2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-8890 | HIGH | 7.8 | 1.4% | May 10, 2017 | The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers... |
| CVE-2017-3894 | — | — | 0.8% | May 10, 2017 | A stored cross site scripting vulnerability in the Management Console of BlackBerry Unified Endpoint Manager version 12.... |
| CVE-2017-6959 | — | — | — | May 10, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-8879 | — | — | 0.4% | May 10, 2017 | Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the current password, which makes it easier for physica... |
| CVE-2017-7888 | — | — | 1.1% | May 10, 2017 | Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier. |
| CVE-2017-7887 | — | — | 0.9% | May 10, 2017 | Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter. |
| CVE-2017-7886 | — | — | 1.7% | May 10, 2017 | Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter. |
| CVE-2017-7698 | — | — | 1.7% | May 10, 2017 | A Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to execute arbitrary code via... |
| CVE-2017-4896 | — | — | 0.3% | May 10, 2017 | Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the... |
| CVE-2017-4895 | — | — | 0.4% | May 10, 2017 | Airwatch Agent for Android contains a vulnerability that may allow a device to bypass root detection. Successful exploit... |
| CVE-2017-1137 | — | — | 1.9% | May 10, 2017 | IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security. A remote attacker could expl... |
| CVE-2017-1103 | — | — | 1.2% | May 10, 2017 | IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when... |
| CVE-2017-8878 | — | — | 1.0% | May 10, 2017 | ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 allow remote authenticated users to discover the Wi-... |
| CVE-2017-8877 | — | — | 0.9% | May 10, 2017 | ASUS RT-AC* and RT-N* devices with firmware through 3.0.0.4.380.7378 allow JSONP Information Disclosure such as the SSID... |
| CVE-2017-8876 | MEDIUM | 6.1 | 0.8% | May 10, 2017 | Symphony 2 2.6.11 has XSS in the meta[navigation_group] parameter to content/content.blueprintssections.php. |
| CVE-2017-8875 | — | — | 0.6% | May 10, 2017 | CSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the login redirect URL or logo... |
| CVE-2017-8874 | — | — | 0.8% | May 10, 2017 | Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authenti... |
| CVE-2017-8872 | CRITICAL | 9.1 | 2.3% | May 10, 2017 | The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer... |
| CVE-2017-8868 | — | — | 1.9% | May 10, 2017 | acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the delete parameter to acp... |
| CVE-2017-5892 | — | — | 1.2% | May 10, 2017 | ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 allow JSONP Information Disclosure such as a network... |
| CVE-2017-5891 | — | — | 0.5% | May 10, 2017 | ASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save Settings CSRF. |
| CVE-2017-8859 | — | — | 2.6% | May 9, 2017 | In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root. |
| CVE-2017-8858 | — | — | 2.7% | May 9, 2017 | In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote... |
| CVE-2017-8857 | — | — | 5.7% | May 9, 2017 | In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arb... |
| CVE-2017-8856 | — | — | 3.8% | May 9, 2017 | In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now