2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6077 | CRITICAL | 9.8 | 68.2% | Feb 22, 2017 | ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitra... |
| CVE-2017-6188 | MEDIUM | 5.5 | 0.4% | Feb 22, 2017 | Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET ... |
| CVE-2017-5586 | — | — | 22.5% | Feb 22, 2017 | OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a craf... |
| CVE-2017-5585 | — | — | 2.0% | Feb 22, 2017 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and re... |
| CVE-2017-3847 | — | — | 0.6% | Feb 22, 2017 | A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker ... |
| CVE-2017-3845 | — | — | 1.5% | Feb 22, 2017 | A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthentica... |
| CVE-2017-3844 | — | — | 1.5% | Feb 22, 2017 | A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an auth... |
| CVE-2017-3843 | — | — | 1.5% | Feb 22, 2017 | A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, rem... |
| CVE-2017-3842 | — | — | 1.3% | Feb 22, 2017 | A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) coul... |
| CVE-2017-3841 | — | — | 2.4% | Feb 22, 2017 | A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, rem... |
| CVE-2017-3840 | — | — | 1.5% | Feb 22, 2017 | A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, rem... |
| CVE-2017-3839 | — | — | 1.6% | Feb 22, 2017 | An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) cou... |
| CVE-2017-3838 | — | — | 1.5% | Feb 22, 2017 | A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a... |
| CVE-2017-3837 | — | — | 2.1% | Feb 22, 2017 | An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano Co... |
| CVE-2017-3836 | — | — | 1.6% | Feb 22, 2017 | A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacke... |
| CVE-2017-3835 | — | — | 1.8% | Feb 22, 2017 | A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attac... |
| CVE-2017-3833 | — | — | 1.1% | Feb 22, 2017 | A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote atta... |
| CVE-2017-3830 | — | — | 2.6% | Feb 22, 2017 | A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to ... |
| CVE-2017-3829 | — | — | 1.5% | Feb 22, 2017 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an un... |
| CVE-2017-3828 | — | — | 1.5% | Feb 22, 2017 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an un... |
| CVE-2017-3827 | — | — | 1.9% | Feb 22, 2017 | A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Se... |
| CVE-2017-3821 | — | — | 1.5% | Feb 22, 2017 | A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remot... |
| CVE-2017-2684 | — | — | 2.0% | Feb 22, 2017 | Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physic... |
| CVE-2017-6127 | — | — | 0.8% | Feb 21, 2017 | Multiple cross-site request forgery (CSRF) vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router... |
| CVE-2017-6098 | — | — | 5.2% | Feb 21, 2017 | A SQL injection issue was discovered in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects /inc/camp... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now