2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-3874 | — | — | 0.9% | Mar 17, 2017 | A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated,... |
| CVE-2017-3872 | — | — | 1.3% | Mar 17, 2017 | A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communic... |
| CVE-2017-3871 | — | — | 0.9% | Mar 17, 2017 | A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Prov... |
| CVE-2017-3870 | — | — | 1.5% | Mar 17, 2017 | A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allo... |
| CVE-2017-3869 | — | — | 1.0% | Mar 17, 2017 | An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, rem... |
| CVE-2017-3868 | — | — | 1.2% | Mar 17, 2017 | A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attac... |
| CVE-2017-3867 | — | — | 1.4% | Mar 17, 2017 | A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco Ad... |
| CVE-2017-3866 | — | — | 1.2% | Mar 17, 2017 | A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker... |
| CVE-2017-3815 | — | — | 1.0% | Mar 17, 2017 | An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to ... |
| CVE-2017-3811 | — | — | 1.4% | Mar 17, 2017 | An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to hav... |
| CVE-2017-6880 | — | — | 14.3% | Mar 17, 2017 | Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or p... |
| CVE-2017-6370 | — | — | 1.0% | Mar 17, 2017 | TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote... |
| CVE-2017-6969 | — | — | 3.7% | Mar 17, 2017 | readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The ... |
| CVE-2017-6967 | HIGH | 7.3 | 1.2% | Mar 17, 2017 | xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not bein... |
| CVE-2017-6966 | — | — | 1.0% | Mar 17, 2017 | readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, reloca... |
| CVE-2017-6965 | — | — | 1.2% | Mar 17, 2017 | readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-differen... |
| CVE-2017-6962 | — | — | 1.3% | Mar 17, 2017 | An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer overflow. This is... |
| CVE-2017-6961 | — | — | 0.8% | Mar 17, 2017 | An issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing huge memory allocations, r... |
| CVE-2017-6960 | HIGH | 7.5 | 1.8% | Mar 17, 2017 | An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, relate... |
| CVE-2017-6958 | MEDIUM | 6.1 | 0.6% | Mar 17, 2017 | An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to i... |
| CVE-2017-6955 | MEDIUM | 5.3 | 1.8% | Mar 17, 2017 | An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress. A user is able... |
| CVE-2017-6954 | — | — | 1.1% | Mar 17, 2017 | An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possib... |
| CVE-2017-0154 | — | — | 10.6% | Mar 17, 2017 | Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain polic... |
| CVE-2017-0151 | — | — | 15.2% | Mar 17, 2017 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object... |
| CVE-2017-0150 | — | — | 15.2% | Mar 17, 2017 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now