2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-14099 | — | — | 4.3% | Sep 2, 2017 | In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Ast... |
| CVE-2017-14098 | — | — | 50.1% | Sep 2, 2017 | In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel ... |
| CVE-2017-14053 | — | — | 1.8% | Sep 1, 2017 | NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified c... |
| CVE-2017-12874 | — | — | 1.3% | Sep 1, 2017 | The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of ret... |
| CVE-2017-12873 | — | — | 1.7% | Sep 1, 2017 | SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or ... |
| CVE-2017-12872 | — | — | 1.4% | Sep 1, 2017 | The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11... |
| CVE-2017-12871 | — | — | 0.5% | Sep 1, 2017 | The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for con... |
| CVE-2017-12693 | — | — | 2.9% | Sep 1, 2017 | The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (m... |
| CVE-2017-12692 | — | — | 2.9% | Sep 1, 2017 | The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service ... |
| CVE-2017-12691 | — | — | 1.9% | Sep 1, 2017 | The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (m... |
| CVE-2017-12423 | — | — | 1.0% | Sep 1, 2017 | NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtua... |
| CVE-2017-12421 | — | — | 1.8% | Sep 1, 2017 | NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the sto... |
| CVE-2017-14107 | MEDIUM | 6.5 | 3.2% | Sep 1, 2017 | The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attacker... |
| CVE-2017-14105 | — | — | 1.3% | Sep 1, 2017 | HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, be... |
| CVE-2017-14106 | — | — | 0.4% | Sep 1, 2017 | The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of se... |
| CVE-2017-10851 | — | — | 1.1% | Sep 1, 2017 | Untrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and earlier allows an atta... |
| CVE-2017-10850 | HIGH | 7.8 | 1.0% | Sep 1, 2017 | Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271,... |
| CVE-2017-10849 | — | — | 1.1% | Sep 1, 2017 | Untrusted search path vulnerability in Self-extracting document generated by DocuWorks 8.0.7 and earlier allows an attac... |
| CVE-2017-10848 | — | — | 1.1% | Sep 1, 2017 | Untrusted search path vulnerability in Installers for DocuWorks 8.0.7 and earlier and DocuWorks Viewer Light published i... |
| CVE-2017-10829 | — | — | 1.2% | Sep 1, 2017 | Untrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions distributed through the we... |
| CVE-2017-3898 | — | — | 3.2% | Sep 1, 2017 | A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS) ... |
| CVE-2017-3897 | — | — | 11.7% | Sep 1, 2017 | A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior ... |
| CVE-2017-14103 | — | — | 30.2% | Sep 1, 2017 | The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image poi... |
| CVE-2017-13711 | HIGH | 7.5 | 3.8% | Sep 1, 2017 | Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to c... |
| CVE-2017-13674 | — | — | 0.4% | Sep 1, 2017 | Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. A malicious local Windows u... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now