2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-10612 | HIGH | 8 | 1.3% | Oct 13, 2017 | A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configurat... |
| CVE-2017-10610 | HIGH | 7.5 | 1.1% | Oct 13, 2017 | On SRX Series devices, a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to ... |
| CVE-2017-10608 | HIGH | 7.5 | 1.0% | Oct 13, 2017 | Any Juniper Networks SRX series device with one or more ALGs enabled may experience a flowd crash when traffic is proces... |
| CVE-2017-10607 | HIGH | 7.5 | 1.0% | Oct 13, 2017 | Juniper Networks Junos OS 16.1R1, and services releases based off of 16.1R1, are vulnerable to the receipt of a crafted ... |
| CVE-2017-11826 | HIGH | 7.8 | 81.6% | Oct 13, 2017 | Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Serv... |
| CVE-2017-11774 | HIGH | 7.8 | 59.9% | Oct 13, 2017 | Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary command... |
| CVE-2017-2888 | HIGH | 8.8 | 3.1% | Oct 11, 2017 | An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted f... |
| CVE-2017-2887 | HIGH | 8.8 | 2.7% | Oct 11, 2017 | An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL_image 2.0.1. A spe... |
| CVE-2017-12188 | HIGH | 7.8 | 0.4% | Oct 11, 2017 | arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse gu... |
| CVE-2017-1002153 | HIGH | 7.5 | 1.1% | Oct 6, 2017 | Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submis... |
| CVE-2017-2920 | HIGH | 7.8 | 1.8% | Oct 5, 2017 | An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A speciall... |
| CVE-2017-2880 | HIGH | 7.8 | 1.4% | Oct 5, 2017 | An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A speciall... |
| CVE-2017-12106 | HIGH | 8.8 | 1.8% | Oct 5, 2017 | A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A specially... |
| CVE-2017-12728 | HIGH | 7.8 | 0.4% | Oct 5, 2017 | An Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2.02.0007 and prior. Aut... |
| CVE-2017-1000253 | HIGH | 7.8 | 10.7% | Oct 5, 2017 | Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb7... |
| CVE-2017-1000112 | HIGH | 7 | 20.8% | Oct 5, 2017 | Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE ... |
| CVE-2017-1000111 | HIGH | 7.8 | 0.4% | Oct 5, 2017 | Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-8655... |
| CVE-2017-1000098 | HIGH | 7.5 | 2.1% | Oct 5, 2017 | The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size su... |
| CVE-2017-1000097 | HIGH | 7.5 | 1.3% | Oct 5, 2017 | On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in... |
| CVE-2017-12617 | HIGH | 8.1 | 100.0% | Oct 4, 2017 | When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTT... |
| CVE-2017-14848 | HIGH | 8.8 | 3.0% | Oct 3, 2017 | WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter. |
| CVE-2017-11321 | HIGH | 7.2 | 8.3% | Oct 3, 2017 | The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admi... |
| CVE-2017-12237 | HIGH | 7.5 | 6.9% | Sep 29, 2017 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.... |
| CVE-2017-12235 | HIGH | 7.5 | 6.9% | Sep 29, 2017 | A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 t... |
| CVE-2017-12234 | HIGH | 7.5 | 6.9% | Sep 29, 2017 | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now