2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2017-9969——An information disclosure vulnerability exists in Schneider Electric's IGSS Mobile application version 3.01 and prior. P...
CVE-2017-9968——A security misconfiguration vulnerability exists in Schneider Electric's IGSS Mobile application versions 3.01 and prior...
CVE-2017-9967——A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Secu...
CVE-2017-9963——A cross-site request forgery vulnerability exists on the Secure Gateway component of Schneider Electric's PowerSCADA Any...
CVE-2017-17725——In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in ...
CVE-2017-17724——In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, relat...
CVE-2017-17723——In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attac...
CVE-2017-17722——In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remot...
CVE-2017-13247——In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead t...
CVE-2017-13246——A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel...
CVE-2017-13245——A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versions: Android kernel. ...
CVE-2017-13244——A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: Android kernel. ID: A-6...
CVE-2017-13243——A information disclosure vulnerability in the Android system (ui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7...
CVE-2017-13242——A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7...
CVE-2017-13241——A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc). Product: Android. Ve...
CVE-2017-13240——A information disclosure vulnerability in the Android framework (crypto framework). Product: Android. Versions: 8.0, 8.1...
CVE-2017-13239——A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-6...
CVE-2017-13238——In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical acces...
CVE-2017-13236——In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to loc...
CVE-2017-13235——A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID:...
CVE-2017-13234——In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to remo...
CVE-2017-13233——In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote t...
CVE-2017-13232——In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL termi...
CVE-2017-13231——In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of ...
CVE-2017-13230——In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples va...

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now