Vulnerabilities published in 2017
14,807 vulnerabilities were published in 2017: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 139 of 149.
- CVE-2017-1000134 Missing authorization in mahara:mahara
- CVE-2017-1000133 Information disclosure in mahara:mahara
- CVE-2017-1000132 Cross-site scripting in mahara:mahara
- CVE-2017-1000131 Auth bypass in mahara:mahara
- CVE-2017-1000129 SQL injection in s9y:serendipity
- CVE-2017-1000128 Memory corruption in exiv2:exiv2
- CVE-2017-1000127 Memory corruption in exiv2:exiv2
- CVE-2017-1000126 Memory corruption in exiv2:exiv2
- CVE-2017-1000125 Misconfiguration in codiad:codiad
- CVE-2017-1000122 Denial of service in webkitgtk:webkitgtk\+
- CVE-2017-1000121 Integer overflow in webkitgtk:webkitgtk\+
- CVE-2017-1000120 SQL injection in frappe:frappe
- CVE-2017-1000119 October CMS PHP Code Execution
- CVE-2017-1000118 Improper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core
- CVE-2017-1000117 Code injection in git-scm:git
- CVE-2017-1000116 Mercurial is vulnerable to shell injection attack
- CVE-2017-1000115 Mercurial missing symlink check
- CVE-2017-1000114 Exposure of Sensitive Information in Jenkins Datadog plugin
- CVE-2017-1000113 Jenkins Deploy to container Plugin stored plain text passwords in job configuration
- CVE-2017-1000112 Race condition in linux:linux kernel
- CVE-2017-1000111 Race condition in debian:debian linux
- CVE-2017-1000110 Improper Authentication in Jenkins Blue Ocean Plugin
- CVE-2017-1000109 Persistent XSS vulnerability in Jenkins OWASP Dependency-Check Plugin
- CVE-2017-1000108 Jenkins Pipeline: Input Step Plugin
- CVE-2017-1000107 Sandbox bypass in Jenkins Script Security Plugin sandbox bypass
- CVE-2017-1000106 Improper Authentication in Jenkins Blue Ocean Plugin
- CVE-2017-1000105 Missing Authorization in Jenkins Blue Ocean Plugin
- CVE-2017-1000104 Improper Privilege Management in Jenkins Config File Provider Plugin
- CVE-2017-1000103 Persistent XSS vulnerability in Jenkins DRY Plugin
- CVE-2017-1000102 Persistent XSS vulnerability in Static Analysis Utilities
- CVE-2017-1000101 Memory corruption in haxx:curl
- CVE-2017-1000100 Information disclosure in haxx:libcurl
- CVE-2017-10001 Other in Hospitality Simphony First Edition
- CVE-2017-1000099 Information disclosure in haxx:libcurl
- CVE-2017-1000098 Denial of service in golang:go
- CVE-2017-1000097 Security feature bypass in golang:go
- CVE-2017-1000096 Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline
- CVE-2017-1000095 Unsafe methods in the default list of approved signatures in Jenkins Script Security Plugin
- CVE-2017-1000094 Jenkins Docker Commons Plugin allows any user with Overall/Read permission to get list of valid credentials IDs
- CVE-2017-1000093 Jenkins Poll SCM Plugin vulnerable to Cross-Site Request Forgery
- CVE-2017-1000092 Cross-Site Request Forgery in Jenkins Git Plugin
- CVE-2017-1000091 Jenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request Forgery
- CVE-2017-1000090 CSRF vulnerability in Jenkins Role-based Authorization Strategy Plugin configuration
- CVE-2017-1000089 Jenkins Build Step Plugin fails to check Item/Build permission
- CVE-2017-1000088 Persisted XSS Vulnerability in Jenkins Sidebar Link Plugin
- CVE-2017-1000087 Jenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDs
- CVE-2017-1000086 Missing permission checks in Jenkins Periodic Backup Plugin allow every user to change settings
- CVE-2017-1000085 Jenkins Subversion Plugin Cross-Site Request Forgery vulnerability
- CVE-2017-1000084 Parameterized Trigger Plugin fails to check Item/Build permission
- CVE-2017-1000083 Command injection in debian:debian linux
- CVE-2017-1000082 Privilege escalation in systemd project:systemd
- CVE-2017-1000081 File upload in onosproject:onos
- CVE-2017-1000080 Auth bypass in onosproject:onos
- CVE-2017-1000079 Denial of service in onosproject:onos
- CVE-2017-1000078 Cross-site scripting in onosproject:onos
- CVE-2017-1000075 Memory corruption in creolabs:gravity
- CVE-2017-1000074 Memory corruption in creolabs:gravity
- CVE-2017-1000073 Memory corruption in creolabs:gravity
- CVE-2017-1000072 Memory corruption in creolabs:gravity
- CVE-2017-1000071 Auth bypass in apereo:phpcas
- CVE-2017-1000070 Open Redirect in oauth2_proxy
- CVE-2017-1000069 Cross-site Request Forgery (CSRF)
- CVE-2017-1000068 Auth bypass in betterment:testtrack
- CVE-2017-1000067 MODX Revolution blind SQL injection
- CVE-2017-1000066 Information disclosure in keepass:keepass
- CVE-2017-1000065 Cross-site scripting in openmediavault:openmediavault
- CVE-2017-1000064 Denial of service in kitto project:kitto
- CVE-2017-1000063 Cross-site scripting in kitto project:kitto
- CVE-2017-1000062 Path traversal in kitto project:kitto
- CVE-2017-1000061 XML external entity in xmlsec project:xmlsec
- CVE-2017-1000060 SQL injection in eyesofnetwork:eyesofnetwork
- CVE-2017-1000059 Cross-site scripting in livehelperchat:live helper chat
- CVE-2017-1000058 Cross-site scripting in chevereto:chevereto
- CVE-2017-1000056 Kubernetes Privilege Escalation
- CVE-2017-1000054 Cross-site scripting in rocketchat:rocket.chat
- CVE-2017-1000053 Arbitrary Code Execution in Cookie Serialization
- CVE-2017-1000052 Null Byte Injection in Plug.Static
- CVE-2017-1000051 Cross-site scripting in xwiki:cryptpad
- CVE-2017-1000050 Null dereference in canonical:ubuntu linux
- CVE-2017-1000048 Prototype Pollution Protection Bypass in qs
- CVE-2017-1000047 Path traversal in rbenv project:rbenv
- CVE-2017-1000046 Sensitive Cookie Without HttpOnly and Secure Flag
- CVE-2017-1000044 Memory corruption in gnome:gtk-vnc
- CVE-2017-1000043 Content Injection via TileJSON Name in mapbox.js
- CVE-2017-1000042 Content Injection via TileJSON attribute in mapbox.js
- CVE-2017-1000039 Code injection in framasoft:framadate
- CVE-2017-1000038 Cross-site scripting in relevanssi:relevanssi
- CVE-2017-1000037 Command injection in rvm project:rvm
- CVE-2017-1000035 Cross-site scripting in tt-rss:tiny tiny rss
- CVE-2017-1000034 Akka Java Serialization vulnerability
- CVE-2017-1000033 Cross-site scripting in vospari forms project:vospari forms
- CVE-2017-1000032 Cross-site scripting in cacti:cacti
- CVE-2017-1000031 SQL injection in cacti:cacti
- CVE-2017-1000030 Information disclosure in oracle:glassfish server
- CVE-2017-1000029 Path traversal in oracle:glassfish server
- CVE-2017-1000028 Path traversal in oracle:glassfish server
- CVE-2017-1000027 Open redirect in koozali:sme server
- CVE-2017-1000026 mixlib-archive Path Traversal vulnerability
- CVE-2017-1000025 Information disclosure in gnome:epiphany
- CVE-2017-1000024 Information disclosure in gnome:shotwell