Vulnerabilities published in 2017
14,807 vulnerabilities were published in 2017: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 51 of 149.
- CVE-2017-3187 The dotCMS administration panel, versions 3.7.1 and earlier, are vulnerable to cross-site request forgery
- CVE-2017-3186 Hardcoded credentials in ACTi D, B, I, and E series cameras
- CVE-2017-3185 Information disclosure in ACTi D, B, I, and E series cameras
- CVE-2017-3184 Missing authorization in ACTi D, B, I, and E series cameras
- CVE-2017-3183 Privilege escalation in XRT Treasury
- CVE-2017-3182 Security feature bypass in SDK
- CVE-2017-3181 SQL injection in Spotfire Analyst
- CVE-2017-3180 Multiple TIBCO Spotfire components fail to sanitize user-supplied inout and are vulnerable to cross-site scripting
- CVE-2017-3169 Null dereference in Apache HTTP Server
- CVE-2017-3167 Auth bypass in Apache HTTP Server
- CVE-2017-3166 Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main
- CVE-2017-3165 Cross-site Scripting In Apache Brooklyn
- CVE-2017-3164 Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core
- CVE-2017-3163 Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core
- CVE-2017-3162 Improper Input Validation in Apache Hadoop
- CVE-2017-3161 Improper Neutralization of Input During Web Page Generation in Apache Hadoop
- CVE-2017-3160 Supply chain in Apache Cordova Android
- CVE-2017-3159 Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization
- CVE-2017-3158 Apache Guacamole Race Condition vulnerability
- CVE-2017-3157 Information disclosure in Apache OpenOffice
- CVE-2017-3156 Covert Timing Channel in Apache CXF
- CVE-2017-3155 Cross-site Scripting in Apache Atlas
- CVE-2017-3154 Apache Atlas produces Stack trace in error response
- CVE-2017-3153 Cross-site Scripting in Apache Atlas
- CVE-2017-3152 Cross-site Scripting in Apache Atlas
- CVE-2017-3151 Cross-site Scripting in Apache Atlas
- CVE-2017-3150 Insecure cookie storage in Apache Atlas
- CVE-2017-3145 Improper fetch cleanup sequencing in the resolver can cause named to crash
- CVE-2017-3144 Failure to properly clean up closed OMAPI connections can exhaust available sockets
- CVE-2017-3143 An error in TSIG authentication can permit unauthorized dynamic updates
- CVE-2017-3142 An error in TSIG authentication can permit unauthorized zone transfers
- CVE-2017-3141 Windows service and uninstall paths are not quoted when BIND is installed
- CVE-2017-3140 An error processing RPZ rules can cause named to loop endlessly after handling a query
- CVE-2017-3139 Denial of service in BIND
- CVE-2017-3138 named exits with a REQUIRE assertion failure if it receives a null command string on its control channel
- CVE-2017-3137 A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME
- CVE-2017-3136 An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"
- CVE-2017-3135 Combination of DNS64 and RPZ Can Lead to Crash
- CVE-2017-3134 Privilege escalation in Fortinet FortiWLC-SD
- CVE-2017-3133 Cross-site scripting in Fortinet FortiOS
- CVE-2017-3132 Cross-site scripting in Fortinet FortiOS
- CVE-2017-3131 Cross-site scripting in Fortinet FortiOS
- CVE-2017-3130 Information disclosure in Fortinet FortiOS
- CVE-2017-3129 Cross-site scripting in Fortinet FortiWeb
- CVE-2017-3128 Cross-site scripting in Fortinet FortiOS
- CVE-2017-3127 Cross-site scripting in fortinet:fortios
- CVE-2017-3126 Open redirect in Fortinet FortiAnalyzer, FortiManager
- CVE-2017-3125 Cross-site scripting in FortiMail
- CVE-2017-3124 Memory corruption in Acrobat Reader
- CVE-2017-3123 Memory corruption in Acrobat Reader
- CVE-2017-3122 Memory corruption in Acrobat Reader
- CVE-2017-3121 Memory corruption in Acrobat Reader
- CVE-2017-3120 Use after free in Acrobat Reader
- CVE-2017-3119 Memory corruption in Acrobat Reader
- CVE-2017-3118 Security feature bypass in Acrobat Reader
- CVE-2017-3117 Memory corruption in Acrobat Reader
- CVE-2017-3116 Memory corruption in Acrobat Reader
- CVE-2017-3115 Information disclosure in Acrobat Reader
- CVE-2017-3114 Memory corruption in Adobe Flash Player 27.0.0.183 and earlier versions
- CVE-2017-3113 Use after free in Acrobat Reader
- CVE-2017-3112 Memory corruption in Adobe Flash Player 27.0.0.183 and earlier versions
- CVE-2017-3111 Information disclosure in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0
- CVE-2017-3110 Information disclosure in Experience Manager
- CVE-2017-3109 Cross-site scripting in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0
- CVE-2017-3108 File upload in Experience Manager
- CVE-2017-3107 Misconfiguration in Experience Manager
- CVE-2017-3106 Memory corruption in Flash Player
- CVE-2017-3105 Open redirect in Adobe RoboHelp RH2017.0.1 and earlier versions
- CVE-2017-3104 Cross-site scripting in Adobe RoboHelp RH2017.0.1 and earlier versions
- CVE-2017-3103 Cross-site scripting in Adobe Connect 9.6.1 and earlier.
- CVE-2017-3102 Cross-site scripting in Adobe Connect 9.6.1 and earlier.
- CVE-2017-3101 Other in Adobe Connect 9.6.1 and earlier.
- CVE-2017-3100 Memory corruption in Adobe Flash Player 26.0.0.131 and earlier.
- CVE-2017-3099 Memory corruption in Adobe Flash Player 26.0.0.131 and earlier.
- CVE-2017-3098 Code injection in Adobe Captivate 9 and earlier.
- CVE-2017-3097 Other in Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3096 Memory corruption in Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3095 Memory corruption in Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3094 Memory corruption in Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3093 Memory corruption in Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3092 Code injection in Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3091 Memory corruption in Digital Editions
- CVE-2017-3090 Code injection in Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3089 Memory corruption in Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3088 Memory corruption in Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3087 Information disclosure in Adobe Captivate 9 and earlier.
- CVE-2017-3086 Memory corruption in Adobe Shockwave 12.2.8.198 and earlier.
- CVE-2017-3085 Open redirect in Flash Player
- CVE-2017-3084 Use after free in Adobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3083 Use after free in Adobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3082 Memory corruption in Adobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3081 Use after free in Adobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3080 Security feature bypass in Adobe Flash Player 26.0.0.131 and earlier.
- CVE-2017-3079 Memory corruption in Adobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3078 Memory corruption in Adobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3077 Memory corruption in Adobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3076 Memory corruption in Adobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3075 Use after free in Adobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3074 Memory corruption in Adobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-3073 Use after free in Adobe Flash Player 25.0.0.148 and earlier.