2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6024 | MEDIUM | 5.9 | 2.6% | May 6, 2017 | A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V2... |
| CVE-2017-8060 | MEDIUM | 5.9 | 0.7% | May 5, 2017 | Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and... |
| CVE-2017-5914 | MEDIUM | 5.9 | 0.6% | May 5, 2017 | The DOT IT Banque Zitouna app 2.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-m... |
| CVE-2017-5905 | MEDIUM | 5.9 | 0.5% | May 5, 2017 | The Dollar Bank Mobile app 2.6.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-mi... |
| CVE-2017-5902 | MEDIUM | 5.9 | 0.5% | May 5, 2017 | The PayQuicker app 1.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle att... |
| CVE-2017-3212 | MEDIUM | 5.9 | 0.8% | May 5, 2017 | The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from S... |
| CVE-2017-3732 | MEDIUM | 5.9 | 15.9% | May 4, 2017 | There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL 1.0.2 before 1.0.2k and 1.1.0 be... |
| CVE-2017-8459 | MEDIUM | 5.3 | 0.7% | May 3, 2017 | Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOT... |
| CVE-2017-8112 | MEDIUM | 6.5 | 0.4% | May 2, 2017 | hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (i... |
| CVE-2017-8086 | MEDIUM | 6.5 | 0.4% | May 2, 2017 | Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS pri... |
| CVE-2017-7440 | MEDIUM | 6.5 | 0.9% | May 2, 2017 | Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2,... |
| CVE-2017-8339 | MEDIUM | 5.5 | 0.4% | Apr 30, 2017 | PSKMAD.sys in Panda Free Antivirus 18.0 allows local users to cause a denial of service (BSoD) via a crafted DeviceIoCon... |
| CVE-2017-2134 | MEDIUM | 6.1 | 1.2% | Apr 28, 2017 | Cross-site scripting vulnerability in ASSETBASE 8.0 and earlier allows remote attackers to inject arbitrary web script o... |
| CVE-2017-3008 | MEDIUM | 6.1 | 3.1% | Apr 27, 2017 | Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier hav... |
| CVE-2017-5046 | MEDIUM | 4.3 | 1.3% | Apr 24, 2017 | V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient pol... |
| CVE-2017-5045 | MEDIUM | 6.1 | 1.2% | Apr 24, 2017 | XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed det... |
| CVE-2017-5044 | MEDIUM | 6.3 | 2.4% | Apr 24, 2017 | Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and... |
| CVE-2017-5042 | MEDIUM | 5.7 | 0.4% | Apr 24, 2017 | Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to si... |
| CVE-2017-5040 | MEDIUM | 4.3 | 22.1% | Apr 24, 2017 | V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neuter... |
| CVE-2017-5038 | MEDIUM | 6.3 | 1.1% | Apr 24, 2017 | Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, wh... |
| CVE-2017-5033 | MEDIUM | 4.3 | 1.5% | Apr 24, 2017 | Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correct... |
| CVE-2017-3600 | MEDIUM | 6.6 | 2.6% | Apr 24, 2017 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that ar... |
| CVE-2017-3577 | MEDIUM | 6.5 | 1.7% | Apr 24, 2017 | Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products (subcomponent: Fr... |
| CVE-2017-3571 | MEDIUM | 6.5 | 1.9% | Apr 24, 2017 | Vulnerability in the PeopleSoft Enterprise SCM eBill Payment component of Oracle PeopleSoft Products (subcomponent: Secu... |
| CVE-2017-3464 | MEDIUM | 4.3 | 2.1% | Apr 24, 2017 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are aff... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now