2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-13153 | — | — | 0.2% | Dec 6, 2017 | An elevation of privilege vulnerability in the Android media framework (libaudioservice). Product: Android. Versions: 8.... |
| CVE-2017-13152 | — | — | 0.4% | Dec 6, 2017 | An information disclosure vulnerability in the Android media framework (libmedia drm). Product: Android. Versions: 5.1.1... |
| CVE-2017-13151 | — | — | 1.4% | Dec 6, 2017 | A remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1,... |
| CVE-2017-13150 | — | — | 0.5% | Dec 6, 2017 | An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.... |
| CVE-2017-13149 | — | — | 0.5% | Dec 6, 2017 | An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.... |
| CVE-2017-13148 | — | — | 0.4% | Dec 6, 2017 | A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0... |
| CVE-2017-0880 | — | — | 0.4% | Dec 6, 2017 | A denial of service vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, 7.1.... |
| CVE-2017-0879 | — | — | 0.6% | Dec 6, 2017 | An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.... |
| CVE-2017-0878 | — | — | 1.4% | Dec 6, 2017 | A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 8.0. Android... |
| CVE-2017-0877 | — | — | 1.4% | Dec 6, 2017 | A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ... |
| CVE-2017-0876 | — | — | 1.4% | Dec 6, 2017 | A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0. Android ... |
| CVE-2017-0874 | — | — | 0.4% | Dec 6, 2017 | A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, ... |
| CVE-2017-0873 | — | — | 0.4% | Dec 6, 2017 | A denial of service vulnerability in the Android media framework (libmpeg2). Product: Android. Versions: 6.0, 6.0.1, 7.0... |
| CVE-2017-0872 | — | — | 1.4% | Dec 6, 2017 | A remote code execution vulnerability in the Android media framework (libskia). Product: Android. Versions: 7.0, 7.1.1, ... |
| CVE-2017-0871 | — | — | 0.2% | Dec 6, 2017 | An elevation of privilege vulnerability in the Android framework (framework base). Product: Android. Versions: 8.0. Andr... |
| CVE-2017-0870 | — | — | 0.2% | Dec 6, 2017 | An elevation of privilege vulnerability in the Android framework (libminikin). Product: Android. Versions: 5.1.1, 6.0, 6... |
| CVE-2017-0837 | — | — | 0.2% | Dec 6, 2017 | An elevation of privilege vulnerability in the Android media framework (libaudiopolicymanager). Product: Android. Versio... |
| CVE-2017-17383 | — | — | 1.2% | Dec 6, 2017 | Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job ... |
| CVE-2017-17069 | — | — | 1.6% | Dec 6, 2017 | ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if Ac... |
| CVE-2017-17434 | — | — | 3.4% | Dec 6, 2017 | The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemon_... |
| CVE-2017-17433 | — | — | 1.8% | Dec 6, 2017 | The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds wi... |
| CVE-2017-17432 | — | — | 3.1% | Dec 6, 2017 | OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote attackers to cause a denial of ... |
| CVE-2017-14374 | — | — | 1.3% | Dec 6, 2017 | The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) is protected using a hard-coded... |
| CVE-2017-15868 | HIGH | 7.8 | 0.4% | Dec 5, 2017 | The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2... |
| CVE-2017-14018 | — | — | 0.4% | Dec 5, 2017 | An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now