2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9035 | HIGH | 7.4 | 3.6% | May 26, 2017 | Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveragi... |
| CVE-2017-9033 | HIGH | 8.8 | 2.3% | May 26, 2017 | Cross-site request forgery (CSRF) vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote ... |
| CVE-2017-9230 | HIGH | 7.5 | 3.3% | May 24, 2017 | The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with... |
| CVE-2017-9229 | HIGH | 7.5 | 5.1% | May 24, 2017 | An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7... |
| CVE-2017-2823 | HIGH | 7.8 | 9.4% | May 24, 2017 | A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file c... |
| CVE-2017-2819 | HIGH | 8.8 | 1.7% | May 24, 2017 | An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom T... |
| CVE-2017-2817 | HIGH | 8.8 | 1.7% | May 24, 2017 | A stack buffer overflow vulnerability exists in the ISO parsing functionality of Power Software Ltd PowerISO 6.8. A spec... |
| CVE-2017-2799 | HIGH | 8.3 | 1.3% | May 24, 2017 | An exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilter as used ... |
| CVE-2017-2798 | HIGH | 8.3 | 1.3% | May 24, 2017 | An exploitable heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HTMLFilter a... |
| CVE-2017-9217 | HIGH | 7.5 | 15.4% | May 24, 2017 | systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS respo... |
| CVE-2017-2797 | HIGH | 8.3 | 0.9% | May 23, 2017 | An exploitable heap overflow vulnerability exists in the ParseEnvironment functionality of AntennaHouse DMC HTMLFilter a... |
| CVE-2017-2794 | HIGH | 8.3 | 1.3% | May 23, 2017 | An exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTML... |
| CVE-2017-2793 | HIGH | 8.3 | 1.4% | May 23, 2017 | An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilt... |
| CVE-2017-2783 | HIGH | 8.3 | 1.3% | May 23, 2017 | An exploitable heap corruption vulnerability exists in the FillRowFormat functionality of Antenna House DMC HTMLFilter t... |
| CVE-2017-8913 | HIGH | 8.8 | 1.4% | May 23, 2017 | The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML ... |
| CVE-2017-8309 | HIGH | 7.5 | 4.5% | May 23, 2017 | Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memo... |
| CVE-2017-6891 | HIGH | 8.8 | 5.6% | May 22, 2017 | Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to... |
| CVE-2017-6632 | HIGH | 7.5 | 2.4% | May 22, 2017 | A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco FirePOWER System Software ... |
| CVE-2017-9024 | HIGH | 7.5 | 12.2% | May 21, 2017 | Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor (SCA) 3.0, has a Directory Tra... |
| CVE-2017-9100 | HIGH | 8.8 | 85.5% | May 21, 2017 | login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering mor... |
| CVE-2017-9098 | HIGH | 7.5 | 3.6% | May 19, 2017 | ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an att... |
| CVE-2017-9078 | HIGH | 8.8 | 5.1% | May 19, 2017 | The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double fre... |
| CVE-2017-9077 | HIGH | 7.8 | 0.7% | May 19, 2017 | The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whic... |
| CVE-2017-9076 | HIGH | 7.8 | 0.4% | May 19, 2017 | The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whi... |
| CVE-2017-9075 | HIGH | 7.8 | 0.4% | May 19, 2017 | The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whic... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now