2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9837 | — | — | — | Jun 24, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-9836 | — | — | — | Jun 24, 2017 | Cross-site scripting (XSS) vulnerability in Piwigo 2.9.1 allows remote authenticated administrators to inject arbitrary ... |
| CVE-2017-9833 | HIGH | 7.5 | — | Jun 24, 2017 | /cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read ... |
| CVE-2017-9832 | — | — | — | Jun 24, 2017 | An integer overflow vulnerability in ptp-pack.c (ptp_unpack_OPL function) of libmtp (version 1.1.12 and below) allows at... |
| CVE-2017-9831 | — | — | — | Jun 24, 2017 | An integer overflow vulnerability in the ptp_unpack_EOS_CustomFuncEx function of the ptp-pack.c file of libmtp (version ... |
| CVE-2017-9829 | — | — | — | Jun 23, 2017 | '/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allow... |
| CVE-2017-9828 | — | — | — | Jun 23, 2017 | '/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command... |
| CVE-2017-9772 | — | — | 3.5% | Jun 23, 2017 | Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with rais... |
| CVE-2017-1349 | — | — | 0.3% | Jun 23, 2017 | IBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from HTTP sessions that could ... |
| CVE-2017-1348 | — | — | 0.7% | Jun 23, 2017 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users ... |
| CVE-2017-1347 | — | — | 1.5% | Jun 23, 2017 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-... |
| CVE-2017-1302 | — | — | 0.3% | Jun 23, 2017 | IBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive information due to improper acc... |
| CVE-2017-1193 | — | — | 1.2% | Jun 23, 2017 | IBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information using an HTTP GET requ... |
| CVE-2017-1132 | — | — | 0.7% | Jun 23, 2017 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users ... |
| CVE-2017-1131 | — | — | 1.4% | Jun 23, 2017 | IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by us... |
| CVE-2017-3948 | — | — | 0.5% | Jun 23, 2017 | Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0.... |
| CVE-2017-8813 | — | — | — | Jun 23, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-8831. Reason: This candidate is a duplicate of... |
| CVE-2017-9356 | — | — | 0.8% | Jun 23, 2017 | Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results... |
| CVE-2017-9776 | — | — | 2.0% | Jun 22, 2017 | Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote at... |
| CVE-2017-9775 | — | — | 4.3% | Jun 22, 2017 | Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of s... |
| CVE-2017-2782 | MEDIUM | 6.5 | 1.0% | Jun 22, 2017 | An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b.... |
| CVE-2017-2781 | CRITICAL | 9.8 | 2.3% | Jun 22, 2017 | An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure M... |
| CVE-2017-2780 | CRITICAL | 9.8 | 2.3% | Jun 22, 2017 | An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure M... |
| CVE-2017-0897 | — | — | 4.0% | Jun 22, 2017 | ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy. Successf... |
| CVE-2017-1326 | — | — | 0.8% | Jun 22, 2017 | IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to u... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now