2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-10602 | HIGH | 7 | 0.4% | Jul 17, 2017 | A buffer overflow vulnerability in Junos OS CLI may allow a local authenticated user with read only privileges and acces... |
| CVE-2017-1000363 | HIGH | 7.8 | 0.6% | Jul 17, 2017 | Linux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that parport_ptr integer is sta... |
| CVE-2017-1000080 | HIGH | 7.5 | 1.0% | Jul 17, 2017 | Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets. |
| CVE-2017-1000079 | HIGH | 7.5 | 1.3% | Jul 17, 2017 | Linux foundation ONOS 1.9.0 is vulnerable to a DoS. |
| CVE-2017-1000068 | HIGH | 7.5 | 1.8% | Jul 17, 2017 | TestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split disablement feature resu... |
| CVE-2017-1000053 | HIGH | 8.1 | 1.9% | Jul 17, 2017 | Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization fu... |
| CVE-2017-1000052 | HIGH | 7.8 | 0.4% | Jul 17, 2017 | Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, ... |
| CVE-2017-1000050 | HIGH | 7.5 | 3.3% | Jul 17, 2017 | JasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed to check to see if the i... |
| CVE-2017-1000026 | HIGH | 7.5 | 1.9% | Jul 17, 2017 | Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attacker... |
| CVE-2017-1000010 | HIGH | 7.8 | 2.1% | Jul 17, 2017 | Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution. |
| CVE-2017-7529 | HIGH | 7.5 | 62.6% | Jul 13, 2017 | Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range fi... |
| CVE-2017-11103 | HIGH | 8.1 | 5.1% | Jul 13, 2017 | Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service... |
| CVE-2017-11173 | HIGH | 8.8 | 2.3% | Jul 13, 2017 | Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS request... |
| CVE-2017-2863 | HIGH | 7.8 | 1.2% | Jul 12, 2017 | An out-of-bounds write vulnerability exists in the PDF parsing functionality of Infix 7.1.5. A specially crafted PDF fil... |
| CVE-2017-2820 | HIGH | 8.8 | 4.4% | Jul 12, 2017 | An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Pop... |
| CVE-2017-2818 | HIGH | 7.5 | 2.0% | Jul 12, 2017 | An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically... |
| CVE-2017-2814 | HIGH | 7.5 | 2.7% | Jul 12, 2017 | An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0. A specifically... |
| CVE-2017-9844 | HIGH | 7.5 | 5.5% | Jul 12, 2017 | SAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly execute arbitrary code ... |
| CVE-2017-11176 | HIGH | 7.8 | 3.6% | Jul 11, 2017 | The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retr... |
| CVE-2017-8570 | HIGH | 7.8 | 89.9% | Jul 11, 2017 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Mic... |
| CVE-2017-8561 | HIGH | 7 | 0.8% | Jul 11, 2017 | Windows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, a... |
| CVE-2017-7730 | HIGH | 7.5 | 1.3% | Jul 11, 2017 | iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will s... |
| CVE-2017-7729 | HIGH | 7.5 | 0.7% | Jul 11, 2017 | On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext. |
| CVE-2017-7726 | HIGH | 7.5 | 0.7% | Jul 11, 2017 | iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability. |
| CVE-2017-11113 | HIGH | 7.5 | 2.4% | Jul 8, 2017 | In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lea... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now