2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-12856 | — | — | 0.8% | Aug 29, 2017 | Cross-site scripting (XSS) vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML v... |
| CVE-2017-12797 | — | — | 1.2% | Aug 29, 2017 | Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allo... |
| CVE-2017-12775 | — | — | 1.6% | Aug 29, 2017 | qa-include/qa-install.php in Question2Answer before 1.7.5 allows remote attackers to create multiple user accounts. |
| CVE-2017-12763 | — | — | 3.9% | Aug 29, 2017 | An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privil... |
| CVE-2017-12422 | — | — | 1.6% | Aug 29, 2017 | NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote auth... |
| CVE-2017-11455 | — | — | 1.3% | Aug 29, 2017 | diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, ... |
| CVE-2017-10952 | — | — | 7.2% | Aug 29, 2017 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.2... |
| CVE-2017-10951 | — | — | 3.9% | Aug 29, 2017 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.1... |
| CVE-2017-10950 | — | — | 0.3% | Aug 29, 2017 | This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Sec... |
| CVE-2017-13753 | — | — | — | Aug 29, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9396. Reason: This candidate is a duplicate of... |
| CVE-2017-13752 | HIGH | 7.5 | 3.6% | Aug 29, 2017 | There is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead t... |
| CVE-2017-13751 | HIGH | 7.5 | 3.6% | Aug 29, 2017 | There is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2.0.12 that will lead to... |
| CVE-2017-13750 | HIGH | 7.5 | 3.7% | Aug 29, 2017 | There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296 in JasPer 2.0.12 that w... |
| CVE-2017-13749 | HIGH | 7.5 | 3.6% | Aug 29, 2017 | There is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in JasPer 2.0.12 that will lea... |
| CVE-2017-13748 | HIGH | 7.5 | 4.7% | Aug 29, 2017 | There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will ... |
| CVE-2017-13747 | HIGH | 7.5 | 3.6% | Aug 29, 2017 | There is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer 2.0.12 that will lead t... |
| CVE-2017-13746 | HIGH | 7.5 | 4.0% | Aug 29, 2017 | There is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297 in JasPer 2.0.12 that w... |
| CVE-2017-13745 | HIGH | 7.5 | 3.9% | Aug 29, 2017 | There is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in JasPer 2.0.12 that will l... |
| CVE-2017-13744 | — | — | 1.4% | Aug 29, 2017 | There is an illegal address access in the function _lou_getALine() in compileTranslationTable.c:343 in Liblouis 3.2.0. |
| CVE-2017-13743 | — | — | 1.8% | Aug 29, 2017 | There is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in utils.c, that will lead to ... |
| CVE-2017-13742 | — | — | 1.8% | Aug 29, 2017 | There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslationT... |
| CVE-2017-13741 | — | — | 1.8% | Aug 29, 2017 | There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that ... |
| CVE-2017-13740 | — | — | 1.6% | Aug 29, 2017 | There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationTa... |
| CVE-2017-13739 | — | — | 2.2% | Aug 29, 2017 | There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0, ... |
| CVE-2017-13738 | — | — | 1.5% | Aug 29, 2017 | There is an illegal address access in the _lou_getALine function in compileTranslationTable.c:346 in Liblouis 3.2.0. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now