2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-11112 | HIGH | 7.5 | 2.2% | Jul 8, 2017 | In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of tinfo/parse_entry.c. It co... |
| CVE-2017-9631 | HIGH | 7.5 | 3.2% | Jul 7, 2017 | A Null Pointer Dereference issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.230... |
| CVE-2017-9627 | HIGH | 8.6 | 4.1% | Jul 7, 2017 | An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 20... |
| CVE-2017-1000381 | HIGH | 7.5 | 3.3% | Jul 7, 2017 | The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read me... |
| CVE-2017-2244 | HIGH | 8.8 | 0.7% | Jul 7, 2017 | Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hij... |
| CVE-2017-2226 | HIGH | 7.8 | 1.1% | Jul 7, 2017 | Untrusted search path vulnerability in Setup file of advance preparation for e-Tax software (WEB version) (1.17.1) and e... |
| CVE-2017-7404 | HIGH | 8.8 | 0.6% | Jul 7, 2017 | On the D-Link DIR-615 before v20.12PTb04, if a victim logged in to the Router's Web Interface visits a malicious site fr... |
| CVE-2017-9524 | HIGH | 7.5 | 4.1% | Jul 6, 2017 | The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows ... |
| CVE-2017-8803 | HIGH | 7.8 | 1.6% | Jul 5, 2017 | Notepad++ 7.3.3 (32-bit) with Hex Editor Plugin v0.9.5 might allow user-assisted attackers to execute code via a crafted... |
| CVE-2017-10810 | HIGH | 7.5 | 3.8% | Jul 4, 2017 | Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel thro... |
| CVE-2017-8797 | HIGH | 7.5 | 8.7% | Jul 2, 2017 | The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 ... |
| CVE-2017-10683 | HIGH | 7.5 | 1.2% | Jun 29, 2017 | In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted in... |
| CVE-2017-2851 | HIGH | 7.2 | 1.9% | Jun 29, 2017 | In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted ... |
| CVE-2017-2850 | HIGH | 8.8 | 2.2% | Jun 29, 2017 | In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted ... |
| CVE-2017-2849 | HIGH | 8.8 | 4.8% | Jun 29, 2017 | In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted ... |
| CVE-2017-2848 | HIGH | 8.8 | 4.5% | Jun 29, 2017 | In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted ... |
| CVE-2017-2847 | HIGH | 8.8 | 4.5% | Jun 29, 2017 | In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted ... |
| CVE-2017-2846 | HIGH | 8.8 | 4.5% | Jun 29, 2017 | In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted ... |
| CVE-2017-2845 | HIGH | 8.8 | 7.2% | Jun 29, 2017 | An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Ca... |
| CVE-2017-2844 | HIGH | 8.8 | 3.4% | Jun 29, 2017 | In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted ... |
| CVE-2017-5528 | HIGH | 8.8 | 0.6% | Jun 29, 2017 | Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site ... |
| CVE-2017-10671 | HIGH | 7.8 | 1.5% | Jun 29, 2017 | Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to c... |
| CVE-2017-9985 | HIGH | 7.8 | 0.3% | Jun 28, 2017 | The snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c in the Linux kernel through 4.11.7 allows local users... |
| CVE-2017-9984 | HIGH | 7.8 | 0.4% | Jun 28, 2017 | The snd_msnd_interrupt function in sound/isa/msnd/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users ... |
| CVE-2017-9445 | HIGH | 7.5 | 55.1% | Jun 28, 2017 | In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer tha... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now