2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-2810 | HIGH | 7.5 | 4.9% | Jun 14, 2017 | An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can e... |
| CVE-2017-0663 | HIGH | 7.8 | 2.3% | Jun 14, 2017 | A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbi... |
| CVE-2017-4991 | HIGH | 7.2 | 0.9% | Jun 13, 2017 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to... |
| CVE-2017-4972 | HIGH | 7.5 | 1.1% | Jun 13, 2017 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to... |
| CVE-2017-4966 | HIGH | 7.8 | 0.4% | Jun 13, 2017 | An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions p... |
| CVE-2017-9557 | HIGH | 7.5 | 1.7% | Jun 12, 2017 | register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sendi... |
| CVE-2017-9543 | HIGH | 7.5 | 1.3% | Jun 12, 2017 | register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords v... |
| CVE-2017-9527 | HIGH | 7.8 | 1.0% | Jun 11, 2017 | The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-based... |
| CVE-2017-9023 | HIGH | 7.5 | 2.3% | Jun 8, 2017 | The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allow... |
| CVE-2017-9022 | HIGH | 7.5 | 2.0% | Jun 8, 2017 | The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which ... |
| CVE-2017-7180 | HIGH | 7.3 | 1.1% | Jun 8, 2017 | Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its ... |
| CVE-2017-7965 | HIGH | 7.3 | 0.4% | Jun 7, 2017 | A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMa... |
| CVE-2017-4904 | HIGH | 8.8 | 0.4% | Jun 7, 2017 | The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.... |
| CVE-2017-4903 | HIGH | 8.8 | 0.4% | Jun 7, 2017 | VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESXi... |
| CVE-2017-4902 | HIGH | 8.8 | 0.5% | Jun 7, 2017 | VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player ... |
| CVE-2017-7564 | HIGH | 7.5 | 1.0% | Jun 7, 2017 | In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to ca... |
| CVE-2017-7563 | HIGH | 8.1 | 0.9% | Jun 7, 2017 | In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_E... |
| CVE-2017-9462 | HIGH | 8.8 | 21.5% | Jun 6, 2017 | In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse... |
| CVE-2017-5664 | HIGH | 7.5 | 16.6% | Jun 6, 2017 | The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is conf... |
| CVE-2017-9443 | HIGH | 8.8 | 1.3% | Jun 5, 2017 | BigTree CMS through 4.2.18 allows remote authenticated users to conduct SQL injection attacks via a crafted tables objec... |
| CVE-2017-9380 | HIGH | 8.8 | 15.2% | Jun 2, 2017 | OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code... |
| CVE-2017-9334 | HIGH | 7.5 | 1.5% | Jun 1, 2017 | An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Sche... |
| CVE-2017-9250 | HIGH | 7.5 | 2.5% | May 28, 2017 | The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory alloc... |
| CVE-2017-8540 | HIGH | 7.8 | 72.0% | May 26, 2017 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve... |
| CVE-2017-9036 | HIGH | 7.8 | 0.5% | May 26, 2017 | Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestrict... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now