2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9336 | — | — | 0.6% | Jun 1, 2017 | The WP Editor.MD plugin 1.6 for WordPress has a stored XSS vulnerability in the content of a post. |
| CVE-2017-9334 | HIGH | 7.5 | 1.5% | Jun 1, 2017 | An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Sche... |
| CVE-2017-9331 | — | — | 0.7% | Jun 1, 2017 | The Agenda component in Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules... |
| CVE-2017-5688 | — | — | 0.4% | May 31, 2017 | There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions before 3.4.5 which all... |
| CVE-2017-4897 | — | — | 1.1% | May 31, 2017 | VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacke... |
| CVE-2017-9307 | — | — | 0.9% | May 31, 2017 | SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and a... |
| CVE-2017-9306 | — | — | 0.8% | May 31, 2017 | inc/SP/Html/Html.class.php in sysPass 2.1.9 allows remote attackers to bypass the XSS filter, as demonstrated by use of ... |
| CVE-2017-9305 | — | — | 0.9% | May 31, 2017 | lib/core/TikiFilter/PreventXss.php in Tiki Wiki CMS Groupware 16.2 allows remote attackers to bypass the XSS filter via ... |
| CVE-2017-9304 | — | — | 1.8% | May 31, 2017 | libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption)... |
| CVE-2017-8782 | — | — | 1.5% | May 31, 2017 | The readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote attackers to cause a denial of... |
| CVE-2017-8402 | — | — | 1.3% | May 31, 2017 | PivotX 2.3.11 allows remote authenticated users to execute arbitrary PHP code via vectors involving an upload of a .htac... |
| CVE-2017-7511 | — | — | 1.1% | May 30, 2017 | poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted ... |
| CVE-2017-7502 | — | — | 4.3% | May 30, 2017 | Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting... |
| CVE-2017-7494 | CRITICAL | 9.8 | 99.4% | May 30, 2017 | Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allo... |
| CVE-2017-2311 | — | — | 1.3% | May 30, 2017 | On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Juno... |
| CVE-2017-2310 | — | — | 1.1% | May 30, 2017 | A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may ... |
| CVE-2017-2309 | — | — | 0.8% | May 30, 2017 | On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos ... |
| CVE-2017-2308 | — | — | 1.2% | May 30, 2017 | An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an aut... |
| CVE-2017-2307 | — | — | 0.9% | May 30, 2017 | A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions ... |
| CVE-2017-2306 | — | — | 1.6% | May 30, 2017 | On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on ... |
| CVE-2017-2305 | — | — | 1.1% | May 30, 2017 | On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on ... |
| CVE-2017-2304 | — | — | 1.8% | May 30, 2017 | Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53... |
| CVE-2017-2303 | — | — | 2.1% | May 30, 2017 | On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 1... |
| CVE-2017-2302 | — | — | 2.1% | May 30, 2017 | On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47 prior to 12.1X47-D45, 1... |
| CVE-2017-2301 | — | — | 2.1% | May 30, 2017 | On Juniper Networks products or platforms running Junos OS 11.4 prior to 11.4R13-S3, 12.1X46 prior to 12.1X46-D60, 12.3 ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now