2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9645 | — | — | 0.2% | Sep 20, 2017 | An Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmit... |
| CVE-2017-7924 | — | — | 22.2% | Sep 20, 2017 | An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L... |
| CVE-2017-14339 | — | — | 2.5% | Sep 20, 2017 | The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is p... |
| CVE-2017-8772 | — | — | 1.4% | Sep 20, 2017 | On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials ... |
| CVE-2017-8771 | — | — | 1.4% | Sep 20, 2017 | On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials ... |
| CVE-2017-8770 | — | — | 10.3% | Sep 20, 2017 | There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesys... |
| CVE-2017-12883 | — | — | 5.9% | Sep 19, 2017 | Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 al... |
| CVE-2017-12837 | — | — | 6.2% | Sep 19, 2017 | Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-R... |
| CVE-2017-6315 | — | — | 16.6% | Sep 19, 2017 | Astaro Security Gateway (aka ASG) 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx... |
| CVE-2017-14033 | — | — | 7.7% | Sep 19, 2017 | The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows a... |
| CVE-2017-10784 | — | — | 16.4% | Sep 19, 2017 | The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allow... |
| CVE-2017-14311 | — | — | 1.0% | Sep 19, 2017 | The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402... |
| CVE-2017-14143 | — | — | 75.5% | Sep 19, 2017 | The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, wh... |
| CVE-2017-14142 | — | — | 1.8% | Sep 19, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in Kaltura before 13.2.0 allow remote attackers to inject arbitrary ... |
| CVE-2017-10700 | — | — | 2.3% | Sep 19, 2017 | In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system ... |
| CVE-2017-14601 | — | — | 1.2% | Sep 19, 2017 | Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $_GET['forwhat'], resulting in ... |
| CVE-2017-14600 | — | — | 1.2% | Sep 19, 2017 | Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $_GET['del_black'], resulting in... |
| CVE-2017-14597 | — | — | 0.5% | Sep 19, 2017 | AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/... |
| CVE-2017-9803 | — | — | 2.2% | Sep 18, 2017 | Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authe... |
| CVE-2017-6147 | — | — | 1.3% | Sep 18, 2017 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisc... |
| CVE-2017-14580 | — | — | 0.4% | Sep 18, 2017 | XnView Classic for Windows Version 2.41 allows attackers to execute arbitrary code or cause a denial of service via a cr... |
| CVE-2017-14579 | — | — | 0.4% | Sep 18, 2017 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, rel... |
| CVE-2017-14578 | — | — | 0.5% | Sep 18, 2017 | IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a cra... |
| CVE-2017-14577 | — | — | 0.4% | Sep 18, 2017 | STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, rel... |
| CVE-2017-14576 | — | — | 0.3% | Sep 18, 2017 | STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafte... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now