Vulnerabilities published in 2017
14,807 vulnerabilities were published in 2017: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 136 of 149.
- CVE-2017-1002024 Missing authorization in Kind Editor
- CVE-2017-1002023 SQL injection in Easy Team Manager
- CVE-2017-1002022 SQL injection in surveys
- CVE-2017-1002021 SQL injection in surveys
- CVE-2017-1002020 SQL injection in surveys
- CVE-2017-1002019 SQL injection in eventr
- CVE-2017-1002018 SQL injection in eventr
- CVE-2017-1002017 Cross-site scripting in gift-certificate-creator
- CVE-2017-1002016 File upload in flickr-picture-backup
- CVE-2017-1002015 SQL injection in image-gallery-with-slideshow
- CVE-2017-1002014 SQL injection in image-gallery-with-slideshow
- CVE-2017-1002013 SQL injection in image-gallery-with-slideshow
- CVE-2017-1002012 SQL injection in image-gallery-with-slideshow
- CVE-2017-1002011 Cross-site scripting in image-gallery-with-slideshow
- CVE-2017-1002010 SQL injection in Membership Simplified
- CVE-2017-1002009 SQL injection in ontraport:membership simplified
- CVE-2017-1002008 Missing authorization in membership-simplified-for-oap-members-only
- CVE-2017-1002007 Missing authorization in DTracker
- CVE-2017-1002006 Missing authorization in DTracker
- CVE-2017-1002005 SQL injection in DTracker
- CVE-2017-1002004 SQL injection in DTracker
- CVE-2017-1002003 Supply chain in wp2android-turn-wp-site-into-android-app
- CVE-2017-1002002 Supply chain in webapp-builder
- CVE-2017-1002001 Supply chain in mobile-app-builder-by-wappress
- CVE-2017-1002000 File upload in mobile-friendly-app-builder-by-easytouch
- CVE-2017-10020 Other in PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10019 Other in PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10018 Other in PeopleSoft Enterprise SCM Strategic Sourcing
- CVE-2017-10017 Cross-site scripting in PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10016 Other in Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2017-10015 Other in PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10014 Other in Hospitality Hotel Mobile
- CVE-2017-10013 Other in Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2017-10012 Other in FLEXCUBE Private Banking
- CVE-2017-10011 Information disclosure in FLEXCUBE Private Banking
- CVE-2017-1001004 Arbitrary JavaScript Execution in typed-function
- CVE-2017-1001003 Arbitrary Code Execution in mathjs
- CVE-2017-1001002 Arbitrary Code Execution in mathjs
- CVE-2017-1001001 Cross-site scripting in PluXml
- CVE-2017-1001000 Missing authorization in wordpress:wordpress
- CVE-2017-10010 Other in FLEXCUBE Private Banking
- CVE-2017-10009 Other in FLEXCUBE Private Banking
- CVE-2017-10008 Information disclosure in FLEXCUBE Private Banking
- CVE-2017-10007 Information disclosure in FLEXCUBE Private Banking
- CVE-2017-1000600 Code injection in wordpress:wordpress
- CVE-2017-10006 Other in FLEXCUBE Private Banking
- CVE-2017-1000510 Cross site scripting in Croogo
- CVE-2017-1000509 Dolibarr ERP and CRM contain XSS Vulnerability
- CVE-2017-1000508 Cross-site scripting in invoiceplane:invoiceplane
- CVE-2017-1000507 Canvs Canvas XSS Vulnerability
- CVE-2017-1000506 Mautic Cross Site Scripting (XSS) vulnerability
- CVE-2017-1000505 Exposure of Sensitive Information to an Unauthorized Actor Jenkins Script Security Plugin
- CVE-2017-1000504 Cross-Site Request Forgery in Jenkins
- CVE-2017-1000503 Race Condition in Jenkins
- CVE-2017-1000502 Arbitrary shell command execution in Jenkins EC2 Plugin
- CVE-2017-1000501 Path traversal in awstats:awstats
- CVE-2017-10005 Cross-site scripting in FLEXCUBE Private Banking
- CVE-2017-1000499 phpMyAdmin CSRF Vulnerability
- CVE-2017-1000498 Android SVG vulnerable to XML External Entity (XXE)
- CVE-2017-1000497 XML external entity in pepperminty-wiki project:pepperminty-wiki
- CVE-2017-1000496 XML external entity in commsy:commsy
- CVE-2017-1000495 QuickApps CMS Cross-site Scripting
- CVE-2017-1000494 Memory corruption in miniupnp project:miniupnpd
- CVE-2017-1000493 SQL injection in rocket.chat:rocket.chat
- CVE-2017-1000492 Cross-site scripting in leanote:desktop
- CVE-2017-1000491 Shiba vulnerable to XSS leading to code execution
- CVE-2017-1000490 Mautic users able to download any files from server using filemanager
- CVE-2017-1000489 Disabled users able to log in with third party SSO plugin
- CVE-2017-1000488 Inline JS XSS vulnerability in Mautic
- CVE-2017-1000487 OS Command Injection in Plexus-utils
- CVE-2017-1000486 Primetek Primefaces Remote Code Execution
- CVE-2017-1000485 Misconfiguration in nylas mail lives project:nylas mail
- CVE-2017-1000484 Plone Open Redirect
- CVE-2017-1000483 Plone Unauthorized Access Vulnerability
- CVE-2017-1000482 Products.CMFPlone XSS in profile home_page property
- CVE-2017-1000481 Products.CMFPlone Open Redirect Vulnerability
- CVE-2017-1000480 Smarty PHP code injection
- CVE-2017-1000479 Cross-site request forgery in netgate:pfsense
- CVE-2017-1000478 Cross-site scripting in elabftw:elabftw
- CVE-2017-1000477 XXE Vulnerability in XMLBundle 0.1.7
- CVE-2017-1000476 Denial of service in canonical:ubuntu linux
- CVE-2017-1000475 Privilege escalation in freesshd:freesshd
- CVE-2017-1000474 SQL injection in vehicle sales management system project:vehicle sales management system
- CVE-2017-1000473 Command injection in linux-dash project:linux-dash
- CVE-2017-1000472 Path traversal in debian:debian linux
- CVE-2017-1000471 Null dereference in embedthis:goahead
- CVE-2017-1000470 Integer overflow in embedthis:goahead web server
- CVE-2017-1000469 Cobbler vulnerable to arbitrary code execution
- CVE-2017-1000467 Stored XSS in LavaLite 5.2.4
- CVE-2017-1000466 Cross-site scripting in invoiceninja:invoice ninja
- CVE-2017-1000465 Cross-site scripting in sulu:sulu-standard
- CVE-2017-1000463 Cross-site scripting in leafpub:leafpub
- CVE-2017-1000462 Cross-site scripting in bookstackapp:bookstack
- CVE-2017-1000461 Security feature bypass in brave:browser
- CVE-2017-1000460 Null dereference in ffmpeg:ffmpeg
- CVE-2017-1000459 Cross-site scripting in leanote:leanote
- CVE-2017-1000458 Memory corruption in bro:bro
- CVE-2017-1000457 Cross-site scripting in mojoportal:mojoportal
- CVE-2017-1000456 Memory corruption in debian:debian linux
- CVE-2017-1000455 Privilege escalation in gnu:guixsd