2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-5530 | HIGH | 8.1 | 0.9% | Dec 13, 2017 | The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may... |
| CVE-2017-14362 | HIGH | 7.3 | 0.5% | Dec 13, 2017 | Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vuln... |
| CVE-2017-14361 | HIGH | 7.4 | 1.0% | Dec 13, 2017 | Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability... |
| CVE-2017-13099 | HIGH | 7.5 | 24.9% | Dec 13, 2017 | wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange i... |
| CVE-2017-13098 | HIGH | 7.5 | 24.3% | Dec 13, 2017 | BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic ... |
| CVE-2017-17562 | HIGH | 8.1 | 96.3% | Dec 12, 2017 | Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. T... |
| CVE-2017-2886 | HIGH | 7.8 | 1.0% | Dec 11, 2017 | A memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10.0.0.292. A specially cr... |
| CVE-2017-17512 | HIGH | 8.8 | 2.2% | Dec 11, 2017 | sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the... |
| CVE-2017-17497 | HIGH | 7.5 | 1.4% | Dec 10, 2017 | In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentatio... |
| CVE-2017-16368 | HIGH | 8.8 | 13.2% | Dec 9, 2017 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier ver... |
| CVE-2017-15868 | HIGH | 7.8 | 0.4% | Dec 5, 2017 | The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2... |
| CVE-2017-8824 | HIGH | 7.8 | 1.4% | Dec 5, 2017 | The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privilege... |
| CVE-2017-16895 | HIGH | 7.8 | 1.0% | Dec 1, 2017 | The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper... |
| CVE-2017-15701 | HIGH | 7.5 | 4.4% | Dec 1, 2017 | In Apache Qpid Broker-J versions 6.1.0 through 6.1.4 (inclusive) the broker does not properly enforce a maximum frame si... |
| CVE-2017-11286 | HIGH | 7.5 | 8.5% | Dec 1, 2017 | Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions fo... |
| CVE-2017-1000405 | HIGH | 7 | 2.8% | Nov 30, 2017 | The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside... |
| CVE-2017-17065 | HIGH | 7.5 | 1.4% | Nov 30, 2017 | An issue was discovered on D-Link DIR-605L Model B before FW2.11betaB06_hbrf devices, related to the code that handles t... |
| CVE-2017-17058 | HIGH | 7.5 | 23.7% | Nov 29, 2017 | The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/wooco... |
| CVE-2017-17053 | HIGH | 7 | 0.4% | Nov 29, 2017 | The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correctl... |
| CVE-2017-17052 | HIGH | 7.8 | 0.4% | Nov 29, 2017 | The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the ->exe_file member of a new p... |
| CVE-2017-8001 | HIGH | 8.4 | 0.4% | Nov 28, 2017 | An issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux environment, one of the support scripts saves the credentials... |
| CVE-2017-15275 | HIGH | 7.5 | 21.4% | Nov 27, 2017 | Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to c... |
| CVE-2017-4995 | HIGH | 8.1 | 2.5% | Nov 27, 2017 | An issue was discovered in Pivotal Spring Security 4.2.0.RELEASE through 4.2.2.RELEASE, and Spring Security 5.0.0.M1. Wh... |
| CVE-2017-16939 | HIGH | 7.8 | 2.1% | Nov 24, 2017 | The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gai... |
| CVE-2017-16932 | HIGH | 7.5 | 5.9% | Nov 23, 2017 | parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now