2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-13737 | — | — | 2.7% | Aug 29, 2017 | There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remo... |
| CVE-2017-13736 | — | — | 1.8% | Aug 29, 2017 | There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to ... |
| CVE-2017-13735 | — | — | 3.0% | Aug 29, 2017 | There is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in LibRaw 0.18.2. It will le... |
| CVE-2017-13734 | MEDIUM | 6.5 | 2.1% | Aug 29, 2017 | There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remot... |
| CVE-2017-13733 | MEDIUM | 6.5 | 2.7% | Aug 29, 2017 | There is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a r... |
| CVE-2017-13732 | MEDIUM | 6.5 | 2.9% | Aug 29, 2017 | There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a... |
| CVE-2017-13731 | MEDIUM | 6.5 | 2.9% | Aug 29, 2017 | There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead ... |
| CVE-2017-13730 | MEDIUM | 6.5 | 2.9% | Aug 29, 2017 | There is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in ncurses 6.0 that might lead... |
| CVE-2017-13729 | MEDIUM | 6.5 | 2.9% | Aug 29, 2017 | There is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0. It will lead to a remot... |
| CVE-2017-13728 | HIGH | 7.5 | 3.9% | Aug 29, 2017 | There is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to libtic. A crafted input wi... |
| CVE-2017-13727 | — | — | 2.3% | Aug 29, 2017 | There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirw... |
| CVE-2017-13726 | — | — | 2.6% | Aug 29, 2017 | There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c... |
| CVE-2017-13685 | — | — | 1.8% | Aug 29, 2017 | The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and app... |
| CVE-2017-3757 | — | — | 0.4% | Aug 29, 2017 | An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on... |
| CVE-2017-3746 | — | — | 0.4% | Aug 29, 2017 | ThinkPad USB 3.0 Ethernet Adapter (part number 4X90E51405) driver, various versions, was found to contain a privilege es... |
| CVE-2017-2258 | — | — | 1.3% | Aug 29, 2017 | Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon ... |
| CVE-2017-2257 | — | — | 0.7% | Aug 29, 2017 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or ... |
| CVE-2017-2256 | — | — | 0.5% | Aug 29, 2017 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or ... |
| CVE-2017-2255 | — | — | 0.5% | Aug 29, 2017 | Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or ... |
| CVE-2017-2254 | — | — | 1.1% | Aug 29, 2017 | Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via... |
| CVE-2017-2242 | — | — | 1.1% | Aug 29, 2017 | Untrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an attacker to gain privileg... |
| CVE-2017-1489 | — | — | 1.2% | Aug 29, 2017 | IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerabilit... |
| CVE-2017-1376 | — | — | 2.6% | Aug 29, 2017 | A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges.... |
| CVE-2017-13715 | CRITICAL | 9.8 | 9.7% | Aug 29, 2017 | The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_proto... |
| CVE-2017-1110 | — | — | 1.0% | Aug 29, 2017 | IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an aut... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now