2017 CVEs (page 4)

Page 4 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.

All CVEs published in 2017 — newest first (page 4 of 148)
CVESeverityScorePublishedSummary
CVE-2017-20093Medium4.32022-06-24A vulnerability, which was classified as problematic, was found in Download Manager Plugin 2.8.99. Affected is an unknown function. The manipulation leads to c…
CVE-2017-20092Low3.52022-06-24A vulnerability classified as problematic was found in Google Analytics Dashboard Plugin 2.1.1. Affected by this vulnerability is an unknown functionality. The…
CVE-2017-20091Medium4.32022-06-23A vulnerability was found in File Manager Plugin 3.0.1. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-si…
CVE-2017-20090Medium4.32022-06-23A vulnerability was found in Global Content Blocks Plugin 2.1.5. It has been declared as problematic. This vulnerability affects unknown code. The manipulation…
CVE-2017-20089Low3.52022-06-23A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation lead…
CVE-2017-20088Medium4.32022-06-23A vulnerability classified as problematic has been found in Atahualpa Theme. Affected is an unknown function. The manipulation leads to cross-site request forg…
CVE-2017-20087Low3.52022-06-23A vulnerability, which was classified as problematic, has been found in Alpine PhotoTile for Instagram Plugin 1.2.7.7. Affected by this issue is some unknown f…
CVE-2017-20086Medium6.32022-06-23A vulnerability, which was classified as critical, was found in VaultPress Plugin 1.8.4. This affects an unknown part. The manipulation leads to code injection…
CVE-2017-20085Low3.52022-06-23A vulnerability has been found in Atahualpa Theme and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation l…
CVE-2017-20084Medium5.32022-06-22A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by this vulnerability is an unknown funct…
CVE-2017-20083Medium5.32022-06-22A vulnerability, which was classified as critical, was found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. Affected is an unknown function of the componen…
CVE-2017-20082Medium5.52022-06-22A vulnerability, which was classified as problematic, has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. This issue affects some unknown process…
CVE-2017-20081Medium6.32022-06-21A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. This affects an unknown part of the file /admin/reports.php. The mani…
CVE-2017-20080Medium6.32022-06-21A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. Affected by this issue is some unknown functionality of the file…
CVE-2017-20079Medium6.32022-06-21A vulnerability classified as critical was found in Hindu Matrimonial Script. Affected by this vulnerability is an unknown functionality of the file /admin/pho…
CVE-2017-20078Medium6.32022-06-21A vulnerability classified as critical has been found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/featured.php. The manipul…
CVE-2017-20077Medium6.32022-06-21A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. This issue affects some unknown processing of the file /admin/success_sto…
CVE-2017-20076Medium6.32022-06-21A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. This vulnerability affects unknown code of the file /admin/searchview…
CVE-2017-20075Medium6.32022-06-21A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This affects an unknown part of the file /admin/payment.php. The man…
CVE-2017-20074Medium6.32022-06-21A vulnerability was found in Hindu Matrimonial Script and classified as critical. Affected by this issue is some unknown functionality of the file /admin/newsl…
CVE-2017-20073Medium6.32022-06-21A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is an unknown functionality of the file /…
CVE-2017-20072Medium6.32022-06-21A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/generalsettings.ph…
CVE-2017-20071Medium6.32022-06-21A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. This issue affects some unknown processing of the file /admin/re…
CVE-2017-20070Medium6.32022-06-21A vulnerability classified as critical was found in Hindu Matrimonial Script. This vulnerability affects unknown code of the file /admin/communitymanagement.ph…
CVE-2017-20069Medium6.32022-06-21A vulnerability classified as critical has been found in Hindu Matrimonial Script. This affects an unknown part of the file /admin/countrymanagement.php. The m…
CVE-2017-20068Medium6.32022-06-21A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/u…
CVE-2017-20067High7.32022-06-21A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file…
CVE-2017-20066Medium5.32022-06-20A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to imprope…
CVE-2017-20065Medium4.32022-06-20A vulnerability was found in Supsystic Popup Plugin 1.7.6 and classified as problematic. This issue affects some unknown processing. The manipulation leads to…
CVE-2017-20064Medium6.32022-06-20A vulnerability was found in Elefant CMS 1.3.12-RC. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /d…
CVE-2017-20063Medium6.32022-06-20A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function of the file /filemanager/upload/drop of…
CVE-2017-20062Medium5.02022-06-20A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-s…
CVE-2017-20061Medium4.32022-06-20A vulnerability has been found in Elefant CMS 1.3.12-RC and classified as problematic. This vulnerability affects unknown code of the file /admin/extended. The…
CVE-2017-20060Low3.52022-06-20A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The…
CVE-2017-20059Low3.52022-06-20A vulnerability, which was classified as problematic, has been found in Elefant CMS 1.3.12-RC. Affected by this issue is some unknown functionality of the comp…
CVE-2017-20058Medium4.32022-06-20A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Versi…
CVE-2017-20057Medium4.32022-06-20A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC. Affected is an unknown function. The manipulation of the argument username l…
CVE-2017-20056Low3.52022-06-16A vulnerability was found in weblizar User Login Log Plugin 2.2.1. It has been classified as problematic. Affected is an unknown function. The manipulation lea…
CVE-2017-20055Low3.52022-06-16A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basi…
CVE-2017-20054Low3.52022-06-16A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been rated as problematic. Affected by this issue is some unknown functionality. Th…
CVE-2017-20053Medium4.32022-06-16A vulnerability was found in XYZScripts Contact Form Manager Plugin. It has been declared as problematic. Affected by this vulnerability is an unknown function…
CVE-2017-20052Medium5.02022-06-16A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads…
CVE-2017-20051Medium6.32022-06-16A vulnerability was found in InnoSetup Installer. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipula…
CVE-2017-20049Critical9.82022-06-15A vulnerability, was found in legacy Axis devices such as P3225 and M3005. This affects an unknown part of the component CGI Script. The manipulation leads to…
CVE-2017-20045High7.32022-06-13A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to c…
CVE-2017-20044Medium4.32022-06-13A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to basic c…
CVE-2017-20043Medium4.32022-06-13A vulnerability was found in Navetti PricePoint 4.6.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation l…
CVE-2017-20042Medium6.32022-06-13A vulnerability has been found in Navetti PricePoint 4.6.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipu…
CVE-2017-20041Medium5.42022-06-13A vulnerability was found in Ucweb UC Browser 11.2.5.932. It has been classified as critical. Affected is an unknown function of the component HTML Handler. Th…
CVE-2017-20040Medium5.92022-06-11A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been declared as problematic. This vulnerability affects unknown code of the component…
CVE-2017-20039Critical9.82022-06-11A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects an unknown part. The manipulation leads…
CVE-2017-20038Medium6.32022-06-11A vulnerability was found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this issue is some unknown functionality of the file ca…
CVE-2017-20037Medium6.32022-06-11A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this vulnerability is an unknown functionality. Th…
CVE-2017-20036Low3.52022-06-10A vulnerability, which was classified as problematic, was found in PHPList 3.2.6. Affected is an unknown function of the file /lists/admin/ of the component Bo…
CVE-2017-20035Low3.52022-06-10A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown processing of the file /lists/admin/ of…
CVE-2017-20034Low3.52022-06-10A vulnerability classified as problematic was found in PHPList 3.2.6. This vulnerability affects unknown code of the file /lists/admin/ of the component List N…
CVE-2017-20033Medium4.32022-06-10A vulnerability classified as problematic has been found in PHPList 3.2.6. This affects an unknown part of the file /lists/admin/. The manipulation of the argu…
CVE-2017-20032Medium6.32022-06-10A vulnerability was found in PHPList 3.2.6. It has been rated as critical. Affected by this issue is some unknown functionality of the component Subscription…
CVE-2017-20031Low2.72022-06-10A vulnerability was found in PHPList 3.2.6. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation o…
CVE-2017-20030Medium4.72022-06-10A vulnerability was found in PHPList 3.2.6. It has been classified as critical. Affected is an unknown function of the file /lists/admin/ of the component Send…
CVE-2017-20029High7.32022-06-10A vulnerability was found in PHPList 3.2.6 and classified as critical. This issue affects some unknown processing of the file /lists/index.php of the component…
CVE-2017-20028Medium5.62022-06-09A vulnerability was found in HumHub 0.20.1/1.0.0-beta.3. It has been classified as critical. This affects an unknown part. The manipulation leads to privilege…
CVE-2017-20027Medium4.32022-06-09A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to…
CVE-2017-20026Medium4.32022-06-09A vulnerability has been found in HumHub up to 1.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulatio…
CVE-2017-20025High7.32022-06-09A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by this vulnerability is an unknown functionality o…
CVE-2017-20024Medium5.32022-06-09A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been classified as problematic. Affected is an unknown function. The manipulation leads…
CVE-2017-20023Medium6.32022-06-09A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as critical. This issue affects some unknown processing of the component Network…
CVE-2017-20022High7.52022-06-09A vulnerability has been found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as problematic. This vulnerability affects unknown code. The manipulation l…
CVE-2017-20021Medium6.52022-06-09A vulnerability, which was classified as critical, was found in Solare Solar-Log 2.8.4-56/3.5.2-85. This affects an unknown part of the component File Upload…
CVE-2017-20020Medium5.32022-06-09A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this issue is some unknown functionalit…
CVE-2017-20019Medium4.32022-06-09A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerability is an unknown functionality of the co…
CVE-2017-20018Medium6.32022-06-09A vulnerability was found in XAMPP 7.1.1-0-VC14. It has been classified as problematic. Affected is an unknown function of the component Installer. The manipul…
CVE-2017-20017Medium6.32022-06-08A vulnerability, which was classified as critical, has been found in The Next Generation of Genealogy Sitebuilding up to 11.1.0. This issue affects some unknow…
CVE-2017-20016Medium4.32022-03-28A vulnerability has been found in WEKA INTEREST Security Scanner up to 1.8 and classified as problematic. This vulnerability affects unknown code of the compon…
CVE-2017-20015Low2.82022-03-28A vulnerability, which was classified as problematic, was found in WEKA INTEREST Security Scanner up to 1.8. This affects an unknown part of the component LAN…
CVE-2017-20014Low2.82022-03-28A vulnerability, which was classified as problematic, has been found in WEKA INTEREST Security Scanner up to 1.8. Affected by this issue is some unknown functi…
CVE-2017-20013Low2.82022-03-28A vulnerability classified as problematic was found in WEKA INTEREST Security Scanner up to 1.8. Affected by this vulnerability is the Stresstest Configuration…
CVE-2017-20012Low2.82022-03-28A vulnerability classified as problematic has been found in WEKA INTEREST Security Scanner up to 1.8. Affected is Stresstest Scheme Handler which leads to a de…
CVE-2017-20011Low2.82022-03-28A vulnerability was found in WEKA INTEREST Security Scanner 1.8. It has been rated as problematic. This issue affects some unknown processing of the component…
CVE-2017-0371High7.52022-02-18MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses of Wiki visitors v…
CVE-2017-2488High7.52021-12-23A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implementing the Secure Remote Password authenti…
CVE-2017-2375Low3.32021-12-23An issue existed in preventing the uploading of CallKit call history to iCloud. This issue was addressed through improved logic. This issue is fixed in iOS 10…
CVE-2017-13910Medium5.52021-12-23An access issue was addressed with additional sandbox restrictions on applications. This issue is fixed in macOS High Sierra 10.13. An application may be able…
CVE-2017-13909Medium5.52021-12-23An issue existed in the storage of sensitive tokens. This issue was addressed by placing the tokens in Keychain. This issue is fixed in macOS High Sierra 10.13…
CVE-2017-13908High7.82021-12-23An issue in handling file permissions was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra…
CVE-2017-13907Medium6.82021-12-23A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and S…
CVE-2017-13906High7.82021-12-23A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and S…
CVE-2017-13905High8.12021-12-23A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra 10.13.2, Security Update 2017-002 Sier…
CVE-2017-13892High7.52021-12-23An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixed in macOS High Sie…
CVE-2017-13880High7.82021-12-23A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 11.2, watchOS 4.2. An application may be able to execute arbi…
CVE-2017-13835High7.82021-12-23A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13. An application may be able to execute ar…
CVE-2017-20008Medium6.12021-11-29The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in the Points Log admin dashboard, leading t…
CVE-2017-5123High8.82021-11-02Insufficient data validation in waitid allowed an user to escape sandboxes on Linux.
CVE-2017-20007Medium5.32021-10-25Ingeteam INGEPAC DA AU AUC_1.13.0.28 (and before) web application allows access to a certain path that contains sensitive information that could be used by an…
CVE-2017-16632High7.52021-08-11In SapphireIMS 4097_1, the password in the database is stored in Base64 format.
CVE-2017-16631Medium6.52021-08-11In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference (IDOR) in the "Ac…
CVE-2017-16630High8.82021-08-11In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object…
CVE-2017-16629High7.52021-08-11In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login…
CVE-2017-18113High8.82021-08-02The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attackers who can trick a system administrator…
CVE-2017-20006High7.82021-07-01UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile).