2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

CVE IDSeverityCVSSDescription
CVE-2017-14778——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7502. Reason: This candidate is a reservation ...
CVE-2017-14777——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7502. Reason: This candidate is a reservation ...
CVE-2017-14776——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7502. Reason: This candidate is a reservation ...
CVE-2017-2617HIGH7.6hawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker could use this vulnerabi...
CVE-2017-2609MEDIUM4.3jenkins before versions 2.44, 2.32.2 is vulnerable to an information disclosure vulnerability in search suggestions (SEC...
CVE-2017-2607MEDIUM4.2jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting vulnerability in console notes (S...
CVE-2017-11308CRITICAL9.8Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11...
CVE-2017-11307CRITICAL9.8Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11...
CVE-2017-11306CRITICAL9.8Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11...
CVE-2017-11253CRITICAL9.8Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11...
CVE-2017-11250CRITICAL9.8Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11...
CVE-2017-11240CRITICAL9.8Adobe Acrobat and Reader versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, 11...
CVE-2017-18273——In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in ...
CVE-2017-18272——In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allow...
CVE-2017-18271——In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in...
CVE-2017-18270——In the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl commands, setting unwan...
CVE-2017-18269——An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Li...
CVE-2017-9637——Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. When connectivity...
CVE-2017-9635——Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges. When Ampla MES users are c...
CVE-2017-15855——In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kern...
CVE-2017-18268MEDIUM5.9Symantec IntelligenceCenter 3.3 is vulnerable to the Return of the Bleichenbacher Oracle Threat (ROBOT) attack. A remote...
CVE-2017-15533——Symantec SSL Visibility (SSLV) 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1 are vulnerable to the R...
CVE-2017-17689——The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to pla...
CVE-2017-17688——The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to pla...
CVE-2017-2613MEDIUM5.4jenkins before versions 2.44, 2.32.2 is vulnerable to a user creation CSRF using GET by admins. While this user record w...

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now