2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6146 | — | — | — | Jul 26, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA d... |
| CVE-2017-18344 | — | — | 3.2% | Jul 26, 2018 | The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly... |
| CVE-2017-12610 | — | — | 3.0% | Jul 26, 2018 | In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.1, authenticated Kafka clients may use impersonation via a m... |
| CVE-2017-10937 | — | — | 1.3% | Jul 25, 2018 | SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers t... |
| CVE-2017-10936 | — | — | 1.3% | Jul 25, 2018 | SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to ex... |
| CVE-2017-10935 | — | — | 1.3% | Jul 25, 2018 | All versions prior to ZSRV2 V3.00.40 of the ZTE ZXR10 1800-2S products allow remote authenticated users to bypass the or... |
| CVE-2017-10934 | — | — | 3.1% | Jul 25, 2018 | All versions prior to V5.09.02.02T4 of the ZTE ZXIPTV-EPG product use the Java RMI service in which the servers use the ... |
| CVE-2017-3226 | — | — | 0.3% | Jul 24, 2018 | Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. Devices that make use of D... |
| CVE-2017-3225 | — | — | 0.3% | Jul 24, 2018 | Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. For devices utilizing this... |
| CVE-2017-3224 | — | — | 1.1% | Jul 24, 2018 | Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency... |
| CVE-2017-3223 | — | — | 5.3% | Jul 24, 2018 | Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web i... |
| CVE-2017-3217 | — | — | 2.0% | Jul 24, 2018 | CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS (text message) interface that can be deployed where no pas... |
| CVE-2017-3210 | — | — | 0.9% | Jul 24, 2018 | Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations wh... |
| CVE-2017-3189 | — | — | 6.5% | Jul 24, 2018 | The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable t... |
| CVE-2017-3188 | — | — | 2.8% | Jul 24, 2018 | The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable t... |
| CVE-2017-3187 | — | — | 1.1% | Jul 24, 2018 | The dotCMS administration panel, versions 3.7.1 and earlier, are vulnerable to cross-site request forgery. The dotCMS ad... |
| CVE-2017-3183 | — | — | 2.1% | Jul 24, 2018 | Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authe... |
| CVE-2017-3182 | — | — | 0.3% | Jul 24, 2018 | On the iOS platform, the ThreatMetrix SDK versions prior to 3.2 fail to validate SSL certificates provided by HTTPS conn... |
| CVE-2017-3181 | — | — | 1.7% | Jul 24, 2018 | Multiple TIBCO Products are prone to multiple unspecified SQL-injection vulnerabilities because it fails to properly san... |
| CVE-2017-3180 | — | — | 0.6% | Jul 24, 2018 | Multiple TIBCO Products are prone to multiple unspecified cross-site scripting vulnerabilities because it fails to prope... |
| CVE-2017-18104 | — | — | 1.6% | Jul 24, 2018 | The Webhooks component of Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.11.0 allows remote... |
| CVE-2017-18343 | — | — | 6.1% | Jul 20, 2018 | The debug handler in Symfony before v2.7.33, 2.8.x before v2.8.26, 3.x before v3.2.13, and 3.3.x before v3.3.6 has XSS v... |
| CVE-2017-18103 | — | — | 0.8% | Jul 18, 2018 | The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof... |
| CVE-2017-17541 | — | — | 0.9% | Jul 16, 2018 | A Cross-site Scripting (XSS) vulnerability in Fortinet FortiManager 6.0.0, 5.6.4 and below versions, FortiAnalyzer 6.0.0... |
| CVE-2017-13097 | — | — | 0.5% | Jul 13, 2018 | The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now