2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-18877 | MEDIUM | 6.1 | 0.7% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS attacks could occur against an OAuth 2.... |
| CVE-2017-18876 | MEDIUM | 4.9 | 0.9% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A Syst... |
| CVE-2017-18875 | MEDIUM | 4.9 | 0.7% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2 when local storage for files is used. A Syst... |
| CVE-2017-18871 | HIGH | 7.5 | 1.1% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, 4.3.4, and 4.2.2. It allows attackers to cause a denia... |
| CVE-2017-18870 | MEDIUM | 4.3 | 0.6% | Jun 19, 2020 | An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4. It mishandled webhook access control in the... |
| CVE-2017-9104 | CRITICAL | 9.8 | 2.4% | Jun 18, 2020 | An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encountered. |
| CVE-2017-9103 | CRITICAL | 9.8 | 2.1% | Jun 18, 2020 | An issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from adns__findlabel_next. Witho... |
| CVE-2017-9109 | CRITICAL | 9.8 | 2.1% | Jun 18, 2020 | An issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the first RR that was found the... |
| CVE-2017-9108 | HIGH | 7.5 | 2.2% | Jun 18, 2020 | An issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a stdin read. It is wrong t... |
| CVE-2017-9107 | HIGH | 7.5 | 1.8% | Jun 18, 2020 | An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query... |
| CVE-2017-9106 | HIGH | 7.5 | 1.9% | Jun 18, 2020 | An issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general pattern for formatting... |
| CVE-2017-9105 | HIGH | 8.8 | 3.6% | Jun 18, 2020 | An issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks first because of a wrong nu... |
| CVE-2017-18869 | LOW | 2.5 | 0.3% | Jun 15, 2020 | A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descen... |
| CVE-2017-18868 | HIGH | 7.7 | 0.8% | May 21, 2020 | Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related ... |
| CVE-2017-14200 | — | — | — | May 11, 2020 | Rejected reason: Unused CVE for 2017 |
| CVE-2017-13654 | — | — | — | May 8, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2017-13653 | — | — | — | May 8, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2017-15514 | — | — | — | May 8, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2017-13657 | — | — | — | May 8, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2017-13656 | — | — | — | May 8, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2017-13655 | — | — | — | May 8, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2017-13651 | — | — | — | May 8, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2017-18867 | MEDIUM | 6.8 | 0.4% | May 5, 2020 | Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55... |
| CVE-2017-18866 | MEDIUM | 6.1 | 0.6% | May 5, 2020 | Certain NETGEAR devices are affected by stored XSS. This affects R9000 before 1.0.2.40, R6100 before 1.0.1.1, 6R7500 bef... |
| CVE-2017-18865 | MEDIUM | 6.8 | 0.5% | May 5, 2020 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 befor... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now