2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7314 | — | — | 3.3% | Jun 7, 2017 | An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, while creating... |
| CVE-2017-7313 | — | — | 1.3% | Jun 7, 2017 | An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, it is possible... |
| CVE-2017-7312 | CRITICAL | 9.8 | 3.0% | Jun 7, 2017 | An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId/275 URI, anyone can add... |
| CVE-2017-9474 | — | — | 0.9% | Jun 7, 2017 | In ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-bas... |
| CVE-2017-9473 | — | — | 1.2% | Jun 7, 2017 | In ytnef 1.9.2, the TNEFFillMapi function in lib/ytnef.c allows remote attackers to cause a denial of service (memory co... |
| CVE-2017-9472 | — | — | 0.9% | Jun 7, 2017 | In ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based b... |
| CVE-2017-9471 | — | — | 1.2% | Jun 7, 2017 | In ytnef 1.9.2, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial of service (heap-based bu... |
| CVE-2017-9470 | — | — | 0.9% | Jun 7, 2017 | In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service (NULL pointer... |
| CVE-2017-9469 | — | — | 6.1% | Jun 7, 2017 | In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one b... |
| CVE-2017-9468 | — | — | 3.2% | Jun 7, 2017 | In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer.... |
| CVE-2017-9465 | — | — | 1.2% | Jun 6, 2017 | The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read an... |
| CVE-2017-9462 | HIGH | 8.8 | 21.5% | Jun 6, 2017 | In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse... |
| CVE-2017-9461 | — | — | 4.2% | Jun 6, 2017 | smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop w... |
| CVE-2017-9452 | — | — | 0.8% | Jun 6, 2017 | Cross-site scripting (XSS) vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbi... |
| CVE-2017-9451 | — | — | 0.7% | Jun 6, 2017 | Cross site scripting (XSS) vulnerability in pages.edit_form.php in flatCore 1.4.6 allows remote attackers to inject arbi... |
| CVE-2017-9422 | — | — | — | Jun 6, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-8920. Reason: This candidate is a reservation ... |
| CVE-2017-8920 | — | — | 0.7% | Jun 6, 2017 | irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka X... |
| CVE-2017-5243 | — | — | 0.5% | Jun 6, 2017 | The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired al... |
| CVE-2017-9449 | — | — | 1.1% | Jun 6, 2017 | SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL com... |
| CVE-2017-9448 | — | — | 0.6% | Jun 6, 2017 | Cross-site scripting (XSS) vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to inject arbi... |
| CVE-2017-9332 | — | — | 0.6% | Jun 6, 2017 | The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors invo... |
| CVE-2017-8083 | — | — | 0.3% | Jun 6, 2017 | CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for w... |
| CVE-2017-7515 | — | — | 1.1% | Jun 6, 2017 | poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of... |
| CVE-2017-5664 | HIGH | 7.5 | 16.6% | Jun 6, 2017 | The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is conf... |
| CVE-2017-9444 | — | — | 0.5% | Jun 5, 2017 | BigTree CMS through 4.2.18 has CSRF related to the core\admin\modules\users\profile\update.php script (modify user infor... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now