Vulnerabilities published in 2017
14,807 vulnerabilities were published in 2017: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 140 of 149.
- CVE-2017-1000023 Cross-site scripting in logicaldoc:logicaldoc
- CVE-2017-1000022 Privilege escalation in logicaldoc:logicaldoc
- CVE-2017-1000021 XML external entity in logicaldoc:logicaldoc
- CVE-2017-1000020 Auth bypass in ecos:embedded web servers
- CVE-2017-1000018 phpMyAdmin DoS Vulnerability
- CVE-2017-1000017 phpMyAdmin SSRF in replication
- CVE-2017-1000016 phpMyAdmin Cookie attribute injection attack
- CVE-2017-1000015 phpMyAdmin CSS Injection Vulnerability
- CVE-2017-1000014 phpMyAdmin DoS Vulnerability
- CVE-2017-1000013 phpMyAdmin Open Redirect
- CVE-2017-1000012 Cross-site scripting in mysqldumper:mysqldumper
- CVE-2017-1000011 Cross-site scripting in mywebsql:mywebsql
- CVE-2017-1000010 Other in audacityteam:audacity
- CVE-2017-1000009 Akeneo PIM vulnerable to shell injection in the mass edition
- CVE-2017-1000008 Cross-site request forgery in chyrp-lite project:chyrp lite
- CVE-2017-1000007 txAWS AWSServiceEndpoint defaults to not verifying server certificates
- CVE-2017-1000006 Cross Site Scripting (XSS) in plotly.js
- CVE-2017-1000005 Cross-site scripting in phpminiadmin project:phpminiadmin
- CVE-2017-1000004 SQL injection in atutor:atutor
- CVE-2017-1000003 Privilege escalation in atutor:atutor
- CVE-2017-1000002 Path traversal in atutor:atutor
- CVE-2017-1000001 FedMsg not properly completing message validation
- CVE-2017-10000 Denial of service in Hospitality Reporting and Analytics
- CVE-2017-0938 Denial of service in airMAX, EdgeMAX
- CVE-2017-0936 Missing authorization in Nextcloud Server
- CVE-2017-0935 Privilege escalation in EdgeRouter X
- CVE-2017-0934 Privilege escalation in EdgeRouter X
- CVE-2017-0933 Cross-site request forgery in EdgeRouter X
- CVE-2017-0932 Privilege escalation in EdgeRouter X
- CVE-2017-0931 Cross-Site Scripting in html-janitor
- CVE-2017-0930 Directory Traversal in augustine
- CVE-2017-0929 High severity vulnerability that affects DotNetNuke.Core
- CVE-2017-0928 Bypassing Sanitization using DOM clobbering in html-janitor
- CVE-2017-0927 Missing authorization in GitLab Community and Enterprise Editions
- CVE-2017-0926 Auth bypass in GitLab Community and Enterprise Editions
- CVE-2017-0925 Information disclosure in GitLab Community and Enterprise Editions
- CVE-2017-0924 Cross-site scripting in GitLab Community and Enterprise Editions
- CVE-2017-0923 Cross-site scripting in GitLab Community and Enterprise Editions
- CVE-2017-0922 Missing authorization in GitLab Community and Enterprise Editions
- CVE-2017-0921 Auth bypass in gitlab:gitlab
- CVE-2017-0920 Missing authorization in GitLab Community and Enterprise Editions
- CVE-2017-0919 Auth bypass in gitlab:gitlab
- CVE-2017-0918 Path traversal in GitLab Community and Enterprise Editions
- CVE-2017-0917 Cross-site scripting in GitLab Community and Enterprise Editions
- CVE-2017-0916 Command injection in GitLab Community and Enterprise Editions
- CVE-2017-0915 Command injection in GitLab Community and Enterprise Editions
- CVE-2017-0914 SQL injection in GitLab Community and Enterprise Editions
- CVE-2017-0913 Path traversal in ubnt:ucrm
- CVE-2017-0912 Cross-site scripting in ui:ucrm
- CVE-2017-0911 Auth bypass in Twitter Kit for iOS
- CVE-2017-0910 Auth bypass in Zulip Server
- CVE-2017-0909 private_address_check contains Incomplete List of Disallowed Inputs
- CVE-2017-0907 Critical severity vulnerability that affects recurly-api-client
- CVE-2017-0906 Recurly vulnerable to SSRF
- CVE-2017-0905 Recurly gem Server-Side Request Forgery in Resource#find method
- CVE-2017-0904 private_address_check vulnerable to bypass of Resolv.getaddresses method
- CVE-2017-0903 RubyGems vulnerable to Deserialization of Untrusted Data
- CVE-2017-0902 RubyGems has Origin Validation Error vulnerability
- CVE-2017-0901 RubyGems may allow a maliciously crafted gem to overwrite files
- CVE-2017-0900 RubyGems Improper Input Validation vulnerability
- CVE-2017-0899 RubyGems Code Injection vulnerability
- CVE-2017-0898 Memory corruption in Ruby
- CVE-2017-0897 Weak cryptography in ExpressionEngine
- CVE-2017-0896 Missing authorization in Zulip Server
- CVE-2017-0895 Information disclosure in Nextcloud Server
- CVE-2017-0894 Information disclosure in Nextcloud Server
- CVE-2017-0893 Cross-site scripting in Nextcloud Server
- CVE-2017-0892 Missing authorization in Nextcloud Server
- CVE-2017-0891 Cross-site scripting in Nextcloud Server
- CVE-2017-0890 Cross-site scripting in Nextcloud Server
- CVE-2017-0889 paperclip Server-Side Request Forgery vulnerability
- CVE-2017-0888 Other in Nextcloud Server
- CVE-2017-0887 Security feature bypass in Nextcloud Server
- CVE-2017-0886 Denial of service in Nextcloud Server
- CVE-2017-0885 Information disclosure in Nextcloud Server
- CVE-2017-0884 Missing authorization in Nextcloud Server
- CVE-2017-0883 Privilege escalation in Nextcloud Server
- CVE-2017-0882 Information disclosure in GitLab Community Edition and GitLab Enterprise Edition 8.7.0 through 8.15.7, 8.16.0 through 8.16.7, 8.17.0 through 8.17.3
- CVE-2017-0881 Missing authorization in Zulip Server Versions 1.4.2 and below
- CVE-2017-0880 Denial of service in Android
- CVE-2017-0879 Information disclosure in Android
- CVE-2017-0878 Memory corruption in Android
- CVE-2017-0877 Memory corruption in Android
- CVE-2017-0876 Memory corruption in Android
- CVE-2017-0874 Denial of service in Android
- CVE-2017-0873 Denial of service in Android
- CVE-2017-0872 Memory corruption in Android
- CVE-2017-0871 Privilege escalation in Android
- CVE-2017-0870 Privilege escalation in Android
- CVE-2017-0869 Integer overflow in Android
- CVE-2017-0866 Memory corruption in nvidia:tegra x1 firmware
- CVE-2017-0865 Privilege escalation in Android
- CVE-2017-0864 Privilege escalation in Android
- CVE-2017-0863 Privilege escalation in Android
- CVE-2017-0862 Privilege escalation in Android
- CVE-2017-0861 Use after free in Android
- CVE-2017-0860 Privilege escalation in Android
- CVE-2017-0859 Other in Android
- CVE-2017-0858 Other in Android
- CVE-2017-0857 Other in Android