2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

CVE IDSeverityCVSSDescription
CVE-2017-5871——Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection. The impact is: obtain sensitive in...
CVE-2017-5864——Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-5863——Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.
CVE-2017-9809——OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Information Exposure.
CVE-2017-6514——WordPress 4.7.2 mishandles listings of post authors, which allows remote attackers to obtain sensitive information (Path...
CVE-2017-12884——OX Software GmbH App Suite 7.8.4 and earlier is affected by: Information Exposure.
CVE-2017-12885——OX Software GmbH App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).
CVE-2017-12795——OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: (Improper Input Validation).
CVE-2017-12789——Metinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information Disclosure (remote). The co...
CVE-2017-12761——http://codecanyon.net/user/Endober WebFile Explorer 1.0 is affected by: SQL Injection. The impact is: Arbitrary File Dow...
CVE-2017-12760——Ynet Interactive - http://demo.ynetinteractive.com/mobiketa/ Mobiketa 4.0 is affected by: SQL Injection. The impact is: ...
CVE-2017-12759——Ynet Interactive - http://demo.ynetinteractive.com/soa/ SOA School Management 3.0 is affected by: SQL Injection. The imp...
CVE-2017-12758——https://www.joomlaextensions.co.in/ Joomla! Component Appointment 1.1 is affected by: SQL Injection. The impact is: Code...
CVE-2017-12757——Certain Ambit Technologies Pvt. Ltd products are affected by: SQL Injection. This affects iTech B2B Script 4.42i and Tec...
CVE-2017-12839——A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote ...
CVE-2017-12790——Metinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information Disclosure (remote). The co...
CVE-2017-12778——The UI Lock feature in qBittorrent version 3.3.15 is vulnerable to Authentication Bypass, which allows Attack to gain un...
CVE-2017-12806——In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers t...
CVE-2017-12805——In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attacker...
CVE-2017-12804——The iwgif_init_screen function in imagew-gif.c:510 in ImageWorsener 1.3.2 allows remote attackers to cause a denial of s...
CVE-2017-12788——Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in Metinfo 5.3.18 allows remote attackers to inje...
CVE-2017-18279HIGH7.8Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon...
CVE-2017-18278——An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigg...
CVE-2017-18276——Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera sessi...
CVE-2017-18275——A new account can be inserted into simContacts service using Android command line tool in Snapdragon Automobile, Snapdra...

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now