2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-16943 | — | — | 46.7% | Nov 25, 2017 | The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitr... |
| CVE-2017-16942 | — | — | 1.2% | Nov 25, 2017 | In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w6... |
| CVE-2017-16941 | — | — | 1.6% | Nov 25, 2017 | October CMS through 1.0.428 does not prevent use of .htaccess in themes, which allows remote authenticated users to exec... |
| CVE-2017-16939 | HIGH | 7.8 | 2.1% | Nov 24, 2017 | The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gai... |
| CVE-2017-16938 | — | — | 1.8% | Nov 24, 2017 | A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecifi... |
| CVE-2017-16936 | — | — | 1.0% | Nov 24, 2017 | Directory Traversal vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9... |
| CVE-2017-16935 | — | — | 7.7% | Nov 24, 2017 | Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to... |
| CVE-2017-16934 | — | — | 13.5% | Nov 24, 2017 | The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin pas... |
| CVE-2017-16933 | — | — | 0.3% | Nov 24, 2017 | etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, wh... |
| CVE-2017-16932 | HIGH | 7.5 | 5.9% | Nov 23, 2017 | parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities. |
| CVE-2017-16931 | CRITICAL | 9.8 | 4.3% | Nov 23, 2017 | parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandl... |
| CVE-2017-13701 | — | — | 1.6% | Nov 23, 2017 | An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in ... |
| CVE-2017-13699 | — | — | 0.4% | Nov 23, 2017 | An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption method can be retrieved fr... |
| CVE-2017-13698 | — | — | 1.1% | Nov 23, 2017 | An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. An attacker could extract public and private keys ... |
| CVE-2017-15088 | CRITICAL | 9.8 | 8.4% | Nov 23, 2017 | plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name... |
| CVE-2017-16927 | — | — | 0.4% | Nov 23, 2017 | The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted ... |
| CVE-2017-7501 | — | — | 0.4% | Nov 22, 2017 | It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An ... |
| CVE-2017-16879 | HIGH | 7.8 | 2.4% | Nov 22, 2017 | Stack-based buffer overflow in the _nc_write_entry function in tinfo/write_entry.c in ncurses 6.0 allows attackers to ca... |
| CVE-2017-8216 | — | — | 0.7% | Nov 22, 2017 | Warsaw Huawei Smart phones with software of versions earlier than Warsaw-AL00C00B180, versions earlier than Warsaw-TL10C... |
| CVE-2017-8215 | — | — | 0.3% | Nov 22, 2017 | Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions e... |
| CVE-2017-8214 | — | — | 0.3% | Nov 22, 2017 | Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions e... |
| CVE-2017-8213 | — | — | 0.6% | Nov 22, 2017 | Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC... |
| CVE-2017-8212 | — | — | 1.0% | Nov 22, 2017 | The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions ear... |
| CVE-2017-8211 | — | — | 1.0% | Nov 22, 2017 | The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions ear... |
| CVE-2017-8210 | — | — | 1.0% | Nov 22, 2017 | The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions ear... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now