2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-15298 | — | — | 1.6% | Oct 14, 2017 | Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memory... |
| CVE-2017-6224 | — | — | 1.2% | Oct 13, 2017 | Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 rele... |
| CVE-2017-6223 | — | — | 1.7% | Oct 13, 2017 | Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain ... |
| CVE-2017-10624 | HIGH | 7.5 | 0.4% | Oct 13, 2017 | Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of att... |
| CVE-2017-10623 | HIGH | 7.1 | 0.9% | Oct 13, 2017 | Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-midd... |
| CVE-2017-10622 | CRITICAL | 9.8 | 5.4% | Oct 13, 2017 | An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote un... |
| CVE-2017-10621 | MEDIUM | 5.3 | 1.8% | Oct 13, 2017 | A denial of service vulnerability in telnetd service on Juniper Networks Junos OS allows remote unauthenticated attacker... |
| CVE-2017-10620 | HIGH | 7.4 | 0.6% | Oct 13, 2017 | Juniper Networks Junos OS on SRX series devices do not verify the HTTPS server certificate before downloading anti-virus... |
| CVE-2017-10619 | HIGH | 7.5 | 1.3% | Oct 13, 2017 | When Express Path (formerly known as service offloading) is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SR... |
| CVE-2017-10618 | MEDIUM | 5.9 | 1.5% | Oct 13, 2017 | When the 'bgp-error-tolerance' feature â€" designed to help mitigate remote session resets from malformed path... |
| CVE-2017-10617 | MEDIUM | 5 | 2.3% | Oct 13, 2017 | The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an atta... |
| CVE-2017-10616 | MEDIUM | 5.3 | 1.3% | Oct 13, 2017 | The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected relea... |
| CVE-2017-10615 | CRITICAL | 9.8 | 2.5% | Oct 13, 2017 | A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated n... |
| CVE-2017-10614 | MEDIUM | 5.3 | 1.7% | Oct 13, 2017 | A vulnerability in telnetd service on Junos OS allows a remote attacker to cause a limited memory and/or CPU consumption... |
| CVE-2017-10613 | MEDIUM | 5.5 | 0.3% | Oct 13, 2017 | A vulnerability in a specific loopback filter action command, processed in a specific logical order of operation, in a r... |
| CVE-2017-10612 | HIGH | 8 | 1.3% | Oct 13, 2017 | A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configurat... |
| CVE-2017-10611 | MEDIUM | 6.5 | 0.9% | Oct 13, 2017 | If extended statistics are enabled via 'set chassis extended-statistics', when executing any operation that fetches inte... |
| CVE-2017-10610 | HIGH | 7.5 | 1.1% | Oct 13, 2017 | On SRX Series devices, a crafted ICMP packet embedded within a NAT64 IPv6 to IPv4 tunnel may cause the flowd process to ... |
| CVE-2017-10608 | HIGH | 7.5 | 1.0% | Oct 13, 2017 | Any Juniper Networks SRX series device with one or more ALGs enabled may experience a flowd crash when traffic is proces... |
| CVE-2017-10607 | HIGH | 7.5 | 1.0% | Oct 13, 2017 | Juniper Networks Junos OS 16.1R1, and services releases based off of 16.1R1, are vulnerable to the receipt of a crafted ... |
| CVE-2017-10606 | MEDIUM | 4.4 | 0.3% | Oct 13, 2017 | Version 4.40 of the TPM (Trusted Platform Module) firmware on Juniper Networks SRX300 Series has a weakness in generatin... |
| CVE-2017-15276 | — | — | 9.5% | Oct 13, 2017 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design ga... |
| CVE-2017-15014 | — | — | 4.9% | Oct 13, 2017 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design ga... |
| CVE-2017-15013 | — | — | 6.6% | Oct 13, 2017 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design ga... |
| CVE-2017-15012 | — | — | 7.8% | Oct 13, 2017 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the i... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now