2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-5650 | — | — | 8.3% | Apr 17, 2017 | In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did ... |
| CVE-2017-5648 | CRITICAL | 9.1 | 13.2% | Apr 17, 2017 | While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.... |
| CVE-2017-5647 | HIGH | 7.5 | 16.8% | Apr 17, 2017 | A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.... |
| CVE-2017-7891 | — | — | 0.7% | Apr 17, 2017 | sourcebans-pp (SourceBans++) 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter. |
| CVE-2017-7889 | HIGH | 7.8 | 0.3% | Apr 17, 2017 | The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism... |
| CVE-2017-7885 | — | — | 1.2% | Apr 17, 2017 | Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure o... |
| CVE-2017-7615 | HIGH | 8.8 | 90.9% | Apr 16, 2017 | MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value ... |
| CVE-2017-7882 | — | — | 2.4% | Apr 15, 2017 | LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/h... |
| CVE-2017-7881 | — | — | 0.8% | Apr 15, 2017 | BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this... |
| CVE-2017-7874 | — | — | — | Apr 15, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-7879 | — | — | 1.0% | Apr 14, 2017 | SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database. |
| CVE-2017-7878 | — | — | 1.0% | Apr 14, 2017 | SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database. |
| CVE-2017-7877 | — | — | 0.9% | Apr 14, 2017 | CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations. |
| CVE-2017-7875 | — | — | 2.3% | Apr 14, 2017 | In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to tri... |
| CVE-2017-7871 | — | — | 0.7% | Apr 14, 2017 | trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php (challenge parameter). |
| CVE-2017-7717 | HIGH | 8.8 | 1.9% | Apr 14, 2017 | SQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP NetWeaver AS Java 7.4 allo... |
| CVE-2017-7696 | — | — | 36.2% | Apr 14, 2017 | SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service (memory consu... |
| CVE-2017-7690 | HIGH | 7.8 | 1.0% | Apr 14, 2017 | Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary w... |
| CVE-2017-7357 | — | — | 2.6% | Apr 14, 2017 | Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbi... |
| CVE-2017-7188 | MEDIUM | 5.4 | 1.4% | Apr 14, 2017 | Zurmo 3.1.1 Stable allows a Cross-Site Scripting (XSS) attack with a base64-encoded SCRIPT element within a data: URL in... |
| CVE-2017-6554 | — | — | 15.6% | Apr 14, 2017 | pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to wr... |
| CVE-2017-3447 | — | — | — | Apr 14, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was associated with multiple... |
| CVE-2017-1205 | — | — | 0.3% | Apr 14, 2017 | IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges a... |
| CVE-2017-1152 | — | — | 0.6% | Apr 14, 2017 | IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could ... |
| CVE-2017-7643 | HIGH | 7.8 | 1.0% | Apr 14, 2017 | Proxifier for Mac before 2.19 allows local users to gain privileges via the first parameter to the KLoader setuid progra... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now