2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-14152 | HIGH | 8.8 | 5.1% | Sep 5, 2017 | A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulne... |
| CVE-2017-14151 | HIGH | 8.8 | 5.2% | Sep 5, 2017 | An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The v... |
| CVE-2017-14123 | HIGH | 8.8 | 6.1% | Sep 4, 2017 | Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any... |
| CVE-2017-14120 | HIGH | 7.5 | 2.1% | Sep 3, 2017 | unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for RAR v2 archives: pathname... |
| CVE-2017-10850 | HIGH | 7.8 | 1.0% | Sep 1, 2017 | Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271,... |
| CVE-2017-13711 | HIGH | 7.5 | 3.8% | Sep 1, 2017 | Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to c... |
| CVE-2017-14041 | HIGH | 8.8 | 5.7% | Aug 30, 2017 | A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vuln... |
| CVE-2017-14040 | HIGH | 8.8 | 4.8% | Aug 30, 2017 | An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage func... |
| CVE-2017-14039 | HIGH | 8.8 | 4.4% | Aug 30, 2017 | A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. ... |
| CVE-2017-12735 | HIGH | 7.4 | 1.1% | Aug 30, 2017 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who perform... |
| CVE-2017-12734 | HIGH | 7.5 | 1.4% | Aug 30, 2017 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V1.81.2). An attacker with net... |
| CVE-2017-13752 | HIGH | 7.5 | 3.6% | Aug 29, 2017 | There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead t... |
| CVE-2017-13751 | HIGH | 7.5 | 3.6% | Aug 29, 2017 | There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to... |
| CVE-2017-13750 | HIGH | 7.5 | 3.7% | Aug 29, 2017 | There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that w... |
| CVE-2017-13749 | HIGH | 7.5 | 3.6% | Aug 29, 2017 | There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lea... |
| CVE-2017-13748 | HIGH | 7.5 | 4.7% | Aug 29, 2017 | There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will ... |
| CVE-2017-13747 | HIGH | 7.5 | 3.6% | Aug 29, 2017 | There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead t... |
| CVE-2017-13746 | HIGH | 7.5 | 4.0% | Aug 29, 2017 | There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that w... |
| CVE-2017-13728 | HIGH | 7.5 | 3.9% | Aug 29, 2017 | There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input wi... |
| CVE-2017-6594 | HIGH | 7.5 | 1.8% | Aug 28, 2017 | The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mech... |
| CVE-2017-12817 | HIGH | 7.5 | 0.9% | Aug 25, 2017 | In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted. |
| CVE-2017-9511 | HIGH | 7.5 | 3.2% | Aug 24, 2017 | The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to... |
| CVE-2017-9512 | HIGH | 7.5 | 2.0% | Aug 24, 2017 | The mostActiveCommitters.do resource in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote att... |
| CVE-2017-13146 | HIGH | 8.8 | 1.3% | Aug 23, 2017 | In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.... |
| CVE-2017-10663 | HIGH | 7.8 | 0.4% | Aug 19, 2017 | The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and seg... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now