2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-10053 | MEDIUM | 5.3 | 3.5% | Aug 8, 2017 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versio... |
| CVE-2017-10039 | MEDIUM | 6.8 | 1.6% | Aug 8, 2017 | Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Web Client). Suppor... |
| CVE-2017-12643 | MEDIUM | 6.5 | 2.5% | Aug 7, 2017 | ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c. |
| CVE-2017-6770 | MEDIUM | 4.2 | 1.7% | Aug 7, 2017 | Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, a... |
| CVE-2017-6665 | MEDIUM | 6.5 | 0.4% | Aug 7, 2017 | A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unaut... |
| CVE-2017-6663 | MEDIUM | 6.5 | 2.1% | Aug 7, 2017 | A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unaut... |
| CVE-2017-10819 | MEDIUM | 5.9 | 0.8% | Aug 4, 2017 | MaLion for Mac 4.3.0 to 5.2.1 does not properly validate certificates, which may allow an attacker to eavesdrop on an en... |
| CVE-2017-11334 | MEDIUM | 4.4 | 0.5% | Aug 2, 2017 | The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users ... |
| CVE-2017-10806 | MEDIUM | 5.5 | 0.4% | Aug 2, 2017 | Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a den... |
| CVE-2017-2285 | MEDIUM | 6.1 | 1.5% | Aug 2, 2017 | Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject ar... |
| CVE-2017-12061 | MEDIUM | 6.1 | 2.9% | Aug 1, 2017 | An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x before 2.5.2. Some variables under us... |
| CVE-2017-1303 | MEDIUM | 6.1 | 1.3% | Jul 31, 2017 | IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerab... |
| CVE-2017-11548 | MEDIUM | 5.5 | 3.9% | Jul 31, 2017 | The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of servic... |
| CVE-2017-11331 | MEDIUM | 5.5 | 3.8% | Jul 31, 2017 | The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of serv... |
| CVE-2017-9491 | MEDIUM | 5.3 | 1.3% | Jul 31, 2017 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firm... |
| CVE-2017-9476 | MEDIUM | 6.5 | 1.7% | Jul 31, 2017 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firm... |
| CVE-2017-11683 | MEDIUM | 6.5 | 2.7% | Jul 27, 2017 | There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 tha... |
| CVE-2017-11682 | MEDIUM | 6.1 | 0.8% | Jul 27, 2017 | Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or... |
| CVE-2017-11654 | MEDIUM | 5.9 | 2.0% | Jul 26, 2017 | An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination o... |
| CVE-2017-11651 | MEDIUM | 6.1 | 0.7% | Jul 26, 2017 | NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag. |
| CVE-2017-8919 | MEDIUM | 6.5 | 1.3% | Jul 25, 2017 | NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST API... |
| CVE-2017-11458 | MEDIUM | 6.1 | 1.0% | Jul 25, 2017 | Cross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote ... |
| CVE-2017-11457 | MEDIUM | 6.5 | 1.4% | Jul 25, 2017 | XML external entity (XXE) vulnerability in com.sap.km.cm.ice in SAP NetWeaver AS JAVA 7.5 allows remote authenticated us... |
| CVE-2017-11434 | MEDIUM | 5.5 | 0.4% | Jul 25, 2017 | The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of ... |
| CVE-2017-11448 | MEDIUM | 6.5 | 2.7% | Jul 19, 2017 | The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive in... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now