2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-3613 | HIGH | 7 | 0.4% | Apr 24, 2017 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.... |
| CVE-2017-3612 | HIGH | 7 | 0.4% | Apr 24, 2017 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.... |
| CVE-2017-3611 | HIGH | 7 | 0.4% | Apr 24, 2017 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.... |
| CVE-2017-3610 | HIGH | 7 | 0.4% | Apr 24, 2017 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.... |
| CVE-2017-3609 | HIGH | 7 | 0.4% | Apr 24, 2017 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.... |
| CVE-2017-3608 | HIGH | 7 | 0.4% | Apr 24, 2017 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.... |
| CVE-2017-3607 | HIGH | 7 | 0.4% | Apr 24, 2017 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.... |
| CVE-2017-3606 | HIGH | 7 | 0.4% | Apr 24, 2017 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.... |
| CVE-2017-3605 | HIGH | 7 | 0.4% | Apr 24, 2017 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.... |
| CVE-2017-3604 | HIGH | 7 | 0.4% | Apr 24, 2017 | Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.... |
| CVE-2017-3506 | HIGH | 7.4 | 96.0% | Apr 24, 2017 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supporte... |
| CVE-2017-3309 | HIGH | 7.7 | 3.1% | Apr 24, 2017 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that a... |
| CVE-2017-3308 | HIGH | 7.7 | 3.1% | Apr 24, 2017 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are aff... |
| CVE-2017-7852 | HIGH | 8.8 | 4.3% | Apr 24, 2017 | D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access... |
| CVE-2017-8067 | HIGH | 7.8 | 0.4% | Apr 23, 2017 | drivers/char/virtio_console.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG_... |
| CVE-2017-8064 | HIGH | 7.8 | 0.4% | Apr 23, 2017 | drivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly wi... |
| CVE-2017-8063 | HIGH | 7.8 | 0.4% | Apr 23, 2017 | drivers/media/usb/dvb-usb/cxusb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CON... |
| CVE-2017-8062 | HIGH | 7.8 | 0.4% | Apr 23, 2017 | drivers/media/usb/dvb-usb/dw2102.c in the Linux kernel 4.9.x and 4.10.x before 4.10.4 interacts incorrectly with the CON... |
| CVE-2017-5156 | HIGH | 8.8 | 1.0% | Apr 20, 2017 | A Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access Anywhere, version 11.5... |
| CVE-2017-2784 | HIGH | 8.1 | 3.4% | Apr 20, 2017 | An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before ... |
| CVE-2017-7961 | HIGH | 7.8 | 2.0% | Apr 19, 2017 | The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable v... |
| CVE-2017-7645 | HIGH | 7.5 | 5.8% | Apr 18, 2017 | The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a deni... |
| CVE-2017-7889 | HIGH | 7.8 | 0.3% | Apr 17, 2017 | The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism... |
| CVE-2017-7615 | HIGH | 8.8 | 90.9% | Apr 16, 2017 | MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value ... |
| CVE-2017-7717 | HIGH | 8.8 | 1.9% | Apr 14, 2017 | SQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP NetWeaver AS Java 7.4 allo... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now