2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6836 | MEDIUM | 5.5 | 2.9% | Mar 20, 2017 | Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Li... |
| CVE-2017-6834 | MEDIUM | 5.5 | 2.6% | Mar 20, 2017 | Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.... |
| CVE-2017-6832 | MEDIUM | 5.5 | 3.0% | Mar 20, 2017 | Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, ... |
| CVE-2017-6831 | MEDIUM | 5.5 | 3.1% | Mar 20, 2017 | Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5... |
| CVE-2017-6356 | MEDIUM | 5.3 | 1.0% | Mar 20, 2017 | Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified... |
| CVE-2017-5987 | MEDIUM | 5.5 | 0.4% | Mar 20, 2017 | The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privil... |
| CVE-2017-6958 | MEDIUM | 6.1 | 0.6% | Mar 17, 2017 | An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to i... |
| CVE-2017-6955 | MEDIUM | 5.3 | 1.8% | Mar 17, 2017 | An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress. A user is able... |
| CVE-2017-0073 | MEDIUM | 4.3 | 33.4% | Mar 17, 2017 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; W... |
| CVE-2017-0060 | MEDIUM | 5.5 | 15.9% | Mar 17, 2017 | The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; W... |
| CVE-2017-0059 | MEDIUM | 4.3 | 62.0% | Mar 17, 2017 | Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via ... |
| CVE-2017-0022 | MEDIUM | 6.5 | 18.1% | Mar 17, 2017 | Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Wind... |
| CVE-2017-5857 | MEDIUM | 6.5 | 0.4% | Mar 16, 2017 | Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows l... |
| CVE-2017-5856 | MEDIUM | 6.5 | 0.4% | Mar 16, 2017 | Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS ... |
| CVE-2017-5667 | MEDIUM | 6.5 | 0.4% | Mar 16, 2017 | The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privil... |
| CVE-2017-5898 | MEDIUM | 5.5 | 0.4% | Mar 15, 2017 | Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when b... |
| CVE-2017-5579 | MEDIUM | 6.5 | 0.4% | Mar 15, 2017 | Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS priv... |
| CVE-2017-5578 | MEDIUM | 6.5 | 0.4% | Mar 15, 2017 | Memory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) a... |
| CVE-2017-5552 | MEDIUM | 6.5 | 0.4% | Mar 15, 2017 | Memory leak in the virgl_resource_attach_backing function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) all... |
| CVE-2017-5526 | MEDIUM | 6.5 | 0.4% | Mar 15, 2017 | Memory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial o... |
| CVE-2017-5525 | MEDIUM | 6.5 | 0.4% | Mar 15, 2017 | Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of ... |
| CVE-2017-6505 | MEDIUM | 6.5 | 0.4% | Mar 15, 2017 | The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0 allows local guest OS u... |
| CVE-2017-6414 | MEDIUM | 6.5 | 0.4% | Mar 15, 2017 | Memory leak in the vcard_apdu_new function in card_7816.c in libcacard before 2.5.3 allows local guest OS users to cause... |
| CVE-2017-6386 | MEDIUM | 6.5 | 0.4% | Mar 15, 2017 | Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest O... |
| CVE-2017-3000 | MEDIUM | 6.5 | 8.4% | Mar 14, 2017 | Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now