2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-13732 | MEDIUM | 6.5 | 2.9% | Aug 29, 2017 | There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a... |
| CVE-2017-13731 | MEDIUM | 6.5 | 2.9% | Aug 29, 2017 | There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead ... |
| CVE-2017-13730 | MEDIUM | 6.5 | 2.9% | Aug 29, 2017 | There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead... |
| CVE-2017-13729 | MEDIUM | 6.5 | 2.9% | Aug 29, 2017 | There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remot... |
| CVE-2017-10837 | MEDIUM | 6.1 | 0.9% | Aug 29, 2017 | Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web scr... |
| CVE-2017-12950 | MEDIUM | 6.5 | 5.1% | Aug 28, 2017 | The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL p... |
| CVE-2017-12877 | MEDIUM | 6.5 | 2.3% | Aug 28, 2017 | Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attacke... |
| CVE-2017-12876 | MEDIUM | 6.5 | 3.0% | Aug 28, 2017 | Heap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of servi... |
| CVE-2017-12809 | MEDIUM | 6.5 | 0.4% | Aug 23, 2017 | QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privilege... |
| CVE-2017-13145 | MEDIUM | 6.5 | 1.6% | Aug 23, 2017 | In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly valida... |
| CVE-2017-12982 | MEDIUM | 5.5 | 2.9% | Aug 21, 2017 | The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCou... |
| CVE-2017-11664 | MEDIUM | 6.5 | 8.4% | Aug 17, 2017 | The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory ... |
| CVE-2017-7674 | MEDIUM | 4.3 | 8.0% | Aug 11, 2017 | The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did no... |
| CVE-2017-3651 | MEDIUM | 4.3 | 2.0% | Aug 8, 2017 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that ar... |
| CVE-2017-3641 | MEDIUM | 4.9 | 3.2% | Aug 8, 2017 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are aff... |
| CVE-2017-3636 | MEDIUM | 5.3 | 0.4% | Aug 8, 2017 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are... |
| CVE-2017-10243 | MEDIUM | 6.5 | 2.9% | Aug 8, 2017 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported ve... |
| CVE-2017-10198 | MEDIUM | 6.8 | 2.6% | Aug 8, 2017 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported ... |
| CVE-2017-10179 | MEDIUM | 6.5 | 1.6% | Aug 8, 2017 | Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite (subco... |
| CVE-2017-10135 | MEDIUM | 5.9 | 2.6% | Aug 8, 2017 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versi... |
| CVE-2017-10109 | MEDIUM | 5.3 | 3.1% | Aug 8, 2017 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Suppo... |
| CVE-2017-10108 | MEDIUM | 5.3 | 3.1% | Aug 8, 2017 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Suppo... |
| CVE-2017-10105 | MEDIUM | 4.3 | 1.9% | Aug 8, 2017 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affecte... |
| CVE-2017-10081 | MEDIUM | 4.3 | 2.2% | Aug 8, 2017 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions t... |
| CVE-2017-10069 | MEDIUM | 5.3 | 1.5% | Aug 8, 2017 | Vulnerability in the Oracle Payment Interface component of Oracle Hospitality Applications (subcomponent: Core). The sup... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now