2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7690 | HIGH | 7.8 | 1.0% | Apr 14, 2017 | Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary w... |
| CVE-2017-7643 | HIGH | 7.8 | 1.0% | Apr 14, 2017 | Proxifier for Mac before 2.19 allows local users to gain privileges via the first parameter to the KLoader setuid progra... |
| CVE-2017-7408 | HIGH | 7.5 | 1.9% | Apr 14, 2017 | Palo Alto Networks Traps ESM Console before 3.4.4 allows attackers to cause a denial of service by leveraging improper v... |
| CVE-2017-6059 | HIGH | 7.5 | 5.2% | Apr 12, 2017 | Mod_auth_openidc.c in the Ping Identity OpenID Connect authentication module for Apache (aka mod_auth_openidc) before 2.... |
| CVE-2017-0210 | HIGH | 8.8 | 19.5% | Apr 12, 2017 | An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, w... |
| CVE-2017-0199 | HIGH | 7.8 | 99.9% | Apr 12, 2017 | Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Window... |
| CVE-2017-7618 | HIGH | 7.5 | 4.3% | Apr 10, 2017 | crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling i... |
| CVE-2017-7605 | HIGH | 7.8 | 1.5% | Apr 9, 2017 | aacplusenc.c in HE-AAC+ Codec (aka libaacplus) 2.0.2 has an assertion failure, which might allow remote attackers to cau... |
| CVE-2017-7604 | HIGH | 7.8 | 1.5% | Apr 9, 2017 | au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a left-shift undefined behavior issue, which might allow remote... |
| CVE-2017-7603 | HIGH | 7.8 | 1.5% | Apr 9, 2017 | au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a signed integer overflow, which might allow remote attackers t... |
| CVE-2017-4964 | HIGH | 8.8 | 0.5% | Apr 6, 2017 | Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary ... |
| CVE-2017-3832 | HIGH | 7.5 | 3.2% | Apr 6, 2017 | A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthent... |
| CVE-2017-7571 | HIGH | 8 | 2.2% | Apr 6, 2017 | public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges. |
| CVE-2017-6884 | HIGH | 8.8 | 34.6% | Apr 6, 2017 | A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vul... |
| CVE-2017-3204 | HIGH | 8.1 | 3.2% | Apr 4, 2017 | The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default ... |
| CVE-2017-7412 | HIGH | 7.8 | 0.4% | Apr 4, 2017 | NixOS 17.03 before 17.03.887 has a world-writable Docker socket, which allows local users to gain privileges by executin... |
| CVE-2017-7374 | HIGH | 7.8 | 0.8% | Mar 31, 2017 | Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of ser... |
| CVE-2017-2775 | HIGH | 7.5 | 2.9% | Mar 31, 2017 | An exploitable memory corruption vulnerability exists in the LvVariantUnflatten functionality in 64-bit versions of LabV... |
| CVE-2017-7323 | HIGH | 8.1 | 2.1% | Mar 30, 2017 | The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier use http://rest.modx.com by... |
| CVE-2017-7322 | HIGH | 8.1 | 1.2% | Mar 30, 2017 | The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier do not verify X.509 certifi... |
| CVE-2017-7308 | HIGH | 7.8 | 17.8% | Mar 29, 2017 | The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate cer... |
| CVE-2017-7294 | HIGH | 7.8 | 0.4% | Mar 29, 2017 | The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 does... |
| CVE-2017-7297 | HIGH | 8.8 | 1.5% | Mar 29, 2017 | Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call. This i... |
| CVE-2017-6964 | HIGH | 7.8 | 0.5% | Mar 28, 2017 | dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the (1) set... |
| CVE-2017-6458 | HIGH | 8.8 | 6.5% | Mar 27, 2017 | Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenti... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now