2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-14414 | MEDIUM | 6.1 | 1.1% | Sep 13, 2017 | D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/... |
| CVE-2017-14413 | MEDIUM | 6.1 | 1.1% | Sep 13, 2017 | D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/... |
| CVE-2017-8758 | MEDIUM | 6.1 | 3.4% | Sep 13, 2017 | Microsoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft Exchange Outlook Web Access... |
| CVE-2017-14341 | MEDIUM | 6.5 | 2.0% | Sep 12, 2017 | ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted... |
| CVE-2017-8041 | MEDIUM | 6.1 | 0.9% | Sep 9, 2017 | In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a use... |
| CVE-2017-8040 | MEDIUM | 6.5 | 1.1% | Sep 9, 2017 | In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an XX... |
| CVE-2017-9095 | MEDIUM | 5.5 | 3.7% | Sep 8, 2017 | XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled d... |
| CVE-2017-14175 | MEDIUM | 6.5 | 2.1% | Sep 7, 2017 | In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might caus... |
| CVE-2017-14174 | MEDIUM | 6.5 | 2.2% | Sep 7, 2017 | In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check m... |
| CVE-2017-14173 | MEDIUM | 6.5 | 1.9% | Sep 7, 2017 | In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition... |
| CVE-2017-14172 | MEDIUM | 6.5 | 2.2% | Sep 7, 2017 | In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of File) check might cause ... |
| CVE-2017-5698 | MEDIUM | 4.4 | 0.3% | Sep 5, 2017 | Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions ... |
| CVE-2017-14159 | MEDIUM | 4.7 | 0.3% | Sep 5, 2017 | slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might all... |
| CVE-2017-14121 | MEDIUM | 5.5 | 1.1% | Sep 3, 2017 | The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer derefer... |
| CVE-2017-14107 | MEDIUM | 6.5 | 3.2% | Sep 1, 2017 | The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attacker... |
| CVE-2017-13672 | MEDIUM | 5.5 | 1.0% | Sep 1, 2017 | QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to c... |
| CVE-2017-1446 | MEDIUM | 5.4 | 0.7% | Aug 30, 2017 | IBM Emptoris Spend Analysis 9.5.0.0 through 10.1.1 is vulnerable to cross-site scripting. This vulnerability allows user... |
| CVE-2017-13769 | MEDIUM | 6.5 | 1.4% | Aug 30, 2017 | The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a den... |
| CVE-2017-13768 | MEDIUM | 6.5 | 2.1% | Aug 30, 2017 | Null Pointer Dereference in the IdentifyImage function in MagickCore/identify.c in ImageMagick through 7.0.6-10 allows a... |
| CVE-2017-13760 | MEDIUM | 5.5 | 0.7% | Aug 29, 2017 | In The Sleuth Kit (TSK) 4.4.2, fls hangs on a corrupt exfat image in tsk_img_read() in tsk/img/img_io.c in libtskimg.a. |
| CVE-2017-13756 | MEDIUM | 5.5 | 0.7% | Aug 29, 2017 | In The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite recursion in dos_load_ext_table() in tsk/v... |
| CVE-2017-13755 | MEDIUM | 5.5 | 0.7% | Aug 29, 2017 | In The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in iso9660_proc_dir() in ... |
| CVE-2017-3151 | MEDIUM | 6.1 | 1.9% | Aug 29, 2017 | Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the ... |
| CVE-2017-13734 | MEDIUM | 6.5 | 2.1% | Aug 29, 2017 | There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remot... |
| CVE-2017-13733 | MEDIUM | 6.5 | 2.7% | Aug 29, 2017 | There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a r... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now