2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-11693 | — | — | 1.0% | Jul 28, 2017 | MEDHOST Document Management System contains hard-coded credentials that are used for customer database access. An attack... |
| CVE-2017-11719 | — | — | 1.7% | Jul 28, 2017 | The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a... |
| CVE-2017-11718 | — | — | 0.7% | Jul 28, 2017 | There is URL Redirector Abuse in MetInfo through 5.3.17 via the gourl parameter to member/login.php. |
| CVE-2017-11717 | — | — | 1.1% | Jul 28, 2017 | MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to ... |
| CVE-2017-11716 | — | — | 0.7% | Jul 28, 2017 | MetInfo through 5.3.17 allows stored XSS via HTML Edit Mode. |
| CVE-2017-11715 | — | — | 1.5% | Jul 28, 2017 | job/uploadfile_save.php in MetInfo through 5.3.17 blocks the .php extension but not related extensions, which might allo... |
| CVE-2017-11714 | — | — | 2.3% | Jul 28, 2017 | psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attac... |
| CVE-2017-11706 | — | — | 1.4% | Jul 28, 2017 | The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the... |
| CVE-2017-11705 | — | — | 1.2% | Jul 28, 2017 | A memory leak was found in the function parseSWF_SHAPEWITHSTYLE in util/parser.c in Ming 0.4.8, which allows attackers t... |
| CVE-2017-11704 | — | — | 1.2% | Jul 28, 2017 | A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows atta... |
| CVE-2017-11703 | — | — | 1.2% | Jul 28, 2017 | A memory leak vulnerability was found in the function parseSWF_DOACTION in util/parser.c in Ming 0.4.8, which allows att... |
| CVE-2017-11647 | — | — | 0.5% | Jul 28, 2017 | NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored c... |
| CVE-2017-11646 | — | — | 0.4% | Jul 28, 2017 | NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF att... |
| CVE-2017-11645 | — | — | 1.3% | Jul 28, 2017 | NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authenticat... |
| CVE-2017-11184 | — | — | 1.6% | Jul 28, 2017 | SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter. |
| CVE-2017-11183 | — | — | 1.3% | Jul 28, 2017 | front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted... |
| CVE-2017-8870 | — | — | 13.7% | Jul 27, 2017 | Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file. |
| CVE-2017-8869 | — | — | 15.9% | Jul 27, 2017 | Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a crafted .m3u file. |
| CVE-2017-11665 | — | — | 2.4% | Jul 27, 2017 | The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denia... |
| CVE-2017-9545 | — | — | 1.2% | Jul 27, 2017 | The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buf... |
| CVE-2017-9412 | — | — | 4.0% | Jul 27, 2017 | The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of ser... |
| CVE-2017-9411 | — | — | — | Jul 27, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9100. Reason: This candidate is a duplicate of C... |
| CVE-2017-9410 | — | — | — | Jul 27, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9101. Reason: This candidate is a duplicate of C... |
| CVE-2017-9260 | — | — | 3.9% | Jul 27, 2017 | The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows remote attack... |
| CVE-2017-9259 | — | — | 6.2% | Jul 27, 2017 | The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote atta... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now