2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12148 | HIGH | 8.4 | 1.7% | Jul 27, 2018 | A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. If a Tower project (SCM repo... |
| CVE-2017-7497 | MEDIUM | 4.1 | 1.0% | Jul 27, 2018 | The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. An attacker... |
| CVE-2017-2670 | HIGH | 7.5 | 3.7% | Jul 27, 2018 | It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on ev... |
| CVE-2017-2595 | HIGH | 7.7 | 3.1% | Jul 27, 2018 | It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to auth... |
| CVE-2017-15125 | MEDIUM | 6.5 | 0.9% | Jul 27, 2018 | A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not prope... |
| CVE-2017-15120 | HIGH | 7.5 | 51.8% | Jul 27, 2018 | An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL poi... |
| CVE-2017-12195 | MEDIUM | 6.5 | 1.4% | Jul 27, 2018 | A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. An attacker with knowled... |
| CVE-2017-12165 | LOW | 2.6 | 1.9% | Jul 27, 2018 | It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces ... |
| CVE-2017-7519 | LOW | 2.3 | 0.5% | Jul 27, 2018 | In Ceph, a format string flaw was found in the way libradosstriper parses input from user. A user could crash an applica... |
| CVE-2017-2666 | MEDIUM | 6.5 | 2.7% | Jul 27, 2018 | It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could b... |
| CVE-2017-7470 | MEDIUM | 6.5 | 2.1% | Jul 27, 2018 | It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks du... |
| CVE-2017-2639 | MEDIUM | 6.5 | 1.1% | Jul 27, 2018 | It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when us... |
| CVE-2017-2622 | MEDIUM | 5.9 | 0.4% | Jul 27, 2018 | An accessibility flaw was found in the OpenStack Workflow (mistral) service where a service log directory was improperly... |
| CVE-2017-7464 | HIGH | 8.7 | 1.9% | Jul 27, 2018 | It was found that the JAXP implementation used in JBoss EAP 7.0 for SAX and DOM parsing is vulnerable to certain XXE fla... |
| CVE-2017-12151 | HIGH | 7.4 | 4.6% | Jul 27, 2018 | A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max ... |
| CVE-2017-6177 | — | — | — | Jul 26, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-6176 | — | — | — | Jul 26, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-6175 | — | — | — | Jul 26, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-6174 | — | — | — | Jul 26, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-6173 | — | — | — | Jul 26, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-6172 | — | — | — | Jul 26, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-6171 | — | — | — | Jul 26, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-6170 | — | — | — | Jul 26, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-6149 | — | — | — | Jul 26, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-6146 | — | — | — | Jul 26, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA d... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now