2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9222 | — | — | — | Jun 27, 2017 | The mp4ff_parse_tag function in common/mp4ff/mp4meta.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote at... |
| CVE-2017-9221 | — | — | — | Jun 27, 2017 | The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote at... |
| CVE-2017-9220 | — | — | — | Jun 27, 2017 | The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote at... |
| CVE-2017-9219 | — | — | — | Jun 27, 2017 | The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote at... |
| CVE-2017-9218 | — | — | — | Jun 27, 2017 | The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote at... |
| CVE-2017-9955 | — | — | — | Jun 26, 2017 | The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Bi... |
| CVE-2017-9954 | — | — | — | Jun 26, 2017 | The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binuti... |
| CVE-2017-9953 | — | — | — | Jun 26, 2017 | There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input w... |
| CVE-2017-7458 | — | — | — | Jun 26, 2017 | The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a d... |
| CVE-2017-6326 | — | — | — | Jun 26, 2017 | The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an i... |
| CVE-2017-6325 | — | — | — | Jun 26, 2017 | The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is mo... |
| CVE-2017-6324 | — | — | — | Jun 26, 2017 | The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word fil... |
| CVE-2017-9949 | — | — | — | Jun 26, 2017 | The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service... |
| CVE-2017-9948 | — | — | — | Jun 26, 2017 | A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving ... |
| CVE-2017-7496 | — | — | — | Jun 26, 2017 | fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the... |
| CVE-2017-9504 | — | — | — | Jun 26, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-9741. Reason: This candidate is a reservation ... |
| CVE-2017-9145 | — | — | — | Jun 26, 2017 | TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to ... |
| CVE-2017-6383 | — | — | — | Jun 26, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-7855. Reason: This candidate is a reservation ... |
| CVE-2017-9937 | — | — | — | Jun 26, 2017 | In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting... |
| CVE-2017-9936 | — | — | — | Jun 26, 2017 | In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a... |
| CVE-2017-9935 | — | — | — | Jun 26, 2017 | In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap ove... |
| CVE-2017-9615 | — | — | — | Jun 26, 2017 | Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all ... |
| CVE-2017-9466 | — | — | — | Jun 26, 2017 | The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use o... |
| CVE-2017-7459 | — | — | — | Jun 26, 2017 | ntopng before 3.0 allows HTTP Response Splitting. |
| CVE-2017-7416 | — | — | — | Jun 26, 2017 | ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now