2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-5544 | MEDIUM | 5.9 | 5.2% | Jan 23, 2017 | An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's S... |
| CVE-2017-5539 | — | — | 4.1% | Jan 23, 2017 | The patch for directory traversal (CVE-2017-5480) in b2evolution version 6.8.4-stable has a bypass vulnerability. An att... |
| CVE-2017-5545 | — | — | 3.8% | Jan 21, 2017 | The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive informat... |
| CVE-2017-5543 | — | — | 2.0% | Jan 20, 2017 | includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks ... |
| CVE-2017-5542 | — | — | 1.2% | Jan 20, 2017 | Cross-site scripting (XSS) vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allow... |
| CVE-2017-5541 | — | — | 2.5% | Jan 20, 2017 | Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remot... |
| CVE-2017-2578 | — | — | 0.9% | Jan 20, 2017 | In Moodle 3.x, there is XSS in the assignment submission page. |
| CVE-2017-2576 | — | — | 1.0% | Jan 20, 2017 | In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums. |
| CVE-2017-5521 | HIGH | 8.1 | 89.3% | Jan 17, 2017 | An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R... |
| CVE-2017-5520 | — | — | 1.8% | Jan 17, 2017 | The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploa... |
| CVE-2017-5519 | — | — | 2.5% | Jan 17, 2017 | SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQ... |
| CVE-2017-5518 | — | — | 1.6% | Jan 17, 2017 | The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as de... |
| CVE-2017-5517 | — | — | 2.5% | Jan 17, 2017 | SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary... |
| CVE-2017-5516 | — | — | 1.1% | Jan 17, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers t... |
| CVE-2017-5515 | — | — | 0.8% | Jan 17, 2017 | Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticat... |
| CVE-2017-5223 | — | — | 2.1% | Jan 16, 2017 | An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML docume... |
| CVE-2017-5494 | — | — | 1.2% | Jan 15, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote au... |
| CVE-2017-5480 | — | — | 2.4% | Jan 15, 2017 | Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated u... |
| CVE-2017-5493 | — | — | 2.9% | Jan 15, 2017 | wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random nu... |
| CVE-2017-5492 | — | — | 1.9% | Jan 15, 2017 | Cross-site request forgery (CSRF) vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7... |
| CVE-2017-5491 | — | — | 3.2% | Jan 15, 2017 | wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed... |
| CVE-2017-5490 | — | — | 2.4% | Jan 15, 2017 | Cross-site scripting (XSS) vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in W... |
| CVE-2017-5489 | — | — | 1.4% | Jan 15, 2017 | Cross-site request forgery (CSRF) vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authenti... |
| CVE-2017-5488 | — | — | 1.8% | Jan 15, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote a... |
| CVE-2017-5487 | — | — | 87.3% | Jan 15, 2017 | wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now