2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-17835 | — | — | 0.9% | Jan 23, 2019 | In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of... |
| CVE-2017-15720 | — | — | 2.0% | Jan 23, 2019 | In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creatin... |
| CVE-2017-6923 | — | — | 1.6% | Jan 22, 2019 | In Drupal 8.x prior to 8.3.7 When creating a view, you can optionally use Ajax to update the displayed data via filter p... |
| CVE-2017-6922 | — | — | 1.9% | Jan 22, 2019 | In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymo... |
| CVE-2017-8276 | — | — | 0.2% | Jan 18, 2019 | Improper authorization involving a fuse in TrustZone in snapdragon automobile, snapdragon mobile and snapdragon wear in ... |
| CVE-2017-18332 | — | — | 0.2% | Jan 18, 2019 | Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile a... |
| CVE-2017-18331 | — | — | 0.2% | Jan 18, 2019 | Improper access control on secure display buffers in snapdragon automobile, snapdragon mobile and snapdragon wear in ver... |
| CVE-2017-18160 | — | — | 1.3% | Jan 18, 2019 | AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon m... |
| CVE-2017-17197 | — | — | — | Jan 16, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ca... |
| CVE-2017-3145 | HIGH | 7.5 | 27.9% | Jan 16, 2019 | BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-a... |
| CVE-2017-3144 | HIGH | 7.5 | 72.7% | Jan 16, 2019 | A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool o... |
| CVE-2017-3143 | HIGH | 7.5 | 18.2% | Jan 16, 2019 | An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSI... |
| CVE-2017-3142 | MEDIUM | 5.3 | 5.4% | Jan 16, 2019 | An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSI... |
| CVE-2017-3141 | HIGH | 7.2 | 1.4% | Jan 16, 2019 | The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalatio... |
| CVE-2017-3140 | LOW | 3.7 | 12.1% | Jan 16, 2019 | If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition wh... |
| CVE-2017-3138 | MEDIUM | 6.5 | 5.5% | Jan 16, 2019 | named contains a feature which allows operators to issue commands to a running server by communicating with the server p... |
| CVE-2017-3137 | HIGH | 7.5 | 9.0% | Jan 16, 2019 | Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resourc... |
| CVE-2017-3136 | MEDIUM | 5.9 | 11.1% | Jan 16, 2019 | A query with a specific set of characteristics could cause a server using DNS64 to encounter an assertion failure and te... |
| CVE-2017-3135 | HIGH | 7.5 | 17.1% | Jan 16, 2019 | Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an incons... |
| CVE-2017-6921 | — | — | 1.8% | Jan 15, 2019 | In Drupal 8 prior to 8.3.4; The file REST resource does not properly validate some fields when manipulating files. A sit... |
| CVE-2017-6924 | — | — | 2.1% | Jan 15, 2019 | In Drupal 8 prior to 8.3.7; When using the REST API, users without the correct permission can post comments via REST tha... |
| CVE-2017-6925 | — | — | 3.0% | Jan 15, 2019 | In versions of Drupal 8 core prior to 8.3.7; There is a vulnerability in the entity access system that could allow unwan... |
| CVE-2017-18358 | — | — | 0.9% | Jan 15, 2019 | LimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to enter an email address... |
| CVE-2017-18357 | — | — | 27.1% | Jan 15, 2019 | Shopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of t... |
| CVE-2017-18356 | — | — | 2.0% | Jan 15, 2019 | In the Automattic WooCommerce plugin before 3.2.4 for WordPress, an attack is possible after gaining access to the targe... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now