2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9928 | MEDIUM | 5.5 | — | Jun 26, 2017 | In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers to... |
| CVE-2017-2782 | MEDIUM | 6.5 | 1.0% | Jun 22, 2017 | An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b.... |
| CVE-2017-1304 | MEDIUM | 6.2 | 0.4% | Jun 21, 2017 | IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storag... |
| CVE-2017-2829 | MEDIUM | 6.5 | 2.9% | Jun 21, 2017 | An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD ... |
| CVE-2017-9130 | MEDIUM | 5.5 | 2.9% | Jun 21, 2017 | The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to caus... |
| CVE-2017-1000369 | MEDIUM | 4 | 0.5% | Jun 19, 2017 | Exim supports the use of multiple "-p" command line arguments which are malloc()'ed and never free()'ed, used in conjunc... |
| CVE-2017-9503 | MEDIUM | 5.5 | 0.4% | Jun 16, 2017 | QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest O... |
| CVE-2017-9375 | MEDIUM | 5.5 | 0.4% | Jun 16, 2017 | QEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local guest OS privileged users ... |
| CVE-2017-9374 | MEDIUM | 5.5 | 0.4% | Jun 16, 2017 | Memory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows local guest OS privileged u... |
| CVE-2017-9373 | MEDIUM | 5.5 | 0.4% | Jun 16, 2017 | Memory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows local guest OS privileged u... |
| CVE-2017-9591 | MEDIUM | 5.9 | 0.5% | Jun 16, 2017 | The "PCB Mobile" by Phelps County Bank app 3.0.2 -- aka pcb-mobile/id436891295 for iOS does not verify X.509 certificate... |
| CVE-2017-9585 | MEDIUM | 5.9 | 0.5% | Jun 16, 2017 | The "Community State Bank - Lamar Mobile Banking" by Community State Bank - Lamar app 3.0.3 -- aka community-state-bank-... |
| CVE-2017-9505 | MEDIUM | 4.3 | 1.3% | Jun 15, 2017 | Atlassian Confluence starting with 4.3.0 before 6.2.1 did not check if a user had permission to view a page when creatin... |
| CVE-2017-8529 | MEDIUM | 6.5 | 14.2% | Jun 15, 2017 | Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Se... |
| CVE-2017-0289 | MEDIUM | 5 | 3.1% | Jun 15, 2017 | Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT ... |
| CVE-2017-0288 | MEDIUM | 5 | 3.0% | Jun 15, 2017 | Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT ... |
| CVE-2017-0287 | MEDIUM | 5 | 3.1% | Jun 15, 2017 | Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT ... |
| CVE-2017-0286 | MEDIUM | 5 | 3.0% | Jun 15, 2017 | Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT ... |
| CVE-2017-0285 | MEDIUM | 5 | 3.0% | Jun 15, 2017 | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT... |
| CVE-2017-0284 | MEDIUM | 5 | 3.0% | Jun 15, 2017 | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT... |
| CVE-2017-0282 | MEDIUM | 5 | 3.0% | Jun 15, 2017 | Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT... |
| CVE-2017-9621 | MEDIUM | 6.1 | 1.0% | Jun 14, 2017 | Cross-site scripting (XSS) vulnerability in modules/Base/Lang/Administrator/update_translation.php in EPESI in Telaxus/E... |
| CVE-2017-5697 | MEDIUM | 6.5 | 0.9% | Jun 14, 2017 | Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60... |
| CVE-2017-6655 | MEDIUM | 6.5 | 0.7% | Jun 13, 2017 | A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an... |
| CVE-2017-4974 | MEDIUM | 6.5 | 1.0% | Jun 13, 2017 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now