2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-4971 | MEDIUM | 5.9 | 15.9% | Jun 13, 2017 | An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcVi... |
| CVE-2017-4967 | MEDIUM | 6.1 | 1.9% | Jun 13, 2017 | An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions p... |
| CVE-2017-4965 | MEDIUM | 6.1 | 3.3% | Jun 13, 2017 | An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions p... |
| CVE-2017-8871 | MEDIUM | 6.5 | 13.0% | Jun 12, 2017 | The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial o... |
| CVE-2017-8834 | MEDIUM | 6.5 | 3.8% | Jun 12, 2017 | The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of servic... |
| CVE-2017-5004 | MEDIUM | 5.4 | 1.0% | Jun 9, 2017 | EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance ver... |
| CVE-2017-5003 | MEDIUM | 6.1 | 1.2% | Jun 9, 2017 | EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance ver... |
| CVE-2017-9525 | MEDIUM | 6.7 | 0.6% | Jun 9, 2017 | In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer scrip... |
| CVE-2017-9330 | MEDIUM | 5.6 | 0.3% | Jun 8, 2017 | QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to c... |
| CVE-2017-9310 | MEDIUM | 5.6 | 0.3% | Jun 8, 2017 | QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to c... |
| CVE-2017-4905 | MEDIUM | 5.5 | 1.2% | Jun 7, 2017 | VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi... |
| CVE-2017-9060 | MEDIUM | 5.5 | 0.4% | Jun 1, 2017 | Memory leak in the virtio_gpu_set_scanout function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local ... |
| CVE-2017-6512 | MEDIUM | 5.9 | 2.4% | Jun 1, 2017 | Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for Perl allows attackers to ... |
| CVE-2017-9287 | MEDIUM | 6.5 | 7.1% | May 29, 2017 | servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access t... |
| CVE-2017-9249 | MEDIUM | 5.4 | 0.7% | May 28, 2017 | Cross-site scripting (XSS) vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web scr... |
| CVE-2017-5646 | MEDIUM | 6.8 | 0.8% | May 26, 2017 | For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate ... |
| CVE-2017-8537 | MEDIUM | 5.5 | 16.8% | May 26, 2017 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve... |
| CVE-2017-8536 | MEDIUM | 5.5 | 16.8% | May 26, 2017 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve... |
| CVE-2017-8535 | MEDIUM | 5.5 | 16.8% | May 26, 2017 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve... |
| CVE-2017-9037 | MEDIUM | 6.1 | 2.5% | May 26, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remo... |
| CVE-2017-9032 | MEDIUM | 6.1 | 2.5% | May 26, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remo... |
| CVE-2017-2801 | MEDIUM | 6.5 | 1.3% | May 24, 2017 | A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string compariso... |
| CVE-2017-9216 | MEDIUM | 6.5 | 3.5% | May 24, 2017 | libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_hu... |
| CVE-2017-8379 | MEDIUM | 6.5 | 0.4% | May 23, 2017 | Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged u... |
| CVE-2017-9144 | MEDIUM | 6.5 | 1.9% | May 22, 2017 | In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now