2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-10904 | — | — | 2.0% | Dec 16, 2017 | Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors. |
| CVE-2017-17712 | HIGH | 7 | 0.3% | Dec 16, 2017 | The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl th... |
| CVE-2017-14184 | — | — | 2.1% | Dec 15, 2017 | An Information Disclosure vulnerability in Fortinet FortiClient for Windows 5.6.0 and below versions, FortiClient for Ma... |
| CVE-2017-17701 | — | — | 1.3% | Dec 15, 2017 | K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x950025c8 DeviceIoControl request... |
| CVE-2017-17700 | — | — | 1.3% | Dec 15, 2017 | K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x950025a4 DeviceIoControl request... |
| CVE-2017-17699 | — | — | 1.3% | Dec 15, 2017 | K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x950025ac DeviceIoControl request... |
| CVE-2017-12373 | — | — | 12.8% | Dec 15, 2017 | A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550... |
| CVE-2017-17698 | — | — | 1.5% | Dec 15, 2017 | Zoho ManageEngine Password Manager Pro 9 before 9.4 (9400) has reflected XSS in SearchResult.ec and BulkAccessControlVie... |
| CVE-2017-17556 | — | — | 0.6% | Dec 15, 2017 | A debug tool in Synaptics TouchPad drivers allows local users with administrative access to obtain sensitive information... |
| CVE-2017-16788 | — | — | 4.0% | Dec 15, 2017 | Directory traversal vulnerability in the "Upload Groupkey" functionality in the Web Configuration Utility in Meinberg LA... |
| CVE-2017-16787 | — | — | 6.6% | Dec 15, 2017 | The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote attackers to read ... |
| CVE-2017-16776 | — | — | 1.2% | Dec 15, 2017 | Security researchers discovered an authentication bypass vulnerability in version 2.0.2 of the Conserus Workflow Intelli... |
| CVE-2017-14101 | — | — | 1.4% | Dec 15, 2017 | A security researcher found an XML External Entity (XXE) vulnerability on the Conserus Image Repository archive solution... |
| CVE-2017-15890 | — | — | 0.8% | Dec 15, 2017 | Cross-site scripting (XSS) vulnerability in Disclaimer in Synology MailPlus Server before 1.4.0-0415 allows remote authe... |
| CVE-2017-1000384 | — | — | — | Dec 15, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-16355. Reason: This candidate is a reservation ... |
| CVE-2017-17697 | HIGH | 8.6 | 1.4% | Dec 15, 2017 | The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/... |
| CVE-2017-17696 | — | — | 0.7% | Dec 15, 2017 | Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/s... |
| CVE-2017-17695 | — | — | 1.0% | Dec 15, 2017 | Techno - Portfolio Management Panel through 2017-11-16 allows SQL Injection via the panel/search.php s parameter. |
| CVE-2017-17694 | — | — | 0.5% | Dec 15, 2017 | Techno - Portfolio Management Panel through 2017-11-16 allows XSS via the panel/search.php s parameter. |
| CVE-2017-17693 | — | — | 0.6% | Dec 15, 2017 | Techno - Portfolio Management Panel through 2017-11-16 does not check authorization for panel/portfolio.php?action=delet... |
| CVE-2017-17670 | — | — | 2.2% | Dec 15, 2017 | In VideoLAN VLC media player through 2.2.8, there is a type conversion vulnerability in modules/demux/mp4/libmp4.c in th... |
| CVE-2017-17405 | — | — | 73.9% | Dec 15, 2017 | Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and p... |
| CVE-2017-16355 | MEDIUM | 4.7 | 0.4% | Dec 14, 2017 | In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Ent... |
| CVE-2017-5264 | — | — | 2.7% | Dec 14, 2017 | Versions of Nexpose prior to 6.4.66 fail to adequately validate the source of HTTP requests intended for the Automated A... |
| CVE-2017-7344 | — | — | 1.8% | Dec 14, 2017 | A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0 allows attacker to gain privil... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now