2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-16914 | — | — | 4.5% | Jan 31, 2018 | The "stub_send_ret_submit()" function (drivers/usb/usbip/stub_tx.c) in the Linux Kernel before version 4.14.8, 4.9.71, 4... |
| CVE-2017-16913 | — | — | 4.0% | Jan 31, 2018 | The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, a... |
| CVE-2017-16912 | — | — | 4.2% | Jan 31, 2018 | The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 a... |
| CVE-2017-16911 | — | — | 0.4% | Jan 31, 2018 | The vhci_hcd driver in the Linux Kernel before version 4.14.8 and 4.4.114 allows allows local attackers to disclose kern... |
| CVE-2017-18043 | — | — | 0.5% | Jan 31, 2018 | Integer overflow in the macro ROUND_UP (n, d) in Quick Emulator (Qemu) allows a user to cause a denial of service (Qemu ... |
| CVE-2017-16945 | — | — | 1.0% | Jan 31, 2018 | The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequen... |
| CVE-2017-16928 | — | — | 1.0% | Jan 31, 2018 | The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently g... |
| CVE-2017-15656 | — | — | 1.5% | Jan 31, 2018 | Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asus... |
| CVE-2017-15655 | — | — | 3.1% | Jan 31, 2018 | Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have bee... |
| CVE-2017-15654 | — | — | 2.2% | Jan 31, 2018 | Highly predictable session tokens in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allo... |
| CVE-2017-15653 | — | — | 2.0% | Jan 31, 2018 | Improper administrator IP validation after his login in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) o... |
| CVE-2017-8916 | — | — | 0.3% | Jan 31, 2018 | In Center for Internet Security CIS-CAT Pro Dashboard before 1.0.4, an authenticated user is able to change an administr... |
| CVE-2017-1773 | — | — | 0.3% | Jan 31, 2018 | IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS re... |
| CVE-2017-1233 | — | — | 0.3% | Jan 31, 2018 | IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write acc... |
| CVE-2017-16858 | — | — | 0.6% | Jan 31, 2018 | The 'crowd-application' plugin module (notably used by the Google Apps plugin) in Atlassian Crowd from version 1.5.0 bef... |
| CVE-2017-15706 | — | — | 6.2% | Jan 31, 2018 | As part of the fix for bug 61201, the documentation for Apache Tomcat 9.0.0.M22 to 9.0.1, 8.5.16 to 8.5.23, 8.0.45 to 8.... |
| CVE-2017-15698 | — | — | 3.6% | Jan 31, 2018 | When parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2.0 to 1.2.14 and 1.1.23 ... |
| CVE-2017-1000411 | — | — | 1.6% | Jan 31, 2018 | OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw ... |
| CVE-2017-1000141 | — | — | 0.8% | Jan 30, 2018 | An issue was discovered in Mahara before 18.10.0. It mishandled user requests that could discontinue a user's ability to... |
| CVE-2017-1731 | — | — | 2.9% | Jan 30, 2018 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Admin... |
| CVE-2017-17969 | — | — | 5.0% | Jan 30, 2018 | Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows r... |
| CVE-2017-9513 | — | — | 0.7% | Jan 29, 2018 | Several rest inline action resources of Atlassian Activity Streams before version 6.3.0 allows remote authenticated atta... |
| CVE-2017-7516 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1197. Reason: This candidate is a duplicate of C... |
| CVE-2017-3739 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-17079 | — | — | — | Jan 29, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now