2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-11054 | — | — | 0.5% | Oct 10, 2017 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while pr... |
| CVE-2017-11053 | — | — | 0.4% | Oct 10, 2017 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when qos... |
| CVE-2017-11052 | — | — | 0.5% | Oct 10, 2017 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while pr... |
| CVE-2017-11051 | — | — | 0.5% | Oct 10, 2017 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, informat... |
| CVE-2017-11050 | — | — | 0.2% | Oct 10, 2017 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when the... |
| CVE-2017-11048 | — | — | 0.2% | Oct 10, 2017 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a dis... |
| CVE-2017-11046 | — | — | 0.2% | Oct 10, 2017 | In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when an ... |
| CVE-2017-13679 | — | — | 0.3% | Oct 10, 2017 | A denial of service (DoS) attack in Symantec Encryption Desktop before SED 10.4.1 MP2HF1 allows remote attackers to make... |
| CVE-2017-13675 | — | — | 0.3% | Oct 10, 2017 | A denial of service (DoS) attack in Symantec Endpoint Encryption before SEE 11.1.3HF2 allows remote attackers to make a ... |
| CVE-2017-15216 | — | — | 0.8% | Oct 10, 2017 | MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to a... |
| CVE-2017-12623 | — | — | 1.9% | Oct 10, 2017 | An authorized user could upload a template which contained malicious code and accessed sensitive files via an XML Extern... |
| CVE-2017-13706 | — | — | 2.0% | Oct 10, 2017 | XML external entity (XXE) vulnerability in the import package functionality of the deployment module in Lansweeper befor... |
| CVE-2017-12861 | — | — | 3.3% | Oct 10, 2017 | The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are a... |
| CVE-2017-12860 | — | — | 3.5% | Oct 10, 2017 | The Epson "EasyMP" software is designed to remotely stream a users computer to supporting projectors.These devices are a... |
| CVE-2017-14943 | — | — | 1.1% | Oct 10, 2017 | Trapeze TransitMaster is vulnerable to information disclosure (emails / hashed passwords) via a modified userID field in... |
| CVE-2017-5637 | — | — | 73.7% | Oct 10, 2017 | Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper... |
| CVE-2017-15038 | — | — | 0.3% | Oct 10, 2017 | Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users t... |
| CVE-2017-14980 | — | — | 22.5% | Oct 10, 2017 | Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username... |
| CVE-2017-14614 | — | — | 1.6% | Oct 10, 2017 | Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before ... |
| CVE-2017-14603 | — | — | 3.2% | Oct 10, 2017 | In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cer... |
| CVE-2017-13723 | — | — | 0.4% | Oct 10, 2017 | In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overfl... |
| CVE-2017-13721 | — | — | 0.4% | Oct 10, 2017 | In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared ... |
| CVE-2017-15185 | — | — | 1.6% | Oct 9, 2017 | plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbis_block_clear function with uninitialized data upon detection... |
| CVE-2017-14973 | — | — | 0.5% | Oct 9, 2017 | IDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) is vulnerable to Stored Cross-Site Scripting (XSS) v... |
| CVE-2017-14972 | — | — | 1.3% | Oct 9, 2017 | InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-Del... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now