2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-11803 | — | — | 5.9% | Nov 15, 2017 | Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain informat... |
| CVE-2017-11791 | — | — | 5.5% | Nov 15, 2017 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows... |
| CVE-2017-11788 | — | — | 7.9% | Nov 15, 2017 | Windows Search in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2,... |
| CVE-2017-11770 | — | — | 5.4% | Nov 15, 2017 | .NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NE... |
| CVE-2017-11768 | — | — | 6.4% | Nov 15, 2017 | Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 a... |
| CVE-2017-10278 | — | — | 1.0% | Nov 14, 2017 | Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Security). Supported versions th... |
| CVE-2017-10272 | — | — | 1.2% | Nov 14, 2017 | Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that a... |
| CVE-2017-10269 | — | — | 2.1% | Nov 14, 2017 | Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that a... |
| CVE-2017-10267 | — | — | 1.5% | Nov 14, 2017 | Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that a... |
| CVE-2017-10266 | — | — | 1.1% | Nov 14, 2017 | Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that a... |
| CVE-2017-9394 | — | — | 0.6% | Nov 14, 2017 | A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to disp... |
| CVE-2017-16820 | — | — | 4.0% | Nov 14, 2017 | The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a... |
| CVE-2017-12636 | — | — | 90.6% | Nov 14, 2017 | CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include pa... |
| CVE-2017-12635 | — | — | 99.8% | Nov 14, 2017 | Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB be... |
| CVE-2017-16815 | — | — | 1.0% | Nov 14, 2017 | installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XS... |
| CVE-2017-9085 | — | — | 0.9% | Nov 14, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrar... |
| CVE-2017-6264 | — | — | 1.6% | Nov 14, 2017 | An elevation of privilege vulnerability exists in the NVIDIA GPU driver (gm20b_clk_throt_set_cdev_state), where an out o... |
| CVE-2017-16239 | — | — | 1.4% | Nov 14, 2017 | In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authentica... |
| CVE-2017-6275 | — | — | 0.4% | Nov 14, 2017 | An information disclosure vulnerability exists in the Thermal Driver, where a missing bounds checking in the thermal dri... |
| CVE-2017-6274 | — | — | 0.5% | Nov 14, 2017 | An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal throt... |
| CVE-2017-12624 | — | — | 3.7% | Nov 14, 2017 | Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to ... |
| CVE-2017-16810 | — | — | 0.8% | Nov 14, 2017 | Cross-site scripting (XSS) vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 (fixed in 3.13.7) allow... |
| CVE-2017-1710 | — | — | 3.5% | Nov 13, 2017 | A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a... |
| CVE-2017-1477 | — | — | 1.4% | Nov 13, 2017 | IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection (XXE) attack when processin... |
| CVE-2017-1453 | — | — | 2.9% | Nov 13, 2017 | IBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now