2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

CVE IDSeverityCVSSDescription
CVE-2017-13289——In writeToParcel and createFromParcel of RttManager.java, there is a permission bypass due to a write size mismatch. Thi...
CVE-2017-13288——In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit in...
CVE-2017-13287——In createFromParcel of VerifyCredentialResponse.java, there is a possible invalid parcel read due to improper input vali...
CVE-2017-13286——In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched serializ...
CVE-2017-13285——In SvoxSsmlParser and startElement of svox_ssml_parser.cpp, there is a possible out of bounds write due to an uninitiali...
CVE-2017-13284——In config_set_string of config.cc, it is possible to pair a second BT keyboard without user approval due to improper inp...
CVE-2017-13283——In avrc_ctrl_pars_vendor_rsp of bluetooth avrcp_ctrl, there is a possible out of bounds write on the stack due to a miss...
CVE-2017-13282——In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible stack buffer overflow due to a missing bounds check...
CVE-2017-13281——In avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check...
CVE-2017-13280——In the FrameSequence_gif::FrameSequence_gif function of libframesequence, there is a out of bounds read due to a missing...
CVE-2017-13279——In M3UParser::parse of M3UParser.cpp, there is a memory resource exhaustion due to a large loop of pushing items into a ...
CVE-2017-13278——In MediaPlayerService::Client::notify of MediaPlayerService.cpp, there is a possible use after free. This could lead to ...
CVE-2017-13277——In ihevcd_fmt_conv of ihevcd_fmt_conv.c, there is a possible out of bounds write due to a missing bounds check. This cou...
CVE-2017-13276——In CProgramConfig_ReadHeightExt of tpdec_asc.cpp, there is a possible stack buffer overflow due to a missing bounds chec...
CVE-2017-13275——In getVSCoverage of CmapCoverage.cpp, there is a possible out of bounds read due to an incorrect bounds check. This coul...
CVE-2017-13274——In the getHost() function of UriTest.java, there is the possibility of incorrect web origin determination. This could le...
CVE-2017-13267——In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This cou...
CVE-2017-3971HIGH8.2Cryptanalysis vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows at...
CVE-2017-3969HIGH8.2Abuse of communication channels vulnerability in the server in McAfee Network Security Management (NSM) before 8.2.7.42....
CVE-2017-3967MEDIUM6.1Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7...
CVE-2017-3966MEDIUM6.4Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAf...
CVE-2017-3965HIGH8.8Cross-Site Request Forgery (CSRF) (aka Session Riding) vulnerability in the web interface in McAfee Network Security Man...
CVE-2017-3964LOW3.5Reflective Cross-Site Scripting (XSS) vulnerability in the web interface in McAfee Network Security Management (NSM) bef...
CVE-2017-18096——The OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0 before 5.3.4 and from 5.4...
CVE-2017-18256——Brave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource consumption) via a long alert...

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now