2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

CVE IDSeverityCVSSDescription
CVE-2017-9327——Secret data of processes managed by CM is not secured by file permissions.
CVE-2017-9326——The keystore password for the Spark History Server may be exposed in unsecured files under the /var/run/cloudera-scm-age...
CVE-2017-9325——The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs.
CVE-2017-6900——An issue was discovered in Riello NetMan 204 14-2 and 15-2. The issue is with the login script and wrongpass Python scri...
CVE-2017-6216——novaksolutions/infusionsoft-php-sdk v2016-10-31 is vulnerable to a reflected XSS in the leadscoring.php resulting code e...
CVE-2017-18346——SQL injection vulnerability in /wbg/core/_includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows rem...
CVE-2017-17972——packages/subjects/pub/subjects.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?subjecttypeid=x...
CVE-2017-8417HIGH8.8An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device requires that a user logging into the device...
CVE-2017-8416HIGH8.8An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which ...
CVE-2017-8415CRITICAL9.8An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom telnet daemon as a part of the ...
CVE-2017-8413HIGH8.8An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device runs a custom daemon on UDP port 5978 which ...
CVE-2017-8412HIGH8.8An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom binary called mp4ts under the /...
CVE-2017-11580——Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When ...
CVE-2017-11579——In the most recent firmware for Blipcare, the device provides an open Wireless network called "Blip" for communicating w...
CVE-2017-11578——It was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the devi...
CVE-2017-8414HIGH7.8An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary orthrus in /sbin folder of the device handle...
CVE-2017-8410CRITICAL9.8An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The binary rtspd in /sbin folder of the device handles ...
CVE-2017-8409HIGH7.5An issue was discovered on D-Link DCS-1130 devices. The device requires that a user logging to the device to provide a u...
CVE-2017-8406HIGH8.8An issue was discovered on D-Link DCS-1130 devices. The device provides a crossdomain.xml file with no restrictions on w...
CVE-2017-8405HIGH7.5An issue was discovered on D-Link DCS-1130 and DCS-1100 devices. The binary rtspd in /sbin folder of the device handles ...
CVE-2017-8411HIGH8.8An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fold...
CVE-2017-8407HIGH8.8An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of changing the admin...
CVE-2017-8404CRITICAL9.8An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fold...
CVE-2017-8408——An issue was discovered on D-Link DCS-1130 devices. The device provides a user with the capability of setting a SMB fold...
CVE-2017-5028——Insufficient data validation in V8 in Google Chrome prior to 56.0.2924.76 allowed a remote attacker to leak cross-origin...

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now