2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-0760 | — | — | 1.3% | Sep 8, 2017 | A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, ... |
| CVE-2017-0759 | — | — | 1.1% | Sep 8, 2017 | A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, ... |
| CVE-2017-0758 | — | — | 1.3% | Sep 8, 2017 | A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1... |
| CVE-2017-0757 | — | — | 1.1% | Sep 8, 2017 | A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7... |
| CVE-2017-0756 | — | — | 0.8% | Sep 8, 2017 | A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4... |
| CVE-2017-0755 | — | — | 0.4% | Sep 8, 2017 | A elevation of privilege vulnerability in the Android libraries (libminikin). Product: Android. Versions: 5.0.2, 5.1.1, ... |
| CVE-2017-0753 | — | — | 1.1% | Sep 8, 2017 | A remote code execution vulnerability in the Android libraries (libgdx). Product: Android. Versions: 7.1.1, 7.1.2, 8.0. ... |
| CVE-2017-0752 | — | — | 0.4% | Sep 8, 2017 | A elevation of privilege vulnerability in the Android framework (windowmanager). Product: Android. Versions: 4.4.4, 5.0.... |
| CVE-2017-12146 | HIGH | 7 | 0.3% | Sep 8, 2017 | The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows local users to ga... |
| CVE-2017-14167 | HIGH | 8.8 | 0.6% | Sep 8, 2017 | Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest O... |
| CVE-2017-2550 | — | — | 1.2% | Sep 8, 2017 | Vulnerability in Easy Joomla Backup v3.2.4. The software creates a copy of the backup in the web root with an easily gue... |
| CVE-2017-12071 | — | — | 1.4% | Sep 8, 2017 | Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3-... |
| CVE-2017-11162 | — | — | 1.6% | Sep 8, 2017 | Directory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote a... |
| CVE-2017-11161 | — | — | 1.2% | Sep 8, 2017 | Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers t... |
| CVE-2017-9095 | MEDIUM | 5.5 | 3.7% | Sep 8, 2017 | XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled d... |
| CVE-2017-11611 | — | — | 0.9% | Sep 8, 2017 | Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization of... |
| CVE-2017-14219 | — | — | 1.4% | Sep 7, 2017 | XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless cre... |
| CVE-2017-6796 | — | — | 0.4% | Sep 7, 2017 | A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Rout... |
| CVE-2017-6795 | — | — | 0.4% | Sep 7, 2017 | A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Rout... |
| CVE-2017-6794 | — | — | 0.8% | Sep 7, 2017 | A vulnerability in the CLI command-parsing code of Cisco Meeting Server could allow an authenticated, local attacker to ... |
| CVE-2017-6793 | — | — | 1.2% | Sep 7, 2017 | A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authen... |
| CVE-2017-6792 | — | — | 1.9% | Sep 7, 2017 | A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authenti... |
| CVE-2017-6791 | — | — | 2.3% | Sep 7, 2017 | A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthent... |
| CVE-2017-6789 | — | — | 1.3% | Sep 7, 2017 | A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker t... |
| CVE-2017-6780 | — | — | 1.7% | Sep 7, 2017 | A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthentica... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now