2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-5615 | — | — | 1.1% | Mar 3, 2017 | cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location. |
| CVE-2017-5614 | MEDIUM | 6.1 | 1.2% | Mar 3, 2017 | Open redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to arbitrary web sites and... |
| CVE-2017-5613 | — | — | 2.6% | Mar 3, 2017 | Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string ... |
| CVE-2017-5571 | — | — | 1.8% | Mar 3, 2017 | Open redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher (aka Flex License Manager) 11.14.1 and... |
| CVE-2017-5356 | — | — | 4.8% | Mar 3, 2017 | Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string con... |
| CVE-2017-5196 | — | — | 5.1% | Mar 3, 2017 | Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vecto... |
| CVE-2017-5195 | — | — | 5.5% | Mar 3, 2017 | Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a cra... |
| CVE-2017-5194 | — | — | 4.9% | Mar 3, 2017 | Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an ... |
| CVE-2017-5193 | — | — | 5.6% | Mar 3, 2017 | The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer dereferen... |
| CVE-2017-2290 | HIGH | 8.8 | 1.2% | Mar 3, 2017 | On Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non-administrator user can create an ... |
| CVE-2017-6104 | — | — | 7.3% | Mar 2, 2017 | Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0. |
| CVE-2017-6103 | — | — | 0.9% | Mar 2, 2017 | Persistent XSS Vulnerability in Wordpress plugin AnyVar v0.1.1. |
| CVE-2017-6102 | — | — | 1.4% | Mar 2, 2017 | Persistent XSS in wordpress plugin rockhoist-badges v1.2.2. |
| CVE-2017-5235 | — | — | 0.9% | Mar 2, 2017 | Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it i... |
| CVE-2017-5234 | — | — | 0.9% | Mar 2, 2017 | Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possib... |
| CVE-2017-5233 | HIGH | 7.8 | 0.9% | Mar 2, 2017 | Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible... |
| CVE-2017-5232 | — | — | 0.8% | Mar 2, 2017 | All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is ... |
| CVE-2017-5231 | — | — | 1.2% | Mar 2, 2017 | All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the ... |
| CVE-2017-5230 | — | — | 1.5% | Mar 2, 2017 | The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of ... |
| CVE-2017-5229 | — | — | 1.2% | Mar 2, 2017 | All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the ... |
| CVE-2017-5228 | — | — | 1.2% | Mar 2, 2017 | All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the ... |
| CVE-2017-6413 | — | — | 4.3% | Mar 2, 2017 | The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apac... |
| CVE-2017-6410 | — | — | 0.8% | Mar 2, 2017 | kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full htt... |
| CVE-2017-6409 | — | — | 1.4% | Mar 2, 2017 | An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Unauthenticated CO... |
| CVE-2017-6408 | — | — | 0.2% | Mar 2, 2017 | An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now