2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-2668 | MEDIUM | 6.5 | 2.6% | Jun 22, 2018 | 389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind r... |
| CVE-2017-2672 | MEDIUM | 6.5 | 1.2% | Jun 21, 2018 | A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access... |
| CVE-2017-2669 | LOW | 3.7 | 4.6% | Jun 21, 2018 | Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user aut... |
| CVE-2017-13072 | — | — | 0.8% | Jun 21, 2018 | Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4... |
| CVE-2017-17062 | — | — | 3.7% | Jun 16, 2018 | The backend component in Open-Xchange OX App Suite before 7.6.3-rev35, 7.8.x before 7.8.2-rev38, 7.8.3 before 7.8.3-rev4... |
| CVE-2017-18169 | — | — | 0.1% | Jun 15, 2018 | User process can perform the kernel DOS in ashmem when doing cache maintenance operation in all Android releases(Android... |
| CVE-2017-12070 | — | — | 1.0% | Jun 14, 2018 | Unsigned versions of the DLLs distributed by the OPC Foundation may be replaced with malicious code. |
| CVE-2017-17309 | — | — | 7.3% | Jun 14, 2018 | Huawei HG255s-10 V100R001C163B025SP02 has a path traversal vulnerability due to insufficient validation of the received ... |
| CVE-2017-17173 | — | — | 1.0% | Jun 14, 2018 | Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-AL... |
| CVE-2017-17172 | — | — | 0.2% | Jun 14, 2018 | Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege escalation vulnerability. An... |
| CVE-2017-3936 | MEDIUM | 6.2 | 1.4% | Jun 13, 2018 | OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.... |
| CVE-2017-3907 | MEDIUM | 5.4 | 1.6% | Jun 13, 2018 | Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Se... |
| CVE-2017-3968 | HIGH | 7.5 | 1.5% | Jun 13, 2018 | Session fixation vulnerability in the web interface in McAfee Network Security Manager (NSM) before 8.2.7.42.2 and McAfe... |
| CVE-2017-17443 | — | — | 0.9% | Jun 13, 2018 | OPC Foundation Local Discovery Server (LDS) 1.03.370 required a security update to resolve multiple vulnerabilities that... |
| CVE-2017-11672 | — | — | 0.3% | Jun 13, 2018 | The OPC Foundation Local Discovery Server (LDS) before 1.03.367 is installed as a Windows Service without adding double ... |
| CVE-2017-15695 | — | — | 2.6% | Jun 13, 2018 | When an Apache Geode server versions 1.0.0 to 1.4.0 is configured with a security manager, a user with DATA:WRITE privil... |
| CVE-2017-16652 | — | — | 0.9% | Jun 13, 2018 | An issue was discovered in Symfony 2.7.x before 2.7.38, 2.8.x before 2.8.31, 3.2.x before 3.2.14, and 3.3.x before 3.3.1... |
| CVE-2017-18070 | — | — | 0.2% | Jun 12, 2018 | In wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be overflowed if the value of va... |
| CVE-2017-15857 | — | — | 0.2% | Jun 12, 2018 | In the camera driver, an out-of-bounds access can occur due to an error in copying region params from user space in all ... |
| CVE-2017-15854 | — | — | 0.2% | Jun 12, 2018 | The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wma... |
| CVE-2017-15843 | — | — | 0.1% | Jun 12, 2018 | Due to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can potentially occur in all Andr... |
| CVE-2017-15842 | — | — | 0.2% | Jun 12, 2018 | Buffer might get used after it gets freed due to unlocking the mutex before freeing the buffer in all Android releases f... |
| CVE-2017-18291 | — | — | 1.0% | Jun 12, 2018 | An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter. |
| CVE-2017-18290 | — | — | 1.0% | Jun 12, 2018 | An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction parame... |
| CVE-2017-18289 | — | — | 1.0% | Jun 12, 2018 | An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now