2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-8824 | HIGH | 7.8 | 1.4% | Dec 5, 2017 | The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privilege... |
| CVE-2017-17066 | — | — | 2.2% | Dec 5, 2017 | The (1) i2pd before 2.17 and (2) kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garl... |
| CVE-2017-16930 | — | — | 34.3% | Dec 5, 2017 | The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute... |
| CVE-2017-16929 | — | — | 12.9% | Dec 5, 2017 | The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversa... |
| CVE-2017-15889 | — | — | 72.5% | Dec 4, 2017 | Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authe... |
| CVE-2017-12080 | — | — | 1.4% | Dec 4, 2017 | An information exposure vulnerability in default HTTP configuration file in Synology Photo Station before 6.8.1-3458 and... |
| CVE-2017-12079 | — | — | 1.8% | Dec 4, 2017 | Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3... |
| CVE-2017-16721 | MEDIUM | 6.1 | 0.9% | Dec 4, 2017 | A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerabilit... |
| CVE-2017-17057 | — | — | 1.2% | Dec 4, 2017 | There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280. The vulnerability exists due to insufficient filtratio... |
| CVE-2017-17056 | — | — | 0.7% | Dec 4, 2017 | The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the application user using a '... |
| CVE-2017-17130 | — | — | 1.8% | Dec 4, 2017 | The ff_free_picture_tables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote attackers to cause a denial ... |
| CVE-2017-17129 | — | — | 1.2% | Dec 4, 2017 | The ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in Libav 12.2 allows remote attackers to cause a denial of ser... |
| CVE-2017-17128 | — | — | 1.0% | Dec 4, 2017 | The h264_slice_init function in libavcodec/h264_slice.c in Libav 12.2 allows remote attackers to cause a denial of servi... |
| CVE-2017-17127 | — | — | 1.8% | Dec 4, 2017 | The vc1_decode_frame function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service ... |
| CVE-2017-17126 | — | — | 1.7% | Dec 4, 2017 | The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service... |
| CVE-2017-17125 | — | — | 1.6% | Dec 4, 2017 | nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote attackers to cause a den... |
| CVE-2017-17124 | — | — | 1.8% | Dec 4, 2017 | The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distr... |
| CVE-2017-17123 | — | — | 1.6% | Dec 4, 2017 | The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distribut... |
| CVE-2017-17122 | — | — | 1.9% | Dec 4, 2017 | The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows... |
| CVE-2017-17121 | — | — | 1.7% | Dec 4, 2017 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to... |
| CVE-2017-17114 | — | — | 0.5% | Dec 4, 2017 | ntguard.sys and ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 have a Memory Corruption vulnerability via a 0x... |
| CVE-2017-17113 | — | — | 0.4% | Dec 4, 2017 | ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer dereference via a 0x830000c4 DeviceIoControl... |
| CVE-2017-17112 | — | — | 0.5% | Dec 4, 2017 | ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoCo... |
| CVE-2017-17104 | — | — | 1.7% | Dec 4, 2017 | Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file.php via $_GET['src'] or ... |
| CVE-2017-17103 | — | — | 1.2% | Dec 4, 2017 | Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability ca... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now