2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9069 | — | — | 1.9% | May 18, 2017 | In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uploading a fi... |
| CVE-2017-9068 | — | — | 0.7% | May 18, 2017 | In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields ... |
| CVE-2017-9067 | — | — | 0.8% | May 18, 2017 | In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on t... |
| CVE-2017-7503 | — | — | 2.0% | May 18, 2017 | It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to ... |
| CVE-2017-9066 | — | — | 3.7% | May 18, 2017 | In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF. |
| CVE-2017-9065 | — | — | 4.1% | May 18, 2017 | In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API. |
| CVE-2017-9064 | — | — | 1.7% | May 18, 2017 | In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog... |
| CVE-2017-9063 | — | — | 2.0% | May 18, 2017 | In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an inv... |
| CVE-2017-9062 | — | — | 1.8% | May 18, 2017 | In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API. |
| CVE-2017-9061 | — | — | 1.9% | May 18, 2017 | In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files,... |
| CVE-2017-7433 | — | — | 1.4% | May 18, 2017 | An absolute path traversal vulnerability (CWE-36) in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated at... |
| CVE-2017-9059 | — | — | 0.4% | May 18, 2017 | The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service (resource co... |
| CVE-2017-9058 | — | — | 1.5% | May 18, 2017 | In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZ... |
| CVE-2017-9055 | CRITICAL | 9.8 | 1.7% | May 18, 2017 | An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarf_formsdata() a few data types were ... |
| CVE-2017-9054 | CRITICAL | 9.8 | 1.8% | May 18, 2017 | An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In _dwarf_decode_s_leb128_chk() a byte poin... |
| CVE-2017-9053 | CRITICAL | 9.1 | 1.7% | May 18, 2017 | An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in _dwarf_rea... |
| CVE-2017-9052 | CRITICAL | 9.8 | 2.7% | May 18, 2017 | An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarf_form... |
| CVE-2017-9051 | — | — | 1.9% | May 18, 2017 | libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsv_read_chunk fun... |
| CVE-2017-9050 | HIGH | 7.5 | 4.6% | May 18, 2017 | libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in d... |
| CVE-2017-9049 | HIGH | 7.5 | 4.6% | May 18, 2017 | libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function... |
| CVE-2017-9048 | HIGH | 7.5 | 4.8% | May 18, 2017 | libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementConte... |
| CVE-2017-9047 | HIGH | 7.5 | 3.2% | May 18, 2017 | A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid... |
| CVE-2017-9045 | — | — | 0.3% | May 18, 2017 | The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http://storage.googleapis.c... |
| CVE-2017-8769 | MEDIUM | 4.6 | 0.2% | May 18, 2017 | Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files (Audio, Document... |
| CVE-2017-8338 | — | — | 4.2% | May 18, 2017 | A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU v... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now