2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-8380 | — | — | 3.9% | Aug 28, 2017 | Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact vi... |
| CVE-2017-13710 | — | — | 2.7% | Aug 27, 2017 | The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binuti... |
| CVE-2017-13709 | — | — | 1.1% | Aug 27, 2017 | In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a ... |
| CVE-2017-12595 | — | — | 1.8% | Aug 27, 2017 | The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause ... |
| CVE-2017-7693 | — | — | 3.9% | Aug 26, 2017 | Directory traversal vulnerability in viewer_script.jsp in Riverbed OPNET App Response Xpert (ARX) version 9.6.1 allows r... |
| CVE-2017-9650 | — | — | 2.4% | Aug 25, 2017 | An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL... |
| CVE-2017-9644 | — | — | 1.4% | Aug 25, 2017 | An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan... |
| CVE-2017-9640 | — | — | 8.5% | Aug 25, 2017 | A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5;... |
| CVE-2017-7934 | — | — | 2.1% | Aug 25, 2017 | An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Net... |
| CVE-2017-7930 | — | — | 2.0% | Aug 25, 2017 | An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Dat... |
| CVE-2017-7926 | — | — | 0.8% | Aug 25, 2017 | A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). The vulnerabilit... |
| CVE-2017-12857 | — | — | 1.6% | Aug 25, 2017 | Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7... |
| CVE-2017-12707 | — | — | 2.6% | Aug 25, 2017 | A Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1.6.30.144 and prior. Op... |
| CVE-2017-12694 | — | — | 3.8% | Aug 25, 2017 | A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. An attacker may be able to use a simple GE... |
| CVE-2017-13697 | — | — | 0.8% | Aug 25, 2017 | controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable. |
| CVE-2017-12709 | — | — | 0.3% | Aug 25, 2017 | A Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, M... |
| CVE-2017-12703 | — | — | 0.6% | Aug 25, 2017 | A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-31... |
| CVE-2017-13695 | — | — | 0.4% | Aug 25, 2017 | The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the op... |
| CVE-2017-13694 | — | — | 0.4% | Aug 25, 2017 | The acpi_ps_complete_final_op() function in drivers/acpi/acpica/psobject.c in the Linux kernel through 4.12.9 does not f... |
| CVE-2017-13693 | — | — | 0.4% | Aug 25, 2017 | The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flus... |
| CVE-2017-13692 | — | — | 1.1% | Aug 25, 2017 | In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault... |
| CVE-2017-13686 | — | — | 0.4% | Aug 24, 2017 | net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTM_F_FIB_M... |
| CVE-2017-9555 | — | — | 0.8% | Aug 24, 2017 | Cross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.0-3414 allows re... |
| CVE-2017-13671 | — | — | 1.0% | Aug 24, 2017 | app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of th... |
| CVE-2017-12879 | — | — | 1.1% | Aug 24, 2017 | Cross-site scripting (XSS-STORED) vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now