2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-10681 | — | — | 1.2% | Jun 29, 2017 | Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentica... |
| CVE-2017-10680 | — | — | 1.2% | Jun 29, 2017 | Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentica... |
| CVE-2017-10679 | — | — | 2.5% | Jun 29, 2017 | Piwigo through 2.9.1 allows remote attackers to obtain sensitive information about the descriptive name of a permalink b... |
| CVE-2017-10678 | — | — | 1.2% | Jun 29, 2017 | Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentica... |
| CVE-2017-3750 | — | — | 0.1% | Jun 29, 2017 | On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored v... |
| CVE-2017-3749 | — | — | 0.1% | Jun 29, 2017 | On Lenovo VIBE mobile phones, the Idea Friend Android application allows private data to be backed up and restored via A... |
| CVE-2017-3748 | — | — | 0.2% | Jun 29, 2017 | On Lenovo VIBE mobile phones, improper access controls on the nac_server component can be abused in conjunction with CVE... |
| CVE-2017-3747 | — | — | 0.3% | Jun 29, 2017 | Privilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems (Lenovo Nerve Center for not... |
| CVE-2017-8613 | — | — | 3.6% | Jun 29, 2017 | Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain ... |
| CVE-2017-8579 | — | — | 1.2% | Jun 29, 2017 | The DirectX component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated at... |
| CVE-2017-8576 | — | — | 1.2% | Jun 29, 2017 | The graphics component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated a... |
| CVE-2017-8575 | — | — | 3.3% | Jun 29, 2017 | The kernel in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to o... |
| CVE-2017-8558 | — | — | 43.6% | Jun 29, 2017 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Micr... |
| CVE-2017-8554 | — | — | 2.0% | Jun 29, 2017 | The kernel in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve... |
| CVE-2017-1310 | — | — | 1.7% | Jun 29, 2017 | IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large ass... |
| CVE-2017-10667 | — | — | 0.6% | Jun 29, 2017 | In index.php in Zen Cart 1.6.0, the products_id parameter can cause XSS. |
| CVE-2017-1106 | — | — | 0.7% | Jun 28, 2017 | IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows u... |
| CVE-2017-7686 | — | — | 3.0% | Jun 28, 2017 | Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that inc... |
| CVE-2017-5241 | — | — | 0.9% | Jun 28, 2017 | Biscom Secure File Transfer versions 5.0.0.0 trough 5.1.1024 are vulnerable to post-authentication persistent cross-site... |
| CVE-2017-9996 | — | — | 1.8% | Jun 28, 2017 | The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.... |
| CVE-2017-9995 | — | — | 1.6% | Jun 28, 2017 | libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attac... |
| CVE-2017-9994 | — | — | 1.8% | Jun 28, 2017 | libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before ... |
| CVE-2017-9993 | — | — | 16.4% | Jun 28, 2017 | FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restric... |
| CVE-2017-9992 | — | — | 2.8% | Jun 28, 2017 | Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, ... |
| CVE-2017-9991 | — | — | 1.8% | Jun 28, 2017 | Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now