2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7628 | — | — | 1.2% | Apr 13, 2017 | The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker must use search_cats va... |
| CVE-2017-7627 | — | — | 0.7% | Apr 13, 2017 | The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php (there is a missin... |
| CVE-2017-7626 | — | — | 0.9% | Apr 13, 2017 | The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET Method). |
| CVE-2017-7748 | — | — | 2.8% | Apr 12, 2017 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet i... |
| CVE-2017-7747 | — | — | 2.5% | Apr 12, 2017 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a ... |
| CVE-2017-7746 | — | — | 2.5% | Apr 12, 2017 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet ... |
| CVE-2017-7745 | — | — | 2.5% | Apr 12, 2017 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by pack... |
| CVE-2017-7705 | — | — | 2.7% | Apr 12, 2017 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered b... |
| CVE-2017-7704 | — | — | 2.7% | Apr 12, 2017 | In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malfor... |
| CVE-2017-7703 | — | — | 3.3% | Apr 12, 2017 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malf... |
| CVE-2017-7702 | — | — | 2.7% | Apr 12, 2017 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet... |
| CVE-2017-7701 | — | — | 2.7% | Apr 12, 2017 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet i... |
| CVE-2017-7700 | — | — | 2.1% | Apr 12, 2017 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by ... |
| CVE-2017-7284 | — | — | 2.7% | Apr 12, 2017 | An attacker that has hijacked a Unitrends Enterprise Backup (before 9.1.2) web server session can leverage api/includes/... |
| CVE-2017-7281 | — | — | 4.3% | Apr 12, 2017 | An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createR... |
| CVE-2017-7280 | — | — | 6.2% | Apr 12, 2017 | An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not prope... |
| CVE-2017-7279 | — | — | 4.4% | Apr 12, 2017 | An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modif... |
| CVE-2017-5936 | — | — | 2.9% | Apr 12, 2017 | OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for i... |
| CVE-2017-6059 | HIGH | 7.5 | 5.2% | Apr 12, 2017 | Mod_auth_openidc.c in the Ping Identity OpenID Connect authentication module for Apache (aka mod_auth_openidc) before 2.... |
| CVE-2017-7742 | — | — | 1.4% | Apr 12, 2017 | In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmenta... |
| CVE-2017-7741 | — | — | 1.2% | Apr 12, 2017 | In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmenta... |
| CVE-2017-7722 | — | — | 12.7% | Apr 12, 2017 | In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is acce... |
| CVE-2017-7719 | — | — | 2.3% | Apr 12, 2017 | SQL injection in the Spider Event Calendar (aka spider-event-calendar) plugin before 1.5.52 for WordPress is exploitable... |
| CVE-2017-7716 | — | — | 0.7% | Apr 12, 2017 | The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of servic... |
| CVE-2017-3125 | — | — | 1.1% | Apr 12, 2017 | An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute a... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now