2017 CVE Vulnerabilities
17,105 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7881 | — | — | 0.8% | Apr 15, 2017 | BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this... |
| CVE-2017-7874 | — | — | — | Apr 15, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-7879 | — | — | 1.0% | Apr 14, 2017 | SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database. |
| CVE-2017-7878 | — | — | 1.0% | Apr 14, 2017 | SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database. |
| CVE-2017-7877 | — | — | 0.9% | Apr 14, 2017 | CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations. |
| CVE-2017-7875 | — | — | 2.3% | Apr 14, 2017 | In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to tri... |
| CVE-2017-7871 | — | — | 0.7% | Apr 14, 2017 | trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php (challenge parameter). |
| CVE-2017-7717 | HIGH | 8.8 | 1.9% | Apr 14, 2017 | SQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP NetWeaver AS Java 7.4 allo... |
| CVE-2017-7696 | — | — | 36.2% | Apr 14, 2017 | SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service (memory consu... |
| CVE-2017-7690 | HIGH | 7.8 | 1.0% | Apr 14, 2017 | Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary w... |
| CVE-2017-7357 | — | — | 2.6% | Apr 14, 2017 | Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbi... |
| CVE-2017-7188 | MEDIUM | 5.4 | 1.4% | Apr 14, 2017 | Zurmo 3.1.1 Stable allows a Cross-Site Scripting (XSS) attack with a base64-encoded SCRIPT element within a data: URL in... |
| CVE-2017-6554 | — | — | 15.6% | Apr 14, 2017 | pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to wr... |
| CVE-2017-3447 | — | — | — | Apr 14, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was associated with multiple... |
| CVE-2017-1205 | — | — | 0.3% | Apr 14, 2017 | IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges a... |
| CVE-2017-1152 | — | — | 0.6% | Apr 14, 2017 | IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could ... |
| CVE-2017-7643 | HIGH | 7.8 | 1.0% | Apr 14, 2017 | Proxifier for Mac before 2.19 allows local users to gain privileges via the first parameter to the KLoader setuid progra... |
| CVE-2017-7457 | — | — | 1.8% | Apr 14, 2017 | XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure. |
| CVE-2017-7456 | — | — | 29.3% | Apr 14, 2017 | Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView ... |
| CVE-2017-7455 | — | — | 16.3% | Apr 14, 2017 | Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control. |
| CVE-2017-7408 | HIGH | 7.5 | 1.9% | Apr 14, 2017 | Palo Alto Networks Traps ESM Console before 3.4.4 allows attackers to cause a denial of service by leveraging improper v... |
| CVE-2017-7218 | — | — | 0.5% | Apr 14, 2017 | The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privile... |
| CVE-2017-7217 | — | — | 1.1% | Apr 14, 2017 | The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers t... |
| CVE-2017-7870 | — | — | 3.9% | Apr 14, 2017 | LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Po... |
| CVE-2017-7869 | — | — | 2.8% | Apr 14, 2017 | GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now