2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

CVE IDSeverityCVSSDescription
CVE-2017-18531——The raygun4wp plugin before 1.8.3 for WordPress has XSS in the settings, a different issue than CVE-2017-9288.
CVE-2017-18530——The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.
CVE-2017-18529——The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.
CVE-2017-18528——The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.
CVE-2017-18527——The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.
CVE-2017-18526——The moreads-se plugin before 1.4.7 for WordPress has XSS.
CVE-2017-18524——The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues.
CVE-2017-18523——The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.
CVE-2017-18522——The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.
CVE-2017-18519——The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages.
CVE-2017-18518——The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.
CVE-2017-18569——The my-wp-translate plugin before 1.0.4 for WordPress has CSRF.
CVE-2017-18568——The my-wp-translate plugin before 1.0.4 for WordPress has XSS.
CVE-2017-18567——The wp-all-import plugin before 3.4.6 for WordPress has XSS.
CVE-2017-18520——The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.
CVE-2017-18517——The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.
CVE-2017-18552——An issue was discovered in net/rds/af_rds.c in the Linux kernel before 4.11. There is an out of bounds write and read in...
CVE-2017-18551MEDIUM6.7An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds wr...
CVE-2017-18550——An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure ...
CVE-2017-18549——An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure ...
CVE-2017-18547——The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.
CVE-2017-18546——The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF.
CVE-2017-18545——The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.
CVE-2017-18544——The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.
CVE-2017-18543——The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now