2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9269 | HIGH | 7.7 | 2.3% | Mar 1, 2018 | In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious reposi... |
| CVE-2017-9268 | MEDIUM | 4.4 | 0.6% | Mar 1, 2018 | In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions... |
| CVE-2017-7436 | HIGH | 8.1 | 1.8% | Mar 1, 2018 | In libzypp before 20170803 it was possible to retrieve unsigned packages without a warning to the user which could lead ... |
| CVE-2017-7435 | HIGH | 8.1 | 1.8% | Mar 1, 2018 | In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could lead ... |
| CVE-2017-7426 | MEDIUM | 5.4 | 1.1% | Mar 1, 2018 | The NetIQ Identity Manager Plugins before 4.6.1 contained various XML External XML Entity (XXE) handling flaws that coul... |
| CVE-2017-5188 | MEDIUM | 5 | 1.2% | Mar 1, 2018 | The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside o... |
| CVE-2017-14804 | CRITICAL | 9.9 | 1.7% | Mar 1, 2018 | The build package before 20171128 did not check directory names during extraction of build results that allowed untruste... |
| CVE-2017-14800 | MEDIUM | 5.4 | 0.8% | Mar 1, 2018 | A reflected cross site scripting attack in the NetIQ Access Manager before 4.3.3 using the "typecontainerid" parameter o... |
| CVE-2017-14799 | MEDIUM | 4.6 | 0.8% | Mar 1, 2018 | A cross site scripting attack in handling the ESP login parameter handling in NetIQ Access Manager before 4.3.3 could be... |
| CVE-2017-14798 | HIGH | 7.3 | 1.0% | Mar 1, 2018 | A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escal... |
| CVE-2017-6154 | — | — | 1.8% | Mar 1, 2018 | On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memor... |
| CVE-2017-6150 | — | — | 1.8% | Mar 1, 2018 | Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble I... |
| CVE-2017-12627 | — | — | 8.8% | Mar 1, 2018 | In Apache Xerces-C XML Parser library before 3.2.1, processing of external DTD paths can result in a null pointer derefe... |
| CVE-2017-18208 | — | — | 0.5% | Mar 1, 2018 | The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of ... |
| CVE-2017-18207 | — | — | 1.3% | Mar 1, 2018 | The Wave_read._read_fmt_chunk function in Lib/wave.py in Python through 3.6.4 does not ensure a nonzero channel value, w... |
| CVE-2017-9447 | — | — | 2.0% | Feb 28, 2018 | In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improp... |
| CVE-2017-12191 | — | — | 0.9% | Feb 28, 2018 | A flaw was found in the CloudForms account configuration when using VMware. By default, a shared account is used that ha... |
| CVE-2017-18206 | — | — | 3.2% | Feb 27, 2018 | In utils.c in zsh before 5.4, symlink expansion had a buffer overflow. |
| CVE-2017-18205 | — | — | 2.1% | Feb 27, 2018 | In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processin... |
| CVE-2017-15136 | — | — | 1.0% | Feb 27, 2018 | When registering and activating a new system with Red Hat Satellite 6 if the new systems hostname is then reset to the h... |
| CVE-2017-7671 | — | — | 2.3% | Feb 27, 2018 | There is a DOS attack vulnerability in Apache Traffic Server (ATS) 5.2.0 to 5.3.2, 6.0.0 to 6.2.0, and 7.0.0 with the TL... |
| CVE-2017-5660 | — | — | 2.0% | Feb 27, 2018 | There is a vulnerability in Apache Traffic Server (ATS) 6.2.0 and prior and 7.0.0 and prior with the Host header and lin... |
| CVE-2017-18204 | — | — | 0.5% | Feb 27, 2018 | The ocfs2_setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local users to cause a denial of ... |
| CVE-2017-18203 | — | — | 0.3% | Feb 27, 2018 | The dm_get_from_kobject function in drivers/md/dm.c in the Linux kernel before 4.14.3 allow local users to cause a denia... |
| CVE-2017-12091 | — | — | — | Feb 27, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14462, CVE-2017-14463, CVE-2017-14464, CVE-2017... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now