2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12988 | — | — | 2.4% | Sep 14, 2017 | The telnet parser in tcpdump before 4.9.2 has a buffer over-read in print-telnet.c:telnet_parse(). |
| CVE-2017-12986 | — | — | 3.4% | Sep 14, 2017 | The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6_print(). |
| CVE-2017-12900 | — | — | 2.4% | Sep 14, 2017 | Several protocol parsers in tcpdump before 4.9.2 could cause a buffer over-read in util-print.c:tok2strbuf(). |
| CVE-2017-14431 | — | — | 0.3% | Sep 13, 2017 | Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory c... |
| CVE-2017-12249 | — | — | 3.1% | Sep 13, 2017 | A vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server (CMS) could allow an a... |
| CVE-2017-1556 | — | — | 1.5% | Sep 13, 2017 | IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could allow an authenticated a... |
| CVE-2017-1508 | — | — | 0.3% | Sep 13, 2017 | IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privil... |
| CVE-2017-7561 | — | — | 1.5% | Sep 13, 2017 | Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS reques... |
| CVE-2017-7560 | — | — | 0.3% | Sep 13, 2017 | It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill... |
| CVE-2017-3165 | — | — | 2.0% | Sep 13, 2017 | In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site scripting where one authenticated user can... |
| CVE-2017-14124 | — | — | 0.2% | Sep 13, 2017 | In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start... |
| CVE-2017-12612 | — | — | 0.7% | Sep 13, 2017 | In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This... |
| CVE-2017-11462 | — | — | 5.5% | Sep 13, 2017 | Double free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified impact via vectors involving... |
| CVE-2017-6330 | — | — | 1.1% | Sep 13, 2017 | Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service (resource consu... |
| CVE-2017-7441 | — | — | 0.5% | Sep 13, 2017 | In Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean), a cra... |
| CVE-2017-6008 | — | — | 1.9% | Sep 13, 2017 | A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in ... |
| CVE-2017-6007 | — | — | 0.4% | Sep 13, 2017 | A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in ... |
| CVE-2017-13724 | — | — | 0.5% | Sep 13, 2017 | On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the... |
| CVE-2017-11351 | — | — | 1.4% | Sep 13, 2017 | Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account. |
| CVE-2017-11350 | — | — | 0.4% | Sep 13, 2017 | Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14 devices. |
| CVE-2017-14412 | — | — | 0.8% | Sep 13, 2017 | An invalid memory write was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vul... |
| CVE-2017-14411 | — | — | 1.6% | Sep 13, 2017 | A stack-based buffer overflow was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. T... |
| CVE-2017-14410 | — | — | 0.9% | Sep 13, 2017 | A buffer over-read was discovered in III_i_stereo in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulner... |
| CVE-2017-14409 | — | — | 1.6% | Sep 13, 2017 | A buffer overflow was discovered in III_dequantize_sample in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. Th... |
| CVE-2017-14408 | — | — | 0.9% | Sep 13, 2017 | A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The v... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now