2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-4976 | — | — | 1.8% | Jul 9, 2017 | EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote a... |
| CVE-2017-11111 | — | — | 1.7% | Jul 8, 2017 | In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer o... |
| CVE-2017-11110 | — | — | 1.2% | Jul 8, 2017 | The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer un... |
| CVE-2017-11109 | — | — | 1.1% | Jul 8, 2017 | Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a cra... |
| CVE-2017-11108 | — | — | 4.9% | Jul 8, 2017 | tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) v... |
| CVE-2017-7512 | — | — | 2.2% | Jul 7, 2017 | Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation of an access token witho... |
| CVE-2017-8442 | — | — | 0.9% | Jul 7, 2017 | Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch _nodes API leaking ... |
| CVE-2017-7660 | — | — | 5.5% | Jul 7, 2017 | Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to cr... |
| CVE-2017-11102 | — | — | 3.3% | Jul 7, 2017 | The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of servi... |
| CVE-2017-11101 | — | — | 1.4% | Jul 7, 2017 | When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_Relocat... |
| CVE-2017-11100 | — | — | 1.4% | Jul 7, 2017 | When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swf_FoldSpr... |
| CVE-2017-11099 | — | — | 1.4% | Jul 7, 2017 | When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wav_convert2mono... |
| CVE-2017-11098 | — | — | 1.4% | Jul 7, 2017 | When SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation in the png_load() funct... |
| CVE-2017-11097 | — | — | 1.4% | Jul 7, 2017 | When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dict_lookup() fun... |
| CVE-2017-11096 | — | — | 1.4% | Jul 7, 2017 | When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_DeleteF... |
| CVE-2017-6868 | — | — | 4.2% | Jul 7, 2017 | An Improper Authentication issue was discovered in Siemens SIMATIC CP 44x-1 RNA, all versions prior to 1.4.1. An unauthe... |
| CVE-2017-10995 | — | — | 1.8% | Jul 7, 2017 | The mng_get_long function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service (h... |
| CVE-2017-10994 | — | — | 4.9% | Jul 7, 2017 | Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attacke... |
| CVE-2017-10991 | — | — | 0.8% | Jul 7, 2017 | The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wps_refer... |
| CVE-2017-10966 | — | — | 2.9% | Jul 7, 2017 | An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GH... |
| CVE-2017-10965 | — | — | 3.4% | Jul 7, 2017 | An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dere... |
| CVE-2017-0340 | — | — | 1.2% | Jul 7, 2017 | An elevation of privilege vulnerability in the NVIDIA Libnvparser component due to a memcpy into a fixed sized buffer wi... |
| CVE-2017-0326 | — | — | 0.4% | Jul 7, 2017 | An information disclosure vulnerability in the NVIDIA Video Driver due to an out-of-bounds read function in the Tegra Di... |
| CVE-2017-2243 | — | — | 1.5% | Jul 7, 2017 | Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary ... |
| CVE-2017-2238 | — | — | 0.8% | Jul 7, 2017 | Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earli... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now