2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9523 | — | — | 0.9% | Jun 9, 2017 | The Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342. |
| CVE-2017-1319 | — | — | 1.0% | Jun 8, 2017 | IBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure attribute in encrypted ... |
| CVE-2017-1179 | — | — | 0.8% | Jun 8, 2017 | IBM BigFix Compliance Analytics 1.9.79 uses weaker than expected cryptographic algorithms that could allow an attacker t... |
| CVE-2017-1140 | — | — | 0.7% | Jun 8, 2017 | IBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting. This vulnerability allows users to embe... |
| CVE-2017-4918 | — | — | 4.9% | Jun 8, 2017 | VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service s... |
| CVE-2017-9330 | MEDIUM | 5.6 | 0.3% | Jun 8, 2017 | QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to c... |
| CVE-2017-9310 | MEDIUM | 5.6 | 0.3% | Jun 8, 2017 | QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to c... |
| CVE-2017-9023 | HIGH | 7.5 | 2.3% | Jun 8, 2017 | The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allow... |
| CVE-2017-9022 | HIGH | 7.5 | 2.0% | Jun 8, 2017 | The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which ... |
| CVE-2017-8108 | — | — | 0.4% | Jun 8, 2017 | Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a ... |
| CVE-2017-5878 | CRITICAL | 9.8 | 2.7% | Jun 8, 2017 | The AMF unmarshallers in Red5 Media Server before 1.0.8 do not restrict the classes for which it performs deserializatio... |
| CVE-2017-9520 | — | — | 1.1% | Jun 8, 2017 | The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service ... |
| CVE-2017-9519 | — | — | 0.5% | Jun 8, 2017 | atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account. |
| CVE-2017-9518 | — | — | 0.5% | Jun 8, 2017 | atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails. |
| CVE-2017-9517 | — | — | 0.5% | Jun 8, 2017 | atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV. |
| CVE-2017-9516 | — | — | 2.3% | Jun 8, 2017 | Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file. |
| CVE-2017-6648 | — | — | 3.6% | Jun 8, 2017 | A vulnerability in the Session Initiation Protocol (SIP) of the Cisco TelePresence Codec (TC) and Collaboration Endpoint... |
| CVE-2017-6640 | — | — | 10.7% | Jun 8, 2017 | A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attack... |
| CVE-2017-6639 | — | — | 35.4% | Jun 8, 2017 | A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) ... |
| CVE-2017-6638 | — | — | 0.4% | Jun 8, 2017 | A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an auth... |
| CVE-2017-4913 | — | — | 0.4% | Jun 8, 2017 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vulne... |
| CVE-2017-4912 | — | — | 0.4% | Jun 8, 2017 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds re... |
| CVE-2017-4911 | — | — | 0.4% | Jun 8, 2017 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds wr... |
| CVE-2017-4910 | — | — | 0.4% | Jun 8, 2017 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds re... |
| CVE-2017-4909 | — | — | 0.4% | Jun 8, 2017 | VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow vu... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now