2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-16879 | HIGH | 7.8 | 2.4% | Nov 22, 2017 | Stack-based buffer overflow in the _nc_write_entry function in tinfo/write_entry.c in ncurses 6.0 allows attackers to ca... |
| CVE-2017-2718 | HIGH | 8.8 | 0.9% | Nov 22, 2017 | FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the... |
| CVE-2017-2704 | HIGH | 7.5 | 0.6% | Nov 22, 2017 | Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions... |
| CVE-2017-5729 | HIGH | 7.4 | 1.3% | Nov 21, 2017 | Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacke... |
| CVE-2017-5712 | HIGH | 7.2 | 4.4% | Nov 21, 2017 | Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6... |
| CVE-2017-5711 | HIGH | 7.8 | 0.6% | Nov 21, 2017 | Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0... |
| CVE-2017-2919 | HIGH | 7.8 | 2.1% | Nov 20, 2017 | An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A speciall... |
| CVE-2017-2897 | HIGH | 7.8 | 2.1% | Nov 20, 2017 | An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS... |
| CVE-2017-2896 | HIGH | 7.8 | 2.1% | Nov 20, 2017 | An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially cra... |
| CVE-2017-12111 | HIGH | 8.8 | 2.1% | Nov 20, 2017 | An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS fil... |
| CVE-2017-12110 | HIGH | 8.8 | 2.1% | Nov 20, 2017 | An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS... |
| CVE-2017-12608 | HIGH | 7.8 | 2.9% | Nov 20, 2017 | A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, all... |
| CVE-2017-12607 | HIGH | 7.8 | 2.6% | Nov 20, 2017 | A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to cra... |
| CVE-2017-9806 | HIGH | 7.8 | 1.8% | Nov 20, 2017 | A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, all... |
| CVE-2017-16544 | HIGH | 8.8 | 6.2% | Nov 20, 2017 | In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used... |
| CVE-2017-1000170 | HIGH | 7.5 | 57.6% | Nov 17, 2017 | jqueryFileTree 2.1.5 and older Directory Traversal |
| CVE-2017-16715 | HIGH | 8.6 | 1.3% | Nov 16, 2017 | An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version ... |
| CVE-2017-15115 | HIGH | 7.8 | 0.5% | Nov 15, 2017 | The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended ne... |
| CVE-2017-15288 | HIGH | 7.8 | 0.4% | Nov 15, 2017 | The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before 2.12.4 uses weak permissions for... |
| CVE-2017-11882 | HIGH | 7.8 | 99.9% | Nov 15, 2017 | Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Mi... |
| CVE-2017-11878 | HIGH | 7.8 | 6.2% | Nov 15, 2017 | Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft... |
| CVE-2017-16651 | HIGH | 7.8 | 42.8% | Nov 9, 2017 | Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary file... |
| CVE-2017-16659 | HIGH | 7.8 | 0.8% | Nov 8, 2017 | The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access t... |
| CVE-2017-2917 | HIGH | 8.8 | 3.2% | Nov 7, 2017 | An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Spe... |
| CVE-2017-2916 | HIGH | 8.8 | 2.3% | Nov 7, 2017 | An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now