2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-14650 | — | — | 4.0% | Sep 21, 2017 | A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilize... |
| CVE-2017-14649 | — | — | 1.3% | Sep 21, 2017 | ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denia... |
| CVE-2017-14647 | — | — | 2.0% | Sep 21, 2017 | A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.... |
| CVE-2017-14646 | — | — | 2.2% | Sep 21, 2017 | The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a ... |
| CVE-2017-14645 | — | — | 1.2% | Sep 21, 2017 | A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.... |
| CVE-2017-14644 | — | — | 2.4% | Sep 21, 2017 | A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an o... |
| CVE-2017-14643 | — | — | 1.6% | Sep 21, 2017 | The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leadin... |
| CVE-2017-14642 | — | — | 1.7% | Sep 21, 2017 | A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability cause... |
| CVE-2017-14641 | — | — | 1.7% | Sep 21, 2017 | A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-... |
| CVE-2017-14640 | — | — | 1.7% | Sep 21, 2017 | A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 ver... |
| CVE-2017-14639 | — | — | 1.7% | Sep 21, 2017 | AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, wh... |
| CVE-2017-14638 | — | — | 1.6% | Sep 21, 2017 | AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, le... |
| CVE-2017-14321 | — | — | 0.6% | Sep 21, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3... |
| CVE-2017-14320 | — | — | 1.4% | Sep 21, 2017 | Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter... |
| CVE-2017-12930 | — | — | 3.1% | Sep 21, 2017 | SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users... |
| CVE-2017-12929 | — | — | 10.1% | Sep 21, 2017 | Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users ... |
| CVE-2017-12928 | — | — | 2.9% | Sep 21, 2017 | A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows... |
| CVE-2017-9725 | — | — | 1.2% | Sep 21, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data... |
| CVE-2017-9724 | — | — | 0.4% | Sep 21, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to ga... |
| CVE-2017-9720 | — | — | 0.4% | Sep 21, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera d... |
| CVE-2017-9677 | — | — | 0.3% | Sep 21, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, vari... |
| CVE-2017-9676 | — | — | 0.3% | Sep 21, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and r... |
| CVE-2017-8281 | — | — | 0.4% | Sep 21, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to alr... |
| CVE-2017-8280 | — | — | 0.3% | Sep 21, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store a... |
| CVE-2017-8278 | — | — | 0.5% | Sep 21, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspeci... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now