2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2017-10662HIGH7.8The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment c...
CVE-2017-10661HIGH7Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denia...
CVE-2017-11323HIGH7.8Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a cr...
CVE-2017-11653HIGH7.8Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gain...
CVE-2017-11652HIGH8.4Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users t...
CVE-2017-11185HIGH7.5The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference...
CVE-2017-9454HIGH7.5Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remo...
CVE-2017-12892HIGH7.8Foxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading vulnerability, wherein...
CVE-2017-7548HIGH7.5PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated at...
CVE-2017-12864HIGH8.8In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to inte...
CVE-2017-12863HIGH8.8In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_...
CVE-2017-12862HIGH8.8In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause co...
CVE-2017-6327HIGH8.8The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situ...
CVE-2017-3106HIGH8.8Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF fil...
CVE-2017-3085HIGH7.4Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclo...
CVE-2017-12754HIGH8.8Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier for ASUS devices and ASUS firmwa...
CVE-2017-8516HIGH7.5Microsoft SQL Server Analysis Services in Microsoft SQL Server 2012, Microsoft SQL Server 2014, and Microsoft SQL Server...
CVE-2017-10176HIGH7.5Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported ...
CVE-2017-10125HIGH7.1Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affecte...
CVE-2017-10118HIGH7.5Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versi...
CVE-2017-10116HIGH8.3Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported ...
CVE-2017-10115HIGH7.5Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versi...
CVE-2017-10114HIGH8.3Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected ar...
CVE-2017-10078HIGH8.1Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting). The supported version that is affect...
CVE-2017-10074HIGH8.3Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions t...

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now