2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-18593 | — | — | 0.9% | Aug 28, 2019 | The updraftplus plugin before 1.13.5 for WordPress has XSS in rare cases where an attacker controls a string logged to a... |
| CVE-2017-18592 | — | — | 1.4% | Aug 27, 2019 | The woocommerce-catalog-enquiry plugin before 3.1.0 for WordPress has an incorrect wp_upload directory for file uploads. |
| CVE-2017-18591 | — | — | 0.9% | Aug 27, 2019 | The gd-rating-system plugin before 2.1 for WordPress has XSS in log.php. |
| CVE-2017-18590 | — | — | 1.4% | Aug 27, 2019 | The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues. |
| CVE-2017-18589 | — | — | 1.5% | Aug 26, 2019 | An issue was discovered in the cookie crate before 0.7.6 for Rust. Large integers in the Max-Age of a cookie cause a pan... |
| CVE-2017-18588 | — | — | 0.7% | Aug 26, 2019 | An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates d... |
| CVE-2017-18587 | — | — | 1.0% | Aug 26, 2019 | An issue was discovered in the hyper crate before 0.9.18 for Rust. It mishandles newlines in headers. |
| CVE-2017-18585 | — | — | 2.0% | Aug 22, 2019 | The posts-in-page plugin before 1.3.0 for WordPress has ic_add_posts template='../ directory traversal. |
| CVE-2017-18579 | — | — | 0.9% | Aug 22, 2019 | The corner-ad plugin before 1.0.8 for WordPress has XSS. |
| CVE-2017-18578 | — | — | 0.9% | Aug 22, 2019 | The crafty-social-buttons plugin before 1.5.8 for WordPress has XSS. |
| CVE-2017-18586 | — | — | 2.5% | Aug 22, 2019 | The insert-pages plugin before 3.2.4 for WordPress has directory traversal via custom template paths. |
| CVE-2017-18584 | — | — | 1.4% | Aug 22, 2019 | The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action. |
| CVE-2017-18583 | — | — | 2.1% | Aug 22, 2019 | The post-pay-counter plugin before 2.731 for WordPress has PHP Object Injection. |
| CVE-2017-18582 | — | — | 0.9% | Aug 22, 2019 | The time-sheets plugin before 1.5.2 for WordPress has multiple XSS issues. |
| CVE-2017-18581 | — | — | 0.9% | Aug 22, 2019 | The time-sheets plugin before 1.5.0 for WordPress has XSS via the old timesheet list. |
| CVE-2017-18580 | — | — | 12.1% | Aug 22, 2019 | The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or use... |
| CVE-2017-18577 | — | — | 0.9% | Aug 22, 2019 | The mailchimp-for-wp plugin before 4.1.8 for WordPress has XSS via the return value of add_query_arg. |
| CVE-2017-18576 | — | — | 0.9% | Aug 22, 2019 | The event-notifier plugin before 1.2.1 for WordPress has XSS via the loading animation. |
| CVE-2017-18575 | — | — | 0.9% | Aug 22, 2019 | The newstatpress plugin before 1.2.5 for WordPress has multiple stored XSS issues. |
| CVE-2017-18574 | — | — | 0.9% | Aug 22, 2019 | The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder. |
| CVE-2017-18573 | — | — | 1.8% | Aug 22, 2019 | The simple-login-log plugin before 1.1.2 for WordPress has SQL injection. |
| CVE-2017-18572 | — | — | 0.9% | Aug 22, 2019 | The gnucommerce plugin before 1.4.2 for WordPress has XSS. |
| CVE-2017-18571 | — | — | 1.8% | Aug 22, 2019 | The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulner... |
| CVE-2017-18570 | — | — | 1.8% | Aug 22, 2019 | The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download En... |
| CVE-2017-18562 | — | — | 1.4% | Aug 21, 2019 | The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now