2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-16997 | — | — | 2.7% | Dec 18, 2017 | elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGI... |
| CVE-2017-17718 | — | — | 1.3% | Dec 17, 2017 | The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation. |
| CVE-2017-17717 | — | — | 0.7% | Dec 17, 2017 | Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP... |
| CVE-2017-17716 | — | — | 0.9% | Dec 17, 2017 | GitLab 9.4.x before 9.4.2 does not support LDAP SSL certificate verification, but a verify_certificates LDAP option was ... |
| CVE-2017-16950 | — | — | 0.8% | Dec 17, 2017 | Cross - site scripting (XSS) vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary ... |
| CVE-2017-17714 | — | — | 1.2% | Dec 16, 2017 | Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, ... |
| CVE-2017-17713 | — | — | 2.0% | Dec 16, 2017 | Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTT... |
| CVE-2017-17715 | — | — | 1.7% | Dec 16, 2017 | The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12-08 for Android allows d... |
| CVE-2017-14134 | — | — | 0.6% | Dec 16, 2017 | A Reflected XSS Vulnerability affects the forgotten password page of Maplesoft Maple T.A. 2016.0.6 (Customer Hosted) via... |
| CVE-2017-3196 | — | — | 0.7% | Dec 16, 2017 | PCAUSA Rawether framework does not properly validate BPF data, allowing a crafted malicious BPF program to perform opera... |
| CVE-2017-3195 | CRITICAL | 9.8 | 21.4% | Dec 16, 2017 | Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack... |
| CVE-2017-3194 | — | — | 1.3% | Dec 16, 2017 | Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which ... |
| CVE-2017-3193 | HIGH | 8.8 | 5.6% | Dec 16, 2017 | Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overf... |
| CVE-2017-3192 | — | — | 39.5% | Dec 16, 2017 | D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credent... |
| CVE-2017-3191 | — | — | 62.5% | Dec 16, 2017 | D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the re... |
| CVE-2017-3190 | — | — | 0.4% | Dec 16, 2017 | Flash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and earlier fails to properly va... |
| CVE-2017-3186 | — | — | 6.1% | Dec 16, 2017 | ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use non-random default crede... |
| CVE-2017-3185 | — | — | 3.2% | Dec 16, 2017 | ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC have a web application that ... |
| CVE-2017-3184 | — | — | 5.9% | Dec 16, 2017 | ACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail to properly restrict ac... |
| CVE-2017-14093 | — | — | 1.0% | Dec 16, 2017 | The Log Query and Quarantine Query pages in Trend Micro ScanMail for Exchange 12.0 are vulnerable to cross site scriptin... |
| CVE-2017-14092 | — | — | 0.9% | Dec 16, 2017 | The absence of Anti-CSRF tokens in Trend Micro ScanMail for Exchange 12.0 web interface forms could allow an attacker to... |
| CVE-2017-14091 | — | — | 0.7% | Dec 16, 2017 | A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which certain specific installations that utilize a ... |
| CVE-2017-14090 | — | — | 1.3% | Dec 16, 2017 | A vulnerability in Trend Micro ScanMail for Exchange 12.0 exists in which some communications to the update servers are ... |
| CVE-2017-11397 | — | — | 1.8% | Dec 16, 2017 | A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthe... |
| CVE-2017-10905 | — | — | 0.6% | Dec 16, 2017 | A vulnerability in applications created using Qt for Android prior to 5.9.3 allows attackers to alter environment variab... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now