2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-17722 | — | — | 1.2% | Feb 12, 2018 | In Exiv2 0.26, there is a reachable assertion in the readHeader function in bigtiffimage.cpp, which will lead to a remot... |
| CVE-2017-13247 | — | — | 0.2% | Feb 12, 2018 | In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead t... |
| CVE-2017-13246 | — | — | 0.5% | Feb 12, 2018 | A information disclosure vulnerability in the Upstream kernel network driver. Product: Android. Versions: Android kernel... |
| CVE-2017-13245 | — | — | 0.2% | Feb 12, 2018 | A elevation of privilege vulnerability in the Upstream kernel audio driver. Product: Android. Versions: Android kernel. ... |
| CVE-2017-13244 | — | — | 0.2% | Feb 12, 2018 | A elevation of privilege vulnerability in the Upstream kernel easel. Product: Android. Versions: Android kernel. ID: A-6... |
| CVE-2017-13243 | — | — | 0.6% | Feb 12, 2018 | A information disclosure vulnerability in the Android system (ui). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7... |
| CVE-2017-13242 | — | — | 0.5% | Feb 12, 2018 | A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7... |
| CVE-2017-13241 | — | — | 0.5% | Feb 12, 2018 | A information disclosure vulnerability in the Android media framework (libstagefright_soft_avcenc). Product: Android. Ve... |
| CVE-2017-13240 | — | — | 0.5% | Feb 12, 2018 | A information disclosure vulnerability in the Android framework (crypto framework). Product: Android. Versions: 8.0, 8.1... |
| CVE-2017-13239 | — | — | 0.4% | Feb 12, 2018 | A information disclosure vulnerability in the Android framework (ui framework). Product: Android. Versions: 8.0. ID: A-6... |
| CVE-2017-13238 | — | — | 0.2% | Feb 12, 2018 | In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical acces... |
| CVE-2017-13236 | — | — | 0.6% | Feb 12, 2018 | In the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to loc... |
| CVE-2017-13235 | — | — | 0.3% | Feb 12, 2018 | A other vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. ID:... |
| CVE-2017-13234 | — | — | 0.6% | Feb 12, 2018 | In DLSParser of the sonivox library, there is possible resource exhaustion due to a memory leak. This could lead to remo... |
| CVE-2017-13233 | — | — | 0.6% | Feb 12, 2018 | In ihevcd_ctb_boundary_strength_pbslice of libhevc, there is possible resource exhaustion. This could lead to a remote t... |
| CVE-2017-13232 | — | — | 0.8% | Feb 12, 2018 | In audioserver, there is an out-of-bounds write due to a log statement using %s with an array that may not be NULL termi... |
| CVE-2017-13231 | — | — | 0.2% | Feb 12, 2018 | In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of ... |
| CVE-2017-13230 | — | — | 1.9% | Feb 12, 2018 | In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2_pic_width_in_luma_samples va... |
| CVE-2017-13229 | — | — | 1.8% | Feb 12, 2018 | A remote code execution vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.... |
| CVE-2017-13228 | — | — | 1.5% | Feb 12, 2018 | In function ih264d_ref_idx_reordering of libavc, there is an out-of-bounds write due to modCount being defined as an uns... |
| CVE-2017-18179 | — | — | 2.8% | Feb 12, 2018 | Progress Sitefinity 9.1 uses wrap_access_token as a non-expiring authentication token that remains valid after a passwor... |
| CVE-2017-18178 | — | — | 2.3% | Feb 12, 2018 | Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the r... |
| CVE-2017-18177 | — | — | 0.7% | Feb 12, 2018 | Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is f... |
| CVE-2017-18176 | — | — | 0.7% | Feb 12, 2018 | Progress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the same origin as the appl... |
| CVE-2017-18175 | — | — | 0.7% | Feb 12, 2018 | Progress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka Templateconfiguration), as demons... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now