2017 CVEs (page 40)
Page 40 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-1000427 | Medium | 6.1 | 2018-01-02 | marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser. |
CVE-2017-1000425 | Medium | 6.1 | 2018-01-02 | Cross-site scripting (XSS) vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allows remote attackers to inject arbitrary… |
CVE-2017-1000426 | Medium | 6.1 | 2018-01-02 | MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure. |
CVE-2017-1000431 | Medium | 6.1 | 2018-01-02 | eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is vulnerable to an XSS issue in the search module, resulting in a risk of attackers inject… |
CVE-2017-1000430 | Critical | 9.8 | 2018-01-02 | rust-base64 version <= 0.5.1 is vulnerable to a buffer overflow when calculating the size of a buffer to use when encoding base64 using the 'encode_config_buf'… |
CVE-2017-1000424 | Medium | 4.3 | 2018-01-02 | Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable to a URL Spoofing problem when opening PDFs in PDFium resulting loading arbitrary PDFs t… |
CVE-2017-1000423 | Critical | 9.8 | 2018-01-02 | b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resulting in unauthenti… |
CVE-2017-1000422 | High | 8.8 | 2018-01-02 | Gnome gdk-pixbuf 2.36.8 and older is vulnerable to several integer overflow in the gif_get_lzw function resulting in memory corruption and potential code execu… |
CVE-2017-1000421 | Critical | 9.8 | 2018-01-02 | Gifsicle gifview 1.89 and older is vulnerable to a use-after-free in the read_gif function resulting potential code execution |
CVE-2017-1000420 | High | 7.5 | 2018-01-02 | Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite |
CVE-2017-1000419 | High | 7.5 | 2018-01-02 | phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar function resulting allowing an attacker to perform port scanning, requesting internal content an… |
CVE-2017-1000458 | Critical | 9.8 | 2018-01-02 | Bro before Bro v2.5.2 is vulnerable to an out of bounds write in the ContentLine analyzer allowing remote attackers to cause a denial of service (crash) and po… |
CVE-2017-1000457 | Medium | 4.8 | 2018-01-02 | Cross-site scripting (XSS) vulnerability in Help.aspx in mojoPortal version 2.5.0.0 allows remote attackers to inject arbitrary web script or HTML via the help… |
CVE-2017-1000456 | High | 8.8 | 2018-01-02 | freedesktop.org libpoppler 0.60.1 fails to validate boundaries in TextPool::addWord, leading to overflow in subsequent calculations. |
CVE-2017-1000418 | High | 7.8 | 2018-01-02 | The WildMidi_Open function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote attackers to cause a denial of service (heap-based b… |
CVE-2017-1557 | Medium | 4.3 | 2018-01-02 | IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user with authority to send a specially crafted request that could cause a channel process to cease p… |
CVE-2017-1000455 | Medium | 5.5 | 2018-01-02 | GuixSD prior to Git commit 5e66574a128937e7f2fcf146d146225703ccfd5d used POSIX hard links incorrectly, leading the creation of setuid executables in "the store… |
CVE-2017-1000454 | High | 7.8 | 2018-01-02 | CMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core components, resulting in local file read before 2.2, and local file… |
CVE-2017-1000453 | Critical | 9.8 | 2018-01-02 | CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution. |
CVE-2017-1000452 | High | 7.5 | 2018-01-02 | An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate arbitr… |
CVE-2017-1000451 | High | 7.8 | 2018-01-02 | fs-git is a file system like api for git repository. The fs-git version 1.0.1 module relies on child_process.exec, however, the buildCommand method used to con… |
CVE-2017-1000450 | High | 8.8 | 2018-01-02 | In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the ima… |
CVE-2017-1000448 | High | 7.5 | 2018-01-02 | Structured Data Linter versions 2.4.1 and older are vulnerable to a directory traversal attack in the URL input field resulting in the possibility of disclosin… |
CVE-2017-1000413 | Medium | 5.9 | 2018-01-02 | Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting… |
CVE-2017-1000412 | High | 7.5 | 2018-01-02 | Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromise… |
CVE-2017-17098 | Critical | 9.8 | 2018-01-02 | The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote attackers to inject arbitrary PHP code v… |
CVE-2017-17097 | Critical | 9.8 | 2018-01-02 | gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthenticated request, and th… |
CVE-2017-1000445 | Medium | 6.5 | 2018-01-02 | ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of service |
CVE-2017-1000444 | Critical | 9.8 | 2018-01-02 | Eleix Openhacker version 0.1.47 is vulnerable to an SQL injection in the account registration and login component resulting in information disclosure and remot… |
CVE-2017-1000443 | Medium | 6.1 | 2018-01-02 | Eleix Openhacker version 0.1.47 is vulnerable to a XSS vulnerability in the bank transactions component resulting in arbitrary code execution in the browser. |
CVE-2017-1000442 | Medium | 5.4 | 2018-01-02 | Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace |
CVE-2017-9966 | High | 7.1 | 2018-01-02 | A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthor… |
CVE-2017-9965 | Medium | 5.8 | 2018-01-02 | An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory travers… |
CVE-2017-9964 | Medium | 6.9 | 2018-01-02 | A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized… |
CVE-2017-18015 | Medium | 6.1 | 2018-01-02 | The ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter. |
CVE-2017-18013 | Medium | 6.5 | 2018-01-01 | In LibTIFF 4.0.9, there is a Null-Pointer Dereference in the tif_print.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash. |
CVE-2017-18012 | Medium | 6.1 | 2018-01-01 | The Z-URL Preview plugin 1.6.1 for WordPress has XSS via the class.zlinkpreview.php url parameter. |
CVE-2017-18011 | Medium | 6.1 | 2018-01-01 | The MyCBGenie Affiliate Ads for Clickbank Products plugin through 1.6 for WordPress has XSS via the text_ads_ajax.php border_color parameter. |
CVE-2017-18010 | Medium | 6.1 | 2018-01-01 | The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-form_egoi.php url param… |
CVE-2017-18009 | High | 7.5 | 2018-01-01 | In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp. |
CVE-2017-18008 | Medium | 6.5 | 2018-01-01 | In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c. |
CVE-2017-18006 | Medium | 6.1 | 2018-01-01 | netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447. |
CVE-2017-18005 | Medium | 5.5 | 2017-12-31 | Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file. |
CVE-2017-18004 | Medium | 5.4 | 2017-12-31 | Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint. |
CVE-2017-18001 | Critical | 9.8 | 2017-12-31 | Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and co… |
CVE-2017-17704 | High | 7.4 | 2017-12-31 | A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction with the IP-ACM Ethernet Door Module… |
CVE-2017-17089 | Medium | 4.8 | 2017-12-30 | custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functio… |
CVE-2017-14855 | High | 8.6 | 2017-12-30 | Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that does not exist, as dem… |
CVE-2017-17997 | High | 7.5 | 2017-12-30 | In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv… |
CVE-2017-12813 | Medium | 6.1 | 2017-12-30 | PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section. |
CVE-2017-12812 | Medium | 6.1 | 2017-12-30 | PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab. |
CVE-2017-12811 | Medium | 6.1 | 2017-12-30 | PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item. |
CVE-2017-12810 | Medium | 6.1 | 2017-12-30 | PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel. |
CVE-2017-17995 | Medium | 5.4 | 2017-12-30 | Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request. |
CVE-2017-17994 | Medium | 5.4 | 2017-12-30 | Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria request. |
CVE-2017-17993 | Medium | 5.4 | 2017-12-30 | Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition_deduction request. |
CVE-2017-17992 | Critical | 9.8 | 2017-12-30 | Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name parameter in a down… |
CVE-2017-17991 | Medium | 5.4 | 2017-12-30 | Biometric Shift Employee Management System has XSS via the expense_name parameter in an index.php?user=expenses request. |
CVE-2017-17990 | High | 8.8 | 2017-12-30 | Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action. |
CVE-2017-17989 | Medium | 5.4 | 2017-12-30 | Biometric Shift Employee Management System has XSS via the index.php holiday_name parameter in an edit_holiday action. |
CVE-2017-17988 | Medium | 4.8 | 2017-12-30 | PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_add.php event_title parameter. |
CVE-2017-17987 | High | 7.2 | 2017-12-30 | PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails_edit.php. |
CVE-2017-17986 | Medium | 4.8 | 2017-12-30 | PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter. |
CVE-2017-17985 | Medium | 4.8 | 2017-12-30 | PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter. |
CVE-2017-17984 | Medium | 4.8 | 2017-12-30 | PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter. |
CVE-2017-17983 | High | 8.8 | 2017-12-30 | PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem_id parameter. |
CVE-2017-17982 | Medium | 6.8 | 2017-12-30 | PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php. |
CVE-2017-17981 | Medium | 5.4 | 2017-12-30 | PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter. |
CVE-2017-17975 | Medium | 5.5 | 2017-12-30 | Use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel through 4.14.10 allows attackers to cause a denial of se… |
CVE-2017-17901 | High | 7.5 | 2017-12-29 | ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service (CPU consumption) via a flood of IP packets with a TTL of 1. |
CVE-2017-17974 | Critical | 9.8 | 2017-12-29 | BA SYSTEMS BAS Web on BAS920 devices (with Firmware 01.01.00*, HTTPserv 00002, and Script 02.*) and ISC2000 devices allows remote attackers to obtain sensitive… |
CVE-2017-17973 | High | 8.8 | 2017-12-29 | In LibTIFF 4.0.8, there is a heap-based use-after-free in the t2p_writeproc function in tiff2pdf.c. NOTE: there is a third-party report of inability to reprodu… |
CVE-2017-17910 | Medium | 6.5 | 2017-12-29 | On Hoermann BiSecur devices before 2018, a vulnerability can be exploited by recording a single radio transmission. An attacker can intercept an arbitrary radi… |
CVE-2017-17971 | Medium | 6.1 | 2017-12-29 | The test_sql_and_script_inject function in htdocs/main.inc.php in Dolibarr ERP/CRM 6.0.4 blocks some event attributes but neither onclick nor onscroll, which a… |
CVE-2017-17933 | Medium | 6.1 | 2017-12-29 | cgi/surgeftpmgr.cgi (aka the Web Manager interface on TCP port 7021 or 9021) in NetWin SurgeFTP version 23f2 has XSS via the classid, domainid, or username par… |
CVE-2017-17760 | Medium | 6.5 | 2017-12-29 | OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used. |
CVE-2017-17920 | High | 8.1 | 2017-12-29 | SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name'… |
CVE-2017-17919 | High | 8.1 | 2017-12-29 | SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc… |
CVE-2017-17917 | High | 8.1 | 2017-12-29 | SQL injection vulnerability in the 'where' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id' par… |
CVE-2017-17916 | High | 8.1 | 2017-12-29 | SQL injection vulnerability in the 'find_by' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name'… |
CVE-2017-17968 | Critical | 9.8 | 2017-12-29 | A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary cod… |
CVE-2017-16876 | Medium | 6.1 | 2017-12-29 | Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script o… |
CVE-2017-17967 | Medium | 5.5 | 2017-12-28 | pptreader.dll in Kingsoft WPS Office 10.1.0.6930 allows remote attackers to cause a denial of service via a crafted PPT file, aka CNVD-2017-35482. |
CVE-2017-17960 | High | 8.8 | 2017-12-28 | PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php. |
CVE-2017-17959 | Critical | 9.8 | 2017-12-28 | PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter. |
CVE-2017-17958 | Medium | 6.1 | 2017-12-28 | PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter. |
CVE-2017-17957 | Critical | 9.8 | 2017-12-28 | PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter. |
CVE-2017-17956 | Medium | 6.1 | 2017-12-28 | PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter. |
CVE-2017-17955 | Medium | 6.1 | 2017-12-28 | PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter. |
CVE-2017-17954 | Medium | 6.1 | 2017-12-28 | PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter. |
CVE-2017-17953 | Medium | 6.1 | 2017-12-28 | PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter. |
CVE-2017-17952 | High | 8.6 | 2017-12-28 | PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed… |
CVE-2017-17951 | Critical | 9.8 | 2017-12-28 | PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter. |
CVE-2017-17950 | High | 8.8 | 2017-12-28 | Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter. |
CVE-2017-17949 | Medium | 6.1 | 2017-12-28 | Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter. |
CVE-2017-17948 | Medium | 6.1 | 2017-12-28 | Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request. |
CVE-2017-15667 | High | 7.5 | 2017-12-28 | In Flexense SysGauge Server 3.6.18, the Control Protocol suffers from a denial of service. The attack vector is a crafted SERVER_GET_INFO packet sent to contro… |
CVE-2017-5641 | Critical | 9.8 | 2017-12-28 | Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by default. During the… |
CVE-2017-15892 | Medium | 5.4 | 2017-12-28 | Multiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbi… |
CVE-2017-15886 | Medium | 6.5 | 2017-12-28 | Server-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before 2.0.0-1124 allows remote authenticated users to download arbitrary loc… |