2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-5962 | — | — | 0.8% | Feb 12, 2017 | An issue was discovered in contexts_wurfl (for TYPO3) before 0.4.2. The vulnerability exists due to insufficient filtrat... |
| CVE-2017-5961 | — | — | 1.0% | Feb 12, 2017 | An issue was discovered in ionize through 1.0.8. The vulnerability exists due to insufficient filtration of user-supplie... |
| CVE-2017-5960 | — | — | 1.0% | Feb 12, 2017 | An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-su... |
| CVE-2017-3302 | — | — | 4.9% | Feb 12, 2017 | Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x throu... |
| CVE-2017-5954 | — | — | 4.5% | Feb 10, 2017 | An issue was discovered in the serialize-to-js package 0.5.0 for Node.js. Untrusted data passed into the deserialize() f... |
| CVE-2017-5953 | — | — | 2.8% | Feb 10, 2017 | vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result... |
| CVE-2017-5945 | — | — | 0.9% | Feb 10, 2017 | An issue was discovered in the PoodLL Filter plugin through 3.0.20 for Moodle. The vulnerability exists due to insuffici... |
| CVE-2017-5942 | MEDIUM | 6.1 | 1.0% | Feb 10, 2017 | An issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter when composing a mail allo... |
| CVE-2017-5858 | — | — | 0.9% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5606 | MEDIUM | 5.9 | 0.8% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5605 | — | — | 0.9% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5604 | — | — | 1.3% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5603 | — | — | 1.6% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5602 | — | — | 0.7% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5593 | — | — | 0.7% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5592 | MEDIUM | 5.9 | 0.8% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5591 | MEDIUM | 5.9 | 1.3% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5590 | — | — | 0.7% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5589 | — | — | 0.7% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5941 | CRITICAL | 9.8 | 60.4% | Feb 9, 2017 | An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() fu... |
| CVE-2017-5940 | — | — | 0.4% | Feb 9, 2017 | Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its... |
| CVE-2017-5180 | — | — | 0.7% | Feb 9, 2017 | Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt ... |
| CVE-2017-3813 | — | — | 1.7% | Feb 9, 2017 | A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows c... |
| CVE-2017-3807 | — | — | 14.8% | Feb 9, 2017 | A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software,... |
| CVE-2017-5634 | — | — | 0.4% | Feb 9, 2017 | The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now