1.5% | Apr 7, 2017 | A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could... |
| CVE-2017-7579 | — | — | 0.7% | Apr 7, 2017 | inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field. |
| CVE-2017-2387 | — | — | 0.2% | Apr 7, 2017 | The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from... |
| CVE-2017-7578 | — | — | 1.2% | Apr 7, 2017 | Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (l... |
| CVE-2017-7577 | — | — | 28.7% | Apr 7, 2017 | XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request. |
| CVE-2017-7570 | — | — | 1.5% | Apr 7, 2017 | PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a sa... |
| CVE-2017-7572 | — | — | 1.1% | Apr 6, 2017 | The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprec... |
| CVE-2017-7569 | — | — | 1.2% | Apr 6, 2017 | In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging th... |
| CVE-2017-7566 | — | — | 2.2% | Apr 6, 2017 | MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism. |
| CVE-2017-7565 | — | — | 2.1% | Apr 6, 2017 | Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary... |
| CVE-2017-7237 | — | — | 6.7% | Apr 6, 2017 | The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spicewor... |
| CVE-2017-2675 | — | — | 0.3% | Apr 6, 2017 | Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. Th... |
| CVE-2017-7192 | — | — | 1.9% | Apr 6, 2017 | WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValid... |
| CVE-2017-6968 | — | — | 2.3% | Apr 6, 2017 | GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vec... |
| CVE-2017-6130 | — | — | 1.1% | Apr 6, 2017 | F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attac... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now