2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6758 | — | — | 3.8% | Aug 7, 2017 | A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticate... |
| CVE-2017-6757 | — | — | 1.6% | Aug 7, 2017 | A vulnerability in Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) could all... |
| CVE-2017-6756 | — | — | 0.8% | Aug 7, 2017 | A vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool through 12.2 could allow an... |
| CVE-2017-6754 | — | — | 1.3% | Aug 7, 2017 | A vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC) Software Collector Applia... |
| CVE-2017-6752 | — | — | 2.2% | Aug 7, 2017 | A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9.6(2) could allow an una... |
| CVE-2017-6747 | — | — | 5.5% | Aug 7, 2017 | A vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow an unauthenticated, rem... |
| CVE-2017-6745 | — | — | 1.7% | Aug 7, 2017 | A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allo... |
| CVE-2017-6664 | — | — | 0.9% | Aug 7, 2017 | A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, aut... |
| CVE-2017-6420 | — | — | 1.4% | Aug 7, 2017 | The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use... |
| CVE-2017-6419 | — | — | 2.0% | Aug 7, 2017 | mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (hea... |
| CVE-2017-6418 | — | — | 1.4% | Aug 7, 2017 | libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a cra... |
| CVE-2017-12602 | — | — | 3.0% | Aug 7, 2017 | OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstr... |
| CVE-2017-12600 | — | — | 2.2% | Aug 7, 2017 | OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrate... |
| CVE-2017-12596 | — | — | 1.9% | Aug 7, 2017 | In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp du... |
| CVE-2017-10677 | — | — | 0.5% | Aug 6, 2017 | Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demons... |
| CVE-2017-12588 | — | — | 2.8% | Aug 6, 2017 | The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly al... |
| CVE-2017-12587 | — | — | 2.0% | Aug 6, 2017 | ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c. |
| CVE-2017-12480 | — | — | 1.0% | Aug 6, 2017 | Sandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan horse dwmapi.dll or pro... |
| CVE-2017-12586 | — | — | 2.7% | Aug 6, 2017 | SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to ... |
| CVE-2017-12585 | — | — | 1.7% | Aug 6, 2017 | SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), ... |
| CVE-2017-12583 | — | — | 3.3% | Aug 6, 2017 | DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variable) to doku.php. |
| CVE-2017-12581 | — | — | 6.7% | Aug 6, 2017 | GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This als... |
| CVE-2017-12568 | — | — | 1.9% | Aug 6, 2017 | Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows... |
| CVE-2017-12572 | — | — | 0.5% | Aug 5, 2017 | Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x befo... |
| CVE-2017-12566 | — | — | 1.2% | Aug 5, 2017 | In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allows... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now