2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7396 | — | — | 2.0% | Apr 1, 2017 | In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in... |
| CVE-2017-7395 | — | — | 1.4% | Apr 1, 2017 | In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated clien... |
| CVE-2017-7394 | — | — | 1.6% | Apr 1, 2017 | In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending... |
| CVE-2017-7393 | — | — | 1.8% | Apr 1, 2017 | In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leadi... |
| CVE-2017-7392 | — | — | 1.7% | Apr 1, 2017 | In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a sm... |
| CVE-2017-7391 | — | — | 8.2% | Apr 1, 2017 | A Cross-Site Scripting (XSS) was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration o... |
| CVE-2017-7390 | — | — | 0.6% | Apr 1, 2017 | A Cross-Site Scripting (XSS) was discovered in 'SocialNetwork v1.2.1'. The vulnerability exists due to insufficient filt... |
| CVE-2017-7389 | MEDIUM | 6.1 | 0.8% | Apr 1, 2017 | Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release_3.5.4'. The vulnerabilities exist due to insu... |
| CVE-2017-7388 | MEDIUM | 6.1 | 0.8% | Apr 1, 2017 | A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'. The vulnerability exists due to insufficient filtrat... |
| CVE-2017-7387 | — | — | 0.7% | Apr 1, 2017 | TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php ... |
| CVE-2017-7386 | — | — | 0.7% | Apr 1, 2017 | citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php (model parameter). |
| CVE-2017-7374 | HIGH | 7.8 | 0.8% | Mar 31, 2017 | Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of ser... |
| CVE-2017-2775 | HIGH | 7.5 | 2.9% | Mar 31, 2017 | An exploitable memory corruption vulnerability exists in the LvVariantUnflatten functionality in 64-bit versions of LabV... |
| CVE-2017-1171 | — | — | 0.7% | Mar 31, 2017 | The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to... |
| CVE-2017-1154 | — | — | 1.0% | Mar 31, 2017 | IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local... |
| CVE-2017-3010 | — | — | 4.6% | Mar 31, 2017 | Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitabl... |
| CVE-2017-3009 | — | — | 4.4% | Mar 31, 2017 | Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitabl... |
| CVE-2017-7363 | — | — | 0.8% | Mar 31, 2017 | Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack. |
| CVE-2017-7362 | — | — | 0.8% | Mar 31, 2017 | Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack. |
| CVE-2017-7361 | — | — | 0.8% | Mar 31, 2017 | Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack. |
| CVE-2017-7360 | — | — | 0.8% | Mar 31, 2017 | Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack. |
| CVE-2017-7359 | — | — | 1.2% | Mar 31, 2017 | Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack. |
| CVE-2017-7309 | — | — | 57.7% | Mar 31, 2017 | A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remo... |
| CVE-2017-7241 | — | — | 0.9% | Mar 31, 2017 | A cross-site scripting (XSS) vulnerability in the MantisBT Move Attachments page (move_attachments_page.php, part of adm... |
| CVE-2017-6973 | — | — | 0.9% | Mar 31, 2017 | A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remo... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now