2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-5517 | — | — | 2.5% | Jan 17, 2017 | SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary... |
| CVE-2017-5516 | — | — | 1.1% | Jan 17, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers t... |
| CVE-2017-5515 | — | — | 0.8% | Jan 17, 2017 | Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticat... |
| CVE-2017-5223 | — | — | 2.1% | Jan 16, 2017 | An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML docume... |
| CVE-2017-5494 | — | — | 1.2% | Jan 15, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote au... |
| CVE-2017-5480 | — | — | 2.4% | Jan 15, 2017 | Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated u... |
| CVE-2017-5493 | — | — | 2.9% | Jan 15, 2017 | wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random nu... |
| CVE-2017-5492 | — | — | 1.9% | Jan 15, 2017 | Cross-site request forgery (CSRF) vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7... |
| CVE-2017-5491 | — | — | 3.2% | Jan 15, 2017 | wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed... |
| CVE-2017-5490 | — | — | 2.4% | Jan 15, 2017 | Cross-site scripting (XSS) vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in W... |
| CVE-2017-5489 | — | — | 1.4% | Jan 15, 2017 | Cross-site request forgery (CSRF) vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authenti... |
| CVE-2017-5488 | — | — | 1.8% | Jan 15, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote a... |
| CVE-2017-5487 | — | — | 87.3% | Jan 15, 2017 | wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before... |
| CVE-2017-2584 | — | — | 0.4% | Jan 15, 2017 | arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel ... |
| CVE-2017-5476 | — | — | 0.7% | Jan 14, 2017 | Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin. |
| CVE-2017-5475 | — | — | 0.6% | Jan 14, 2017 | comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments. |
| CVE-2017-5474 | — | — | 0.9% | Jan 14, 2017 | Open redirect vulnerability in comment.php in Serendipity through 2.0.5 allows remote attackers to redirect users to arb... |
| CVE-2017-5473 | — | — | 3.5% | Jan 14, 2017 | Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authenticati... |
| CVE-2017-0398 | — | — | 0.5% | Jan 13, 2017 | An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside... |
| CVE-2017-5364 | — | — | 2.3% | Jan 13, 2017 | Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of Service and Remote Code ... |
| CVE-2017-0404 | — | — | 1.6% | Jan 12, 2017 | An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious application to exec... |
| CVE-2017-0403 | — | — | 1.6% | Jan 12, 2017 | An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application t... |
| CVE-2017-0402 | — | — | 0.5% | Jan 12, 2017 | An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable... |
| CVE-2017-0401 | — | — | 0.5% | Jan 12, 2017 | An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post ... |
| CVE-2017-0400 | — | — | 0.5% | Jan 12, 2017 | An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now