2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-17810 | — | — | 1.5% | Dec 21, 2017 | In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service att... |
| CVE-2017-17809 | — | — | 0.8% | Dec 20, 2017 | In Golden Frog VyprVPN before 2.15.0.5828 for macOS, the vyprvpnservice launch daemon has an unprotected XPC service tha... |
| CVE-2017-17807 | — | — | 0.4% | Dec 20, 2017 | The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current ta... |
| CVE-2017-17806 | HIGH | 7.8 | 0.6% | Dec 20, 2017 | The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptogr... |
| CVE-2017-17805 | HIGH | 7.8 | 0.4% | Dec 20, 2017 | The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowin... |
| CVE-2017-14387 | — | — | 0.9% | Dec 20, 2017 | The NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains default NFS export setti... |
| CVE-2017-14385 | — | — | 5.0% | Dec 20, 2017 | An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family... |
| CVE-2017-5263 | — | — | 0.3% | Dec 20, 2017 | Versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can mitigate the effects of CSR... |
| CVE-2017-5262 | — | — | 4.9% | Dec 20, 2017 | In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access... |
| CVE-2017-5261 | — | — | 8.9% | Dec 20, 2017 | In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web ad... |
| CVE-2017-5260 | — | — | 8.1% | Dec 20, 2017 | In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration fil... |
| CVE-2017-5259 | — | — | 39.2% | Dec 20, 2017 | In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web ... |
| CVE-2017-5258 | — | — | 0.5% | Dec 20, 2017 | In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess the RW community string c... |
| CVE-2017-5257 | — | — | 0.5% | Dec 20, 2017 | In version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows (or guesses) the SNMP read/write (RW) ... |
| CVE-2017-5256 | — | — | 0.5% | Dec 20, 2017 | In version 3.5 and prior of Cambium Networks ePMP firmware, all authenticated users have the ability to update the Devic... |
| CVE-2017-5255 | — | — | 74.6% | Dec 20, 2017 | In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web... |
| CVE-2017-5254 | — | — | 53.7% | Dec 20, 2017 | In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the... |
| CVE-2017-6094 | — | — | 1.2% | Dec 20, 2017 | CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS insta... |
| CVE-2017-17747 | — | — | 0.7% | Dec 20, 2017 | Weak access controls in the Device Logout functionality on the TP-Link TL-SG108E v1.0.0 allow remote attackers to call t... |
| CVE-2017-17746 | — | — | 2.0% | Dec 20, 2017 | Weak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with an authenticated adminis... |
| CVE-2017-17745 | — | — | 0.6% | Dec 20, 2017 | Cross-site scripting (XSS) vulnerability in system_name_set.cgi in TP-Link TL-SG108E 1.0.0 allows authenticated remote a... |
| CVE-2017-16735 | — | — | 1.0% | Dec 20, 2017 | A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has bee... |
| CVE-2017-16733 | — | — | 0.9% | Dec 20, 2017 | A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has bee... |
| CVE-2017-16731 | — | — | 0.7% | Dec 20, 2017 | An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to De... |
| CVE-2017-16725 | — | — | 9.2% | Dec 20, 2017 | A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now