2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-8376 | — | — | 0.6% | May 1, 2017 | GeniXCMS 1.0.2 has XSS triggered by an authenticated comment that is mishandled during a mouse operation by an administr... |
| CVE-2017-6128 | — | — | 1.4% | May 1, 2017 | An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Ma... |
| CVE-2017-5631 | — | — | 4.5% | May 1, 2017 | An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr"... |
| CVE-2017-8385 | — | — | 0.8% | May 1, 2017 | Craft CMS before 2.6.2976 does not prevent modification of the URL in a forgot-password email message. |
| CVE-2017-8384 | — | — | 0.7% | May 1, 2017 | Craft CMS before 2.6.2976 allows XSS attacks because an array returned by HttpRequestService::getSegments() and getActio... |
| CVE-2017-8383 | — | — | 0.9% | May 1, 2017 | Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder. |
| CVE-2017-8378 | — | — | 2.2% | May 1, 2017 | Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote at... |
| CVE-2017-8374 | — | — | 2.2% | May 1, 2017 | The mad_bit_skip function in bit.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (... |
| CVE-2017-8373 | — | — | 2.5% | May 1, 2017 | The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of servi... |
| CVE-2017-8372 | — | — | 2.0% | May 1, 2017 | The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to ... |
| CVE-2017-6520 | — | — | 2.0% | May 1, 2017 | The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source... |
| CVE-2017-6519 | CRITICAL | 9.1 | 3.1% | May 1, 2017 | avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that a... |
| CVE-2017-8371 | — | — | 1.0% | Apr 30, 2017 | Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storage for passwords, which might al... |
| CVE-2017-8367 | — | — | 0.5% | Apr 30, 2017 | Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, Easy Av... |
| CVE-2017-8366 | — | — | 1.7% | Apr 30, 2017 | The strescape function in ec_strings.c in Ettercap 0.8.2 allows remote attackers to cause a denial of service (heap-base... |
| CVE-2017-8365 | — | — | 3.4% | Apr 30, 2017 | The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over... |
| CVE-2017-8364 | — | — | 1.7% | Apr 30, 2017 | The read_buf function in stream.c in rzip 2.1 allows remote attackers to cause a denial of service (heap-based buffer ov... |
| CVE-2017-8363 | — | — | 3.3% | Apr 30, 2017 | The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-... |
| CVE-2017-8362 | — | — | 3.4% | Apr 30, 2017 | The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (inval... |
| CVE-2017-8361 | — | — | 3.9% | Apr 30, 2017 | The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffe... |
| CVE-2017-8081 | — | — | 1.3% | Apr 30, 2017 | Poor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3.13 allows a network atta... |
| CVE-2017-8359 | — | — | 2.5% | Apr 30, 2017 | Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_... |
| CVE-2017-8358 | — | — | 2.1% | Apr 30, 2017 | LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG ... |
| CVE-2017-8357 | — | — | 2.0% | Apr 30, 2017 | In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) v... |
| CVE-2017-8356 | — | — | 1.9% | Apr 30, 2017 | In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) v... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now