2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6482 | — | — | — | Mar 5, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-6394. Reason: This candidate is a duplicate of... |
| CVE-2017-6481 | — | — | 0.7% | Mar 5, 2017 | Multiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2. The vulnerabilities exist due to insufficient... |
| CVE-2017-6480 | — | — | 0.9% | Mar 5, 2017 | groovel/cmsgroovel before 3.3.7-beta is vulnerable to a reflected XSS in commons/browser.php (path parameter). |
| CVE-2017-6479 | — | — | 0.7% | Mar 5, 2017 | FenixHosting/fenix-open-source before 2017-03-04 is vulnerable to a reflected XSS in forums/search.php (search-by-topic ... |
| CVE-2017-6478 | MEDIUM | 6.1 | 2.6% | Mar 5, 2017 | paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter). |
| CVE-2017-6445 | — | — | 1.0% | Mar 5, 2017 | The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encr... |
| CVE-2017-6474 | — | — | 2.9% | Mar 4, 2017 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malforme... |
| CVE-2017-6473 | — | — | 2.7% | Mar 4, 2017 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file... |
| CVE-2017-6472 | — | — | 2.6% | Mar 4, 2017 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injectio... |
| CVE-2017-6471 | — | — | 2.6% | Mar 4, 2017 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malfor... |
| CVE-2017-6470 | — | — | 2.8% | Mar 4, 2017 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malf... |
| CVE-2017-6469 | — | — | 2.9% | Mar 4, 2017 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by packet injection or a ma... |
| CVE-2017-6468 | — | — | 2.6% | Mar 4, 2017 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed captur... |
| CVE-2017-6467 | — | — | 2.6% | Mar 4, 2017 | In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malforme... |
| CVE-2017-5867 | — | — | 1.4% | Mar 3, 2017 | ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 allows remote authenticate... |
| CVE-2017-5866 | — | — | 1.0% | Mar 3, 2017 | The autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9... |
| CVE-2017-5865 | — | — | 1.1% | Mar 3, 2017 | The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x bef... |
| CVE-2017-5836 | — | — | 2.7% | Mar 3, 2017 | The plist_free_data function in plist.c in libplist allows attackers to cause a denial of service (crash) via vectors in... |
| CVE-2017-5835 | — | — | 2.9% | Mar 3, 2017 | libplist allows attackers to cause a denial of service (large memory allocation and crash) via vectors involving an offs... |
| CVE-2017-5834 | — | — | 1.3% | Mar 3, 2017 | The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service (out-of-bounds heap r... |
| CVE-2017-5833 | — | — | 1.7% | Mar 3, 2017 | Cross-site scripting (XSS) vulnerability in the invocation code generation for interstitial zones in Revive Adserver bef... |
| CVE-2017-5832 | — | — | 1.3% | Mar 3, 2017 | Cross-site scripting (XSS) vulnerability in Revive Adserver before 4.0.1 allows remote authenticated users to inject arb... |
| CVE-2017-5831 | — | — | 1.2% | Mar 3, 2017 | Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new pass... |
| CVE-2017-5830 | — | — | 3.3% | Mar 3, 2017 | Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies relate... |
| CVE-2017-5616 | — | — | 1.2% | Mar 3, 2017 | Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now