2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2017-6758——A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticate...
CVE-2017-6757——A vulnerability in Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) could all...
CVE-2017-6756——A vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool through 12.2 could allow an...
CVE-2017-6754——A vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC) Software Collector Applia...
CVE-2017-6752——A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9.6(2) could allow an una...
CVE-2017-6747——A vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow an unauthenticated, rem...
CVE-2017-6745——A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allo...
CVE-2017-6664——A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, aut...
CVE-2017-6420——The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use...
CVE-2017-6419——mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (hea...
CVE-2017-6418——libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a cra...
CVE-2017-12602——OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstr...
CVE-2017-12600——OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrate...
CVE-2017-12596——In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp du...
CVE-2017-10677——Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demons...
CVE-2017-12588——The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly al...
CVE-2017-12587——ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c.
CVE-2017-12480——Sandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan horse dwmapi.dll or pro...
CVE-2017-12586——SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to ...
CVE-2017-12585——SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), ...
CVE-2017-12583——DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variable) to doku.php.
CVE-2017-12581——GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This als...
CVE-2017-12568——Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows...
CVE-2017-12572——Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x befo...
CVE-2017-12566——In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allows...

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now