2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-3834 | CRITICAL | 9.8 | 4.5% | Apr 6, 2017 | A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express ... |
| CVE-2017-3832 | HIGH | 7.5 | 3.2% | Apr 6, 2017 | A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthent... |
| CVE-2017-7571 | HIGH | 8 | 2.2% | Apr 6, 2017 | public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges. |
| CVE-2017-7569 | — | — | 1.2% | Apr 6, 2017 | In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging th... |
| CVE-2017-6884 | HIGH | 8.8 | 34.6% | Apr 6, 2017 | A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vul... |
| CVE-2017-7566 | — | — | 2.2% | Apr 6, 2017 | MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism. |
| CVE-2017-7565 | — | — | 2.1% | Apr 6, 2017 | Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary... |
| CVE-2017-7237 | — | — | 6.7% | Apr 6, 2017 | The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spicewor... |
| CVE-2017-2675 | — | — | 0.3% | Apr 6, 2017 | Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. Th... |
| CVE-2017-7192 | — | — | 1.9% | Apr 6, 2017 | WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValid... |
| CVE-2017-6968 | — | — | 2.3% | Apr 6, 2017 | GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vec... |
| CVE-2017-6130 | — | — | 1.1% | Apr 6, 2017 | F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attac... |
| CVE-2017-5887 | — | — | 1.4% | Apr 6, 2017 | WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because pinning occurs in the stream function (t... |
| CVE-2017-0305 | — | — | 3.8% | Apr 6, 2017 | F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modificati... |
| CVE-2017-7454 | — | — | 1.1% | Apr 6, 2017 | The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to ... |
| CVE-2017-7453 | — | — | 1.1% | Apr 6, 2017 | The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to ... |
| CVE-2017-7452 | — | — | 1.1% | Apr 6, 2017 | The iwbmp_read_info_header function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers... |
| CVE-2017-7450 | — | — | 1.4% | Apr 5, 2017 | AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. ... |
| CVE-2017-7448 | — | — | 1.2% | Apr 5, 2017 | The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers ... |
| CVE-2017-7447 | — | — | 3.5% | Apr 5, 2017 | HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code. |
| CVE-2017-7446 | — | — | 3.1% | Apr 5, 2017 | HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges. |
| CVE-2017-7444 | — | — | 1.1% | Apr 5, 2017 | In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker h... |
| CVE-2017-7443 | — | — | 0.7% | Apr 5, 2017 | apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, rela... |
| CVE-2017-0888 | MEDIUM | 4.3 | 1.5% | Apr 5, 2017 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navi... |
| CVE-2017-0887 | MEDIUM | 4.3 | 0.9% | Apr 5, 2017 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now