2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-3081 | — | — | 14.4% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal comp... |
| CVE-2017-3079 | — | — | 7.0% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal r... |
| CVE-2017-3078 | — | — | 30.9% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Text... |
| CVE-2017-3077 | — | — | 22.3% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image ... |
| CVE-2017-3076 | — | — | 24.7% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC... |
| CVE-2017-3075 | — | — | 8.7% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating th... |
| CVE-2017-7679 | — | — | 39.3% | Jun 20, 2017 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when se... |
| CVE-2017-3169 | — | — | 20.0% | Jun 20, 2017 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party mod... |
| CVE-2017-3745 | — | — | 0.4% | Jun 20, 2017 | In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative user... |
| CVE-2017-3744 | — | — | 0.8% | Jun 20, 2017 | In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in th... |
| CVE-2017-3743 | — | — | 0.7% | Jun 20, 2017 | If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsC... |
| CVE-2017-3216 | — | — | 5.2% | Jun 20, 2017 | WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypa... |
| CVE-2017-3215 | — | — | 0.9% | Jun 20, 2017 | The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. This bearer token, i... |
| CVE-2017-9763 | — | — | 4.2% | Jun 19, 2017 | The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 ... |
| CVE-2017-9762 | — | — | 1.0% | Jun 19, 2017 | The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use... |
| CVE-2017-9761 | — | — | 1.3% | Jun 19, 2017 | The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-bas... |
| CVE-2017-1000378 | — | — | 4.1% | Jun 19, 2017 | The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N ... |
| CVE-2017-1000377 | — | — | 0.4% | Jun 19, 2017 | An issue was discovered in the size of the default stack guard page on PAX Linux (originally from GRSecurity but shipped... |
| CVE-2017-1000375 | — | — | 18.9% | Jun 19, 2017 | NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attacke... |
| CVE-2017-1000374 | — | — | 3.4% | Jun 19, 2017 | A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitra... |
| CVE-2017-1000373 | — | — | 13.4% | Jun 19, 2017 | The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N... |
| CVE-2017-1000372 | — | — | 4.0% | Jun 19, 2017 | A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitr... |
| CVE-2017-1000366 | — | — | 2.7% | Jun 19, 2017 | glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causin... |
| CVE-2017-1000364 | — | — | 5.2% | Jun 19, 2017 | An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficie... |
| CVE-2017-9759 | — | — | 1.4% | Jun 19, 2017 | SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now