2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12445 | — | — | 0.9% | Aug 17, 2017 | The JB2BitmapCoder::code_row_by_refinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service (i... |
| CVE-2017-12444 | — | — | 0.9% | Aug 17, 2017 | The mdjvu_bitmap_get_bounding_box function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memo... |
| CVE-2017-12443 | — | — | 0.9% | Aug 17, 2017 | The mdjvu_bitmap_pack_row function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read ... |
| CVE-2017-12442 | — | — | 0.9% | Aug 17, 2017 | The row_is_empty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service (invalid memory read and a... |
| CVE-2017-12441 | — | — | 0.9% | Aug 17, 2017 | The row_is_empty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service (invalid memory read and a... |
| CVE-2017-11663 | — | — | 5.5% | Aug 17, 2017 | The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory ... |
| CVE-2017-11662 | — | — | 9.7% | Aug 17, 2017 | The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and appli... |
| CVE-2017-11661 | — | — | 10.8% | Aug 17, 2017 | The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory ... |
| CVE-2017-7551 | — | — | 1.4% | Aug 16, 2017 | 389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout du... |
| CVE-2017-7547 | — | — | 5.6% | Aug 16, 2017 | PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote ... |
| CVE-2017-7546 | — | — | 61.6% | Aug 16, 2017 | PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allow... |
| CVE-2017-8248 | — | — | 3.1% | Aug 16, 2017 | A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 ... |
| CVE-2017-8243 | — | — | 0.5% | Aug 16, 2017 | A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when proce... |
| CVE-2017-6421 | — | — | 0.5% | Aug 16, 2017 | In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a va... |
| CVE-2017-12880 | — | — | — | Aug 16, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11424. Reason: This candidate is a duplicate o... |
| CVE-2017-8665 | — | — | 4.3% | Aug 15, 2017 | The Xamarin.iOS update component on systems running macOS allows an attacker to run arbitrary code as root, aka "Xamarin... |
| CVE-2017-12855 | — | — | 0.4% | Aug 15, 2017 | Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expect... |
| CVE-2017-12852 | — | — | 2.7% | Aug 15, 2017 | The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will sti... |
| CVE-2017-1469 | — | — | 0.4% | Aug 14, 2017 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing ar... |
| CVE-2017-1190 | — | — | 0.3% | Aug 14, 2017 | IBM Emptoris Strategic Supply Management Platform 10.x and 10.1 could allow a local user with special access roles to ex... |
| CVE-2017-12426 | — | — | 3.5% | Aug 14, 2017 | GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x... |
| CVE-2017-12853 | — | — | 0.9% | Aug 14, 2017 | The RealTime RWR-3G-100 Router Firmware Version : Ver1.0.56 is affected by CSRF an attack that forces an end user to exe... |
| CVE-2017-12851 | — | — | 1.3% | Aug 14, 2017 | An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.... |
| CVE-2017-12850 | — | — | 1.3% | Aug 14, 2017 | An authenticated standard user could reset the password of other users (including the admin) by altering form data. Affe... |
| CVE-2017-11156 | — | — | 2.2% | Aug 14, 2017 | Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 uses weak permissions (0777) for ui/dlm/btsear... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now