2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-5054 | HIGH | 8.8 | 1.4% | Oct 27, 2017 | An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for A... |
| CVE-2017-5052 | HIGH | 8.8 | 1.5% | Oct 27, 2017 | An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Lin... |
| CVE-2017-5996 | HIGH | 7.8 | 1.3% | Oct 26, 2017 | The agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4 allows DLL hijac... |
| CVE-2017-12160 | HIGH | 7.2 | 1.9% | Oct 26, 2017 | It was found that Keycloak oauth would permit an authenticated resource to obtain an access/refresh token pair from the ... |
| CVE-2017-15908 | HIGH | 7.5 | 23.6% | Oct 26, 2017 | In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an... |
| CVE-2017-15871 | HIGH | 7.5 | 1.1% | Oct 24, 2017 | The deserialize function in serialize-to-js through 1.1.1 allows attackers to cause a denial of service via vectors invo... |
| CVE-2017-12613 | HIGH | 7.1 | 1.7% | Oct 24, 2017 | When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Ru... |
| CVE-2017-9946 | HIGH | 7.5 | 24.8% | Oct 23, 2017 | A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3... |
| CVE-2017-14328 | HIGH | 7.5 | 1.3% | Oct 23, 2017 | Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot. |
| CVE-2017-15746 | HIGH | 7.8 | 1.8% | Oct 22, 2017 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly h... |
| CVE-2017-11292 | HIGH | 8.8 | 12.1% | Oct 22, 2017 | Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untr... |
| CVE-2017-10955 | HIGH | 8.8 | 6.7% | Oct 19, 2017 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection ... |
| CVE-2017-10388 | HIGH | 7.5 | 3.2% | Oct 19, 2017 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions... |
| CVE-2017-10309 | HIGH | 7.1 | 8.8% | Oct 19, 2017 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affecte... |
| CVE-2017-10271 | HIGH | 7.5 | 100.0% | Oct 19, 2017 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supporte... |
| CVE-2017-12271 | HIGH | 8.8 | 0.7% | Oct 19, 2017 | A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute u... |
| CVE-2017-5531 | HIGH | 8 | 1.3% | Oct 17, 2017 | Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Inter... |
| CVE-2017-0316 | HIGH | 7.8 | 0.3% | Oct 16, 2017 | In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemServic... |
| CVE-2017-15265 | HIGH | 7 | 0.4% | Oct 16, 2017 | Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (... |
| CVE-2017-15221 | HIGH | 7.8 | 5.5% | Oct 16, 2017 | ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324. |
| CVE-2017-15363 | HIGH | 7.5 | 13.6% | Oct 15, 2017 | Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used ... |
| CVE-2017-10624 | HIGH | 7.5 | 0.4% | Oct 13, 2017 | Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of att... |
| CVE-2017-10623 | HIGH | 7.1 | 0.9% | Oct 13, 2017 | Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-midd... |
| CVE-2017-10620 | HIGH | 7.4 | 0.6% | Oct 13, 2017 | Juniper Networks Junos OS on SRX series devices do not verify the HTTPS server certificate before downloading anti-virus... |
| CVE-2017-10619 | HIGH | 7.5 | 1.3% | Oct 13, 2017 | When Express Path (formerly known as service offloading) is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SR... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now