2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-11340 | — | — | 1.4% | Jul 17, 2017 | There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted i... |
| CVE-2017-11339 | — | — | 1.1% | Jul 17, 2017 | There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted inp... |
| CVE-2017-11338 | — | — | 1.4% | Jul 17, 2017 | There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input wi... |
| CVE-2017-11337 | — | — | 1.4% | Jul 17, 2017 | There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will... |
| CVE-2017-11336 | — | — | 1.4% | Jul 17, 2017 | There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted in... |
| CVE-2017-11335 | — | — | 3.6% | Jul 17, 2017 | There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes... |
| CVE-2017-11329 | — | — | 1.2% | Jul 17, 2017 | GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that i... |
| CVE-2017-11328 | — | — | 0.7% | Jul 17, 2017 | Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attac... |
| CVE-2017-11318 | — | — | 1.3% | Jul 17, 2017 | Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is... |
| CVE-2017-11311 | — | — | 1.7% | Jul 17, 2017 | soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow wit... |
| CVE-2017-1000362 | — | — | 1.7% | Jul 17, 2017 | The re-key admin monitor was introduced in Jenkins 1.498 and re-encrypted all secrets in JENKINS_HOME with a new key. It... |
| CVE-2017-1000075 | — | — | 2.0% | Jul 17, 2017 | Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function |
| CVE-2017-1000074 | — | — | 2.0% | Jul 17, 2017 | Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function. |
| CVE-2017-1000073 | — | — | 2.9% | Jul 17, 2017 | Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary c... |
| CVE-2017-1000072 | — | — | 2.1% | Jul 17, 2017 | Creolabs Gravity version 1.0 is vulnerable to a Double Free in gravity_value resulting potentially leading to modificati... |
| CVE-2017-1000071 | — | — | 3.5% | Jul 17, 2017 | Jasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20 function when configured to au... |
| CVE-2017-1000070 | — | — | 1.0% | Jul 17, 2017 | The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and te... |
| CVE-2017-1000069 | — | — | 0.7% | Jul 17, 2017 | CSRF in Bitly oauth2_proxy 2.1 during authentication flow |
| CVE-2017-1000067 | — | — | 1.1% | Jul 17, 2017 | MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape m... |
| CVE-2017-1000066 | — | — | 1.4% | Jul 17, 2017 | The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, whi... |
| CVE-2017-1000065 | — | — | 0.7% | Jul 17, 2017 | Multiple Cross-site scripting (XSS) vulnerabilities in rpc.php in OpenMediaVault release 2.1 in Access Rights Management... |
| CVE-2017-1000064 | — | — | 1.3% | Jul 17, 2017 | kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS |
| CVE-2017-1000063 | — | — | 0.8% | Jul 17, 2017 | kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure |
| CVE-2017-1000062 | — | — | 3.9% | Jul 17, 2017 | kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution |
| CVE-2017-1000061 | — | — | 1.3% | Jul 17, 2017 | xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents, resulting ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now