2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-0367 | — | — | 1.9% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 contains an unsafe use of temporary directory, where having LocalisationCache directory... |
| CVE-2017-0366 | — | — | 1.3% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw allowing to evade SVG filter using default attribute values i... |
| CVE-2017-0365 | — | — | 1.2% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText() with non-d... |
| CVE-2017-0364 | — | — | 1.1% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where Special:Search allows redirects to any interwiki link. |
| CVE-2017-0363 | — | — | 1.1% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 has a flaw where Special:UserLogin?returnto=interwiki:foo will redirect to ex... |
| CVE-2017-0362 | — | — | 0.8% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a flaw where the "Mark all pages visited" on the watchlist does not ... |
| CVE-2017-0361 | — | — | 0.5% | Apr 13, 2018 | Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains an information disclosure flaw, where the api.log might contain pass... |
| CVE-2017-0357 | — | — | 3.0% | Apr 13, 2018 | A heap-overflow flaw exists in the -tr loader of iucode-tool starting with v1.4 and before v2.1.1, potentially leading t... |
| CVE-2017-0356 | — | — | 3.5% | Apr 13, 2018 | A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormB... |
| CVE-2017-6158 | — | — | 1.1% | Apr 13, 2018 | In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling ... |
| CVE-2017-6156 | — | — | 0.9% | Apr 13, 2018 | When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tun... |
| CVE-2017-6155 | — | — | 1.3% | Apr 13, 2018 | On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may res... |
| CVE-2017-6148 | — | — | 1.3% | Apr 13, 2018 | Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.... |
| CVE-2017-6143 | — | — | 0.4% | Apr 13, 2018 | X509 certificate verification was not correctly implemented in the IP Intelligence Subscription and IP Intelligence feed... |
| CVE-2017-6910 | — | — | 2.0% | Apr 12, 2018 | The HTTP and WebSocket engine components in the server in Kaazing Gateway before 4.5.3 hotfix-1, Gateway - JMS Edition b... |
| CVE-2017-1790 | — | — | 0.6% | Apr 12, 2018 | IBM DOORS Next Generation (DNG/RRC) 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This... |
| CVE-2017-7534 | — | — | 0.6% | Apr 11, 2018 | OpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The flaw is due to lack of s... |
| CVE-2017-8154 | — | — | 0.4% | Apr 11, 2018 | The Themes App Honor 8 Lite Huawei mobile phones with software of versions before Prague-L31C576B172, versions before Pr... |
| CVE-2017-17308 | — | — | 2.0% | Apr 11, 2018 | SCCPX module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE... |
| CVE-2017-15327 | — | — | 0.5% | Apr 11, 2018 | S12700 V200R005C00, V200R006C00, V200R006C01, V200R007C00, V200R007C01, V200R007C20, V200R008C00, V200R008C06, V200R009C... |
| CVE-2017-8275 | — | — | 1.3% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 430, SD... |
| CVE-2017-8274 | — | — | 1.3% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MS... |
| CVE-2017-18146 | — | — | 1.0% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon W... |
| CVE-2017-18145 | — | — | 1.3% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD ... |
| CVE-2017-18144 | — | — | 1.3% | Apr 11, 2018 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now