2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-3104 | — | — | 2.8% | Dec 1, 2017 | Adobe RoboHelp has a cross-site scripting (XSS) vulnerability. This affects versions before RH12.0.4.460 and RH2017 befo... |
| CVE-2017-17086 | — | — | 1.4% | Dec 1, 2017 | Indeo Otter through 1.7.4 mishandles a "</script>" substring in an initial DP payload, which allows remote attackers to ... |
| CVE-2017-17085 | — | — | 16.7% | Dec 1, 2017 | In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissec... |
| CVE-2017-17084 | — | — | 2.7% | Dec 1, 2017 | In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissect... |
| CVE-2017-17083 | — | — | 2.7% | Dec 1, 2017 | In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissector... |
| CVE-2017-15607 | — | — | 1.7% | Dec 1, 2017 | Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving '/' characters or initi... |
| CVE-2017-11282 | — | — | 34.8% | Dec 1, 2017 | Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation co... |
| CVE-2017-11281 | — | — | 33.9% | Dec 1, 2017 | Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploita... |
| CVE-2017-17081 | — | — | 1.8% | Nov 30, 2017 | The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and height... |
| CVE-2017-17080 | — | — | 1.3% | Nov 30, 2017 | elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate... |
| CVE-2017-1000406 | — | — | 1.1% | Nov 30, 2017 | OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used u... |
| CVE-2017-3764 | — | — | 0.9% | Nov 30, 2017 | A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be... |
| CVE-2017-15116 | — | — | 0.4% | Nov 30, 2017 | The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (... |
| CVE-2017-14949 | — | — | 2.4% | Nov 30, 2017 | Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request th... |
| CVE-2017-14868 | — | — | 2.5% | Nov 30, 2017 | Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an ... |
| CVE-2017-12631 | — | — | 1.6% | Nov 30, 2017 | Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF (Cro... |
| CVE-2017-12372 | — | — | 3.0% | Nov 30, 2017 | A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Pla... |
| CVE-2017-12371 | — | — | 3.0% | Nov 30, 2017 | A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Pla... |
| CVE-2017-12370 | — | — | 3.0% | Nov 30, 2017 | A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Pla... |
| CVE-2017-12369 | — | — | 3.0% | Nov 30, 2017 | A "Cisco WebEx Network Recording Player Out-of-Bounds Vulnerability" exists in Cisco WebEx Network Recording Player for ... |
| CVE-2017-12368 | — | — | 3.0% | Nov 30, 2017 | A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Pla... |
| CVE-2017-12367 | — | — | 2.8% | Nov 30, 2017 | A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player ... |
| CVE-2017-12366 | — | — | 1.2% | Nov 30, 2017 | A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site sc... |
| CVE-2017-12365 | — | — | 1.2% | Nov 30, 2017 | A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting infor... |
| CVE-2017-12364 | — | — | 1.3% | Nov 30, 2017 | A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now