2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6809 | — | — | 0.6% | Mar 11, 2017 | paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.donate.php (id par... |
| CVE-2017-6808 | — | — | 0.6% | Mar 11, 2017 | paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.faq.php (id parame... |
| CVE-2017-6513 | — | — | 1.3% | Mar 11, 2017 | The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which a... |
| CVE-2017-6466 | — | — | 1.5% | Mar 11, 2017 | F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain ... |
| CVE-2017-6804 | — | — | — | Mar 10, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-6802 | — | — | 1.4% | Mar 10, 2017 | An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed R... |
| CVE-2017-6801 | — | — | 1.4% | Mar 10, 2017 | An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFPa... |
| CVE-2017-6800 | — | — | 1.7% | Mar 10, 2017 | An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during h... |
| CVE-2017-6799 | — | — | 3.5% | Mar 10, 2017 | A cross-site scripting (XSS) vulnerability in view_filters_page.php in MantisBT before 2.2.1 allows remote attackers to ... |
| CVE-2017-6596 | — | — | 0.8% | Mar 10, 2017 | partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validati... |
| CVE-2017-6506 | — | — | 11.7% | Mar 10, 2017 | In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leadi... |
| CVE-2017-6427 | — | — | 7.2% | Mar 10, 2017 | A Buffer Overflow was discovered in EvoStream Media Server 1.7.1. A crafted HTTP request with a malicious header will ca... |
| CVE-2017-6355 | — | — | 0.4% | Mar 10, 2017 | Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local gues... |
| CVE-2017-5872 | — | — | 1.5% | Mar 10, 2017 | The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 5... |
| CVE-2017-6465 | — | — | 50.3% | Mar 10, 2017 | Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP serv... |
| CVE-2017-4960 | — | — | 1.6% | Mar 10, 2017 | An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and ... |
| CVE-2017-6797 | — | — | 2.3% | Mar 10, 2017 | A cross-site scripting (XSS) vulnerability in bug_change_status_page.php in MantisBT before 1.3.7 and 2.x before 2.2.1 a... |
| CVE-2017-6591 | — | — | 0.7% | Mar 9, 2017 | There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field. |
| CVE-2017-6590 | — | — | 0.3% | Mar 9, 2017 | An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS,... |
| CVE-2017-6589 | — | — | 0.7% | Mar 9, 2017 | EpicEditor through 0.2.3 has Cross-Site Scripting because of an insecure default marked.js configuration. An example att... |
| CVE-2017-6529 | — | — | 2.9% | Mar 9, 2017 | An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID pa... |
| CVE-2017-6528 | — | — | 3.4% | Mar 9, 2017 | An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is affected by plaintext password storage (the /home/dna/... |
| CVE-2017-6527 | — | — | 56.6% | Mar 9, 2017 | An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to a NUL-terminated directory traversal att... |
| CVE-2017-6526 | — | — | 57.4% | Mar 9, 2017 | An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution throug... |
| CVE-2017-6432 | — | — | 1.0% | Mar 9, 2017 | An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now