2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6444 | HIGH | 7.5 | 13.5% | Mar 12, 2017 | The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast netw... |
| CVE-2017-5626 | — | — | 2.8% | Mar 12, 2017 | OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that al... |
| CVE-2017-5624 | — | — | 2.7% | Mar 12, 2017 | An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T. The attacker can persistently make the (locked) b... |
| CVE-2017-6819 | — | — | 2.3% | Mar 12, 2017 | In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-th... |
| CVE-2017-6818 | — | — | 2.8% | Mar 12, 2017 | In WordPress before 4.7.3 (wp-admin/js/tags-box.js), there is cross-site scripting (XSS) via taxonomy term names. |
| CVE-2017-6817 | — | — | 2.1% | Mar 12, 2017 | In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embe... |
| CVE-2017-6816 | — | — | 3.1% | Mar 12, 2017 | In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin del... |
| CVE-2017-6815 | — | — | 3.0% | Mar 12, 2017 | In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation. |
| CVE-2017-6814 | — | — | 3.0% | Mar 12, 2017 | In WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via Media File Metadata. This is demonstrat... |
| CVE-2017-6812 | — | — | 0.6% | Mar 11, 2017 | paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.vote.php (id param... |
| CVE-2017-6811 | — | — | 0.6% | Mar 11, 2017 | paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.shop.php (id param... |
| CVE-2017-6810 | — | — | 0.6% | Mar 11, 2017 | paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.fplinks.php (linki... |
| CVE-2017-6809 | — | — | 0.6% | Mar 11, 2017 | paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.donate.php (id par... |
| CVE-2017-6808 | — | — | 0.6% | Mar 11, 2017 | paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.faq.php (id parame... |
| CVE-2017-6513 | — | — | 1.3% | Mar 11, 2017 | The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which a... |
| CVE-2017-6466 | — | — | 1.5% | Mar 11, 2017 | F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain ... |
| CVE-2017-5638 | CRITICAL | 9.8 | 100.0% | Mar 11, 2017 | The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception ha... |
| CVE-2017-6804 | — | — | — | Mar 10, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-6802 | — | — | 1.4% | Mar 10, 2017 | An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed R... |
| CVE-2017-6801 | — | — | 1.4% | Mar 10, 2017 | An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFPa... |
| CVE-2017-6800 | — | — | 1.7% | Mar 10, 2017 | An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during h... |
| CVE-2017-6799 | — | — | 3.5% | Mar 10, 2017 | A cross-site scripting (XSS) vulnerability in view_filters_page.php in MantisBT before 2.2.1 allows remote attackers to ... |
| CVE-2017-6798 | HIGH | 7.8 | 3.9% | Mar 10, 2017 | Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute a... |
| CVE-2017-6596 | — | — | 0.8% | Mar 10, 2017 | partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validati... |
| CVE-2017-6506 | — | — | 11.7% | Mar 10, 2017 | In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leadi... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now