2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-13078 | — | — | 2.1% | Oct 17, 2017 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshak... |
| CVE-2017-13077 | — | — | 2.4% | Oct 17, 2017 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during... |
| CVE-2017-15385 | — | — | 1.0% | Oct 16, 2017 | The store_versioninfo_gnu_verdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows remote attackers to cause... |
| CVE-2017-9368 | — | — | 1.4% | Oct 16, 2017 | An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access t... |
| CVE-2017-9367 | — | — | 1.6% | Oct 16, 2017 | A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute o... |
| CVE-2017-15384 | — | — | 1.0% | Oct 16, 2017 | rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action. |
| CVE-2017-15383 | — | — | 0.5% | Oct 16, 2017 | Nero 7.10.1.0 has an unquoted BINARY_PATH_NAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGR... |
| CVE-2017-15361 | — | — | 9.8% | Oct 16, 2017 | The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000... |
| CVE-2017-15297 | — | — | 3.0% | Oct 16, 2017 | SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993. |
| CVE-2017-15296 | — | — | 0.5% | Oct 16, 2017 | The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964. |
| CVE-2017-15295 | — | — | 2.4% | Oct 16, 2017 | Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 25... |
| CVE-2017-15294 | — | — | 1.0% | Oct 16, 2017 | The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964. |
| CVE-2017-15293 | — | — | 3.9% | Oct 16, 2017 | Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal r... |
| CVE-2017-14952 | — | — | 5.1% | Oct 16, 2017 | Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote atta... |
| CVE-2017-15375 | — | — | 0.9% | Oct 16, 2017 | Multiple client-side cross site scripting vulnerabilities have been discovered in the WpJobBoard v4.5.1 web-application ... |
| CVE-2017-15374 | — | — | 4.8% | Oct 16, 2017 | Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management... |
| CVE-2017-15373 | — | — | 1.7% | Oct 16, 2017 | E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the search private area). |
| CVE-2017-15372 | — | — | 1.6% | Oct 16, 2017 | There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14... |
| CVE-2017-15371 | — | — | 1.6% | Oct 16, 2017 | There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A... |
| CVE-2017-15370 | — | — | 1.7% | Oct 16, 2017 | There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted i... |
| CVE-2017-15369 | — | — | 1.2% | Oct 16, 2017 | The build_filter_chain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a... |
| CVE-2017-15368 | — | — | 1.3% | Oct 16, 2017 | The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service... |
| CVE-2017-15362 | — | — | 1.2% | Oct 16, 2017 | osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/ticket... |
| CVE-2017-15303 | — | — | 1.5% | Oct 16, 2017 | In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because... |
| CVE-2017-15302 | — | — | 0.4% | Oct 16, 2017 | In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver (e.g., cpuz143_x64.sys for version... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now