2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12474 | — | — | 1.1% | Sep 6, 2017 | The AP4_AtomSampleTable::GetSample function in Core/Ap4AtomSampleTable.cpp in Bento4 mp42ts before 1.5.0-616 allows remo... |
| CVE-2017-1491 | — | — | 1.3% | Sep 5, 2017 | IBM QRadar Network Security 5.4 supports interaction between multiple actors and allows those actors to negotiate which ... |
| CVE-2017-1458 | — | — | 2.5% | Sep 5, 2017 | IBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. ... |
| CVE-2017-1457 | — | — | 1.3% | Sep 5, 2017 | IBM QRadar Network Security 5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar... |
| CVE-2017-1130 | — | — | 29.2% | Sep 5, 2017 | IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it woul... |
| CVE-2017-1129 | — | — | 30.1% | Sep 5, 2017 | IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it coul... |
| CVE-2017-1097 | — | — | 0.6% | Sep 5, 2017 | IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site request forgery ... |
| CVE-2017-5716 | — | — | — | Sep 5, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-12865. Reason: This candidate is a reservation... |
| CVE-2017-5698 | MEDIUM | 4.4 | 0.3% | Sep 5, 2017 | Intel Active Management Technology, Intel Standard Manageability, and Intel Small Business Technology firmware versions ... |
| CVE-2017-2870 | HIGH | 7.8 | 2.6% | Sep 5, 2017 | An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when com... |
| CVE-2017-2862 | HIGH | 7.8 | 4.6% | Sep 5, 2017 | An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pixb... |
| CVE-2017-2822 | HIGH | 7.5 | 2.1% | Sep 5, 2017 | An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document F... |
| CVE-2017-2821 | HIGH | 8.8 | 2.3% | Sep 5, 2017 | An exploitable use-after-free exists in the PDF parsing functionality of Lexmark Perspective Document Filters 11.3.0.240... |
| CVE-2017-2808 | HIGH | 7.5 | 1.7% | Sep 5, 2017 | An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1. A specially... |
| CVE-2017-2807 | HIGH | 7.5 | 2.0% | Sep 5, 2017 | An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially cr... |
| CVE-2017-2779 | HIGH | 7.5 | 2.2% | Sep 5, 2017 | An exploitable memory corruption vulnerability exists in the RSRC segment parsing functionality of LabVIEW 2017, LabVIEW... |
| CVE-2017-14159 | MEDIUM | 4.7 | 0.3% | Sep 5, 2017 | slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which might all... |
| CVE-2017-14158 | — | — | 1.9% | Sep 5, 2017 | Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily... |
| CVE-2017-14156 | — | — | 0.4% | Sep 5, 2017 | The atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c in the Linux kernel through 4.12.10 does not initialize... |
| CVE-2017-14152 | HIGH | 8.8 | 5.1% | Sep 5, 2017 | A mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulne... |
| CVE-2017-14151 | HIGH | 8.8 | 5.2% | Sep 5, 2017 | An off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c in OpenJPEG 2.2.0. The v... |
| CVE-2017-14149 | — | — | 5.8% | Sep 5, 2017 | GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash f... |
| CVE-2017-14146 | — | — | 1.3% | Sep 5, 2017 | HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then r... |
| CVE-2017-14145 | — | — | 1.2% | Sep 5, 2017 | HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo... |
| CVE-2017-14140 | — | — | 0.5% | Sep 5, 2017 | The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the targ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now