2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-16618 | — | — | 4.4% | Nov 8, 2017 | An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMixin before 2.0.0a12. A "Load YA... |
| CVE-2017-16616 | — | — | 3.6% | Nov 8, 2017 | An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py in PyAny... |
| CVE-2017-16615 | — | — | 3.4% | Nov 8, 2017 | An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_query method in parser.py in MLA... |
| CVE-2017-16650 | — | — | 0.4% | Nov 7, 2017 | The qmi_wwan_bind function in drivers/net/usb/qmi_wwan.c in the Linux kernel through 4.13.11 allows local users to cause... |
| CVE-2017-16649 | — | — | 0.4% | Nov 7, 2017 | The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local use... |
| CVE-2017-16648 | — | — | 0.4% | Nov 7, 2017 | The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local... |
| CVE-2017-16647 | — | — | 0.4% | Nov 7, 2017 | drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL... |
| CVE-2017-16646 | — | — | 0.4% | Nov 7, 2017 | drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of ... |
| CVE-2017-16645 | — | — | 0.4% | Nov 7, 2017 | The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local... |
| CVE-2017-16644 | — | — | 0.4% | Nov 7, 2017 | The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users ... |
| CVE-2017-16643 | — | — | 0.5% | Nov 7, 2017 | The parse_hid_report_descriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local ... |
| CVE-2017-16561 | — | — | 1.4% | Nov 7, 2017 | /view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL i... |
| CVE-2017-16642 | — | — | 26.4% | Nov 7, 2017 | In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian hand... |
| CVE-2017-16641 | — | — | 3.2% | Nov 7, 2017 | lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrd... |
| CVE-2017-15887 | — | — | 1.9% | Nov 7, 2017 | An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server bef... |
| CVE-2017-16638 | — | — | 1.4% | Nov 6, 2017 | The Gentoo net-misc/vde package before version 2.3.2-r4 may allow members of the "qemu" group to gain root privileges by... |
| CVE-2017-13681 | — | — | 0.4% | Nov 6, 2017 | Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, whi... |
| CVE-2017-13680 | — | — | 0.4% | Nov 6, 2017 | Prior to SEP 12.1 RU6 MP9 & SEP 14 RU1 Symantec Endpoint Protection Windows endpoint can encounter a situation whereby a... |
| CVE-2017-16637 | — | — | 0.3% | Nov 6, 2017 | In Vectura Perfect Privacy VPN Manager v1.10.10 and v1.10.11, when resetting the network data via the software client, w... |
| CVE-2017-16636 | — | — | 0.6% | Nov 6, 2017 | In Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and edit post function body ... |
| CVE-2017-16635 | — | — | 0.8% | Nov 6, 2017 | In TinyWebGallery v2.4, an XSS vulnerability is located in the `mkname`, `mkitem`, and `item` parameters of the `Add/Cre... |
| CVE-2017-14031 | — | — | 0.3% | Nov 6, 2017 | An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user ... |
| CVE-2017-14029 | — | — | 0.9% | Nov 6, 2017 | An Uncontrolled Search Path Element issue was discovered in Trihedral VTScada 11.3.03 and prior. The program will execut... |
| CVE-2017-14025 | — | — | 0.4% | Nov 6, 2017 | An Improper Input Validation issue was discovered in ABB FOX515T release 1.0. An improper input validation vulnerability... |
| CVE-2017-14016 | — | — | 16.0% | Nov 6, 2017 | A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The applicati... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now