Vulnerabilities published in 2017
14,807 vulnerabilities were published in 2017: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 62 of 149.
- CVE-2017-20186 nikooo777 ckSurf Spectator List Name misc.sp SpecListMenuDead denial of service
- CVE-2017-20185 Fuzzy SWMP GET Parameter swmp.php cross site scripting
- CVE-2017-20184 Carlo Gavazzi Powersoft prone to Path Traversal
- CVE-2017-20183 External Media without Import Plugin external-media-without-import.php print_media_new_panel cross site scripting
- CVE-2017-20182 Mobile Vikings Django AJAX Utilities Backslash pagination.js Pagination cross site scripting
- CVE-2017-20181 hgzojer Vocable Trainer VocableTrainerProvider.java path traversal
- CVE-2017-20180 Zerocoin libzerocoin Proof CoinSpend.cpp CoinSpend data authenticity
- CVE-2017-20179 InSTEDD Pollit tour_controller.rb TourController Privilege Escalation
- CVE-2017-20178 Codiad process.php saveJSON information disclosure
- CVE-2017-20177 WangGuard Plugin WGG User List wangguard-user-info.php wangguard_users_info cross site scripting
- CVE-2017-20176 ciubotaru share-on-diaspora new_window.php cross site scripting
- CVE-2017-20175 DaSchTour matomo-mediawiki-extension Username Piwik.hooks.php cross site scripting
- CVE-2017-20174 bastianallgeier Kirby Webmentions Plugin injection
- CVE-2017-20173 AlexRed contentmap contentmap.php Load sql injection
- CVE-2017-20172 ridhoq soundslike songs.py get_song_relations sql injection
- CVE-2017-20171 PrivateSky apersistence mysqlUtils.js sql injection
- CVE-2017-20170 ollpu parontalli index.php sql injection
- CVE-2017-20169 GGGGGGGG ToN-MasterServer svr_request_pub.php sql injection
- CVE-2017-20168 jfm-so piWallet api.php sql injection
- CVE-2017-20167 Minichan reports.php cross site scripting
- CVE-2017-20166 Ecto missing `is_nil` requirement
- CVE-2017-20165 debug-js debug node.js useColors redos
- CVE-2017-20164 Symbiote Seed Login SecurityLoginExtension.php onBeforeSecurityLogin redirect
- CVE-2017-20163 Red Snapper NView Session.php mutate sql injection
- CVE-2017-20162 vercel ms index.js parse redos
- CVE-2017-20161 rofl0r MacGeiger ESSID macgeiger.c dump_wlan_at injection
- CVE-2017-20160 flitto express-param fetchParams.js parameter pollution
- CVE-2017-20159 rf Keynote rumble.rb cross site scripting
- CVE-2017-20158 vova07 Yii2 FileAPI Widget UploadAction.php run cross site scripting
- CVE-2017-20157 Ariadne Component Library Url.php server-side request forgery
- CVE-2017-20156 Exciting Printer Argument prepare_page.rb command injection
- CVE-2017-20155 Sterc Google Analytics Dashboard for MODX Internal Search widget.analytics.tpl cross site scripting
- CVE-2017-20154 ghostlander Phoenixcoin main.cpp accept denial of service
- CVE-2017-20153 aerouk imageserve cross site scripting
- CVE-2017-20152 aerouk imageserve File viewer.php path traversal
- CVE-2017-20151 iText RUPS XfaFile.java xml external entity reference
- CVE-2017-20150 challenge website sql injection
- CVE-2017-20149 Memory corruption in mikrotik:routeros
- CVE-2017-20148 Privilege escalation in debian:logcheck
- CVE-2017-20147 Misconfiguration in smokeping:smokeping
- CVE-2017-20146 Improper access control in github.com/gorilla/handlers
- CVE-2017-20145 Tecrail Responsive Filemanger path traversal
- CVE-2017-20144 Anvsoft PDFMate PDF Converter Pro memory corruption
- CVE-2017-20143 Itech Movie Portal Script film-rating.php Error sql injection
- CVE-2017-20142 Itech Movie Portal Script artist-display.php Union sql injection
- CVE-2017-20141 Itech Movie Portal Script movie.php Union sql injection
- CVE-2017-20140 Itech Movie Portal Script movie.php Reflected cross site scripting
- CVE-2017-20139 Itech Movie Portal Script show_news.php Error sql injection
- CVE-2017-20138 Itech Auction Script mcategory.php Blind sql injection
- CVE-2017-20137 Itech B2B Script catcompany.php sql injection
- CVE-2017-20136 Itech Classifieds Script subpage.php sql injection
- CVE-2017-20135 Itech Dating Script see_more_details.php sql injection
- CVE-2017-20134 Itech Freelancer Script category.php sql injection
- CVE-2017-20133 Itech Job Portal Script admin improper authentication
- CVE-2017-20132 Itech Multi Vendor Script product-list.php sql injection
- CVE-2017-20131 Itech News Portal information.php sql injection
- CVE-2017-20130 Itech Real Estate Script search_property.php sql injection
- CVE-2017-20129 LogoStore search.php sql injection
- CVE-2017-20128 KB Messages PHP Script sql injection
- CVE-2017-20127 KB Login Authentication Script sql injection
- CVE-2017-20126 KB Affiliate Referral Script index.php sql injection
- CVE-2017-20125 Online Hotel Booking System Pro roomtype-details.php sql injection
- CVE-2017-20124 Online Hotel Booking System Pro Plugin roomtype-details.php sql injection
- CVE-2017-20123 Viscosity DLL untrusted search path
- CVE-2017-20122 Bitrix Site Manager Contact Form cross site scripting
- CVE-2017-20121 Teradici Management Console Database Management privileges management
- CVE-2017-20120 TrueConf Server cross-site request forgery
- CVE-2017-20119 TrueConf Server change-lang redirect
- CVE-2017-20118 TrueConf Server DOM cross site scripting
- CVE-2017-20117 TrueConf Server group DOM cross site scripting
- CVE-2017-20116 TrueConf Server Reflected cross site scripting
- CVE-2017-20115 TrueConf Server Reflected cross site scripting
- CVE-2017-20114 TrueConf Server Reflected cross site scripting
- CVE-2017-20113 TrueConf Server Stored cross site scripting
- CVE-2017-20112 IVPN Client privileges management
- CVE-2017-20111 Teleopti WFM Administration privileges management
- CVE-2017-20110 Teleopti WFM Administration Credentials information disclosure
- CVE-2017-20109 Teleopti WFM Administration GetOneTenant Credentials information disclosure
- CVE-2017-20108 Easy Table Plugin options-general.php cross site scripting
- CVE-2017-20107 ShadeYouVPN.com Client privileges management
- CVE-2017-20106 Lithium Forum Compose Message server-side request forgery
- CVE-2017-20105 Simplessus path traversal
- CVE-2017-20104 Simplessus Cookie Time sql injection
- CVE-2017-20103 Kama Click Counter Plugin admin.php Blind sql injection
- CVE-2017-20102 Album Lock getImage path traversal
- CVE-2017-20101 ProjectSend information disclosure
- CVE-2017-20100 Air Transfer cross site scripting
- CVE-2017-20099 Analytics Stats Counter Statistics Plugin code injection
- CVE-2017-20098 Admin Custom Login Plugin Persistent cross site scripting
- CVE-2017-20097 WP-Filebase Download Manager Plugin cross site scriting
- CVE-2017-20096 WP-SpamFree Anti-Spam Plugin cross site scriting
- CVE-2017-20095 Simple Ads Manager Plugin code injection
- CVE-2017-20094 NewStatPress Plugin Persistent cross site scriting
- CVE-2017-20093 Download Manager Plugin cross-site request forgery
- CVE-2017-20092 Google Analytics Dashboard Plugin cross site scriting
- CVE-2017-20091 File Manager Plugin cross-site request forgery
- CVE-2017-20090 Global Content Blocks Plugin cross-site request forgery
- CVE-2017-20089 Gwolle Guestbook Plugin cross site scriting
- CVE-2017-20088 Atahualpa Theme cross-site request forgery
- CVE-2017-20087 Alpine PhotoTile for Instagram Plugin cross site scriting