2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12439 | HIGH | 7.5 | 0.6% | Aug 5, 2017 | SocuSoft Flash Slideshow Maker Professional through v5.20, when the advanced configuration is used, has an xml_path HTTP... |
| CVE-2017-11657 | HIGH | 7.3 | 0.7% | Aug 4, 2017 | Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\Dashlane dire... |
| CVE-2017-10664 | HIGH | 7.5 | 4.1% | Aug 2, 2017 | qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of servic... |
| CVE-2017-11132 | HIGH | 7.5 | 0.5% | Aug 1, 2017 | An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate pinning is implemented; the... |
| CVE-2017-9492 | HIGH | 7.5 | 1.6% | Jul 31, 2017 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firm... |
| CVE-2017-9489 | HIGH | 8.8 | 0.6% | Jul 31, 2017 | The Comcast firmware on Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST) devices allows configuratio... |
| CVE-2017-11749 | HIGH | 7.8 | 0.8% | Jul 30, 2017 | InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi... |
| CVE-2017-9614 | HIGH | 8.8 | 8.2% | Jul 27, 2017 | The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service... |
| CVE-2017-9611 | HIGH | 7.8 | 2.0% | Jul 26, 2017 | The Ins_MIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial ... |
| CVE-2017-11655 | HIGH | 7.5 | 2.5% | Jul 26, 2017 | A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was mismanaged.... |
| CVE-2017-9233 | HIGH | 7.5 | 8.7% | Jul 25, 2017 | XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the p... |
| CVE-2017-6751 | HIGH | 7.5 | 2.0% | Jul 25, 2017 | A vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could allow an unauthenticated,... |
| CVE-2017-11566 | HIGH | 7.8 | 0.8% | Jul 25, 2017 | AppUse 4.0 allows shell command injection via a proxy field. |
| CVE-2017-8035 | HIGH | 7.5 | 1.4% | Jul 25, 2017 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and p... |
| CVE-2017-8033 | HIGH | 7.8 | 1.0% | Jul 25, 2017 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 a... |
| CVE-2017-7541 | HIGH | 7.8 | 0.5% | Jul 25, 2017 | The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel b... |
| CVE-2017-8036 | HIGH | 7.8 | 1.4% | Jul 24, 2017 | An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The ... |
| CVE-2017-11422 | HIGH | 8.8 | 0.9% | Jul 24, 2017 | Statamic framework before 2.6.0 does not correctly check a session's permissions when the methods from a user's class ar... |
| CVE-2017-11600 | HIGH | 7 | 0.4% | Jul 24, 2017 | net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the... |
| CVE-2017-11591 | HIGH | 7.5 | 3.1% | Jul 24, 2017 | There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of ... |
| CVE-2017-11521 | HIGH | 7.5 | 2.3% | Jul 22, 2017 | The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote atta... |
| CVE-2017-11468 | HIGH | 7.5 | 3.2% | Jul 20, 2017 | Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a use... |
| CVE-2017-11500 | HIGH | 7.5 | 1.6% | Jul 20, 2017 | A directory traversal vulnerability exists in MetInfo 5.3.17. A remote attacker can use ..\ to delete any .zip file via ... |
| CVE-2017-9822 | HIGH | 8.8 | 94.8% | Jul 20, 2017 | DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code e... |
| CVE-2017-11473 | HIGH | 7.8 | 0.4% | Jul 20, 2017 | Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now