2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7551 | — | — | 1.4% | Aug 16, 2017 | 389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout du... |
| CVE-2017-7548 | HIGH | 7.5 | 3.5% | Aug 16, 2017 | PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated at... |
| CVE-2017-7547 | — | — | 5.6% | Aug 16, 2017 | PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote ... |
| CVE-2017-7546 | — | — | 61.6% | Aug 16, 2017 | PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allow... |
| CVE-2017-8248 | — | — | 3.1% | Aug 16, 2017 | A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 ... |
| CVE-2017-8243 | — | — | 0.5% | Aug 16, 2017 | A buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android when proce... |
| CVE-2017-6421 | — | — | 0.5% | Aug 16, 2017 | In the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a va... |
| CVE-2017-12880 | — | — | — | Aug 16, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11424. Reason: This candidate is a duplicate o... |
| CVE-2017-8665 | — | — | 4.3% | Aug 15, 2017 | The Xamarin.iOS update component on systems running macOS allows an attacker to run arbitrary code as root, aka "Xamarin... |
| CVE-2017-12864 | HIGH | 8.8 | 2.7% | Aug 15, 2017 | In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to inte... |
| CVE-2017-12863 | HIGH | 8.8 | 2.7% | Aug 15, 2017 | In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_... |
| CVE-2017-12862 | HIGH | 8.8 | 3.1% | Aug 15, 2017 | In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause co... |
| CVE-2017-12855 | — | — | 0.4% | Aug 15, 2017 | Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expect... |
| CVE-2017-12852 | — | — | 2.7% | Aug 15, 2017 | The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will sti... |
| CVE-2017-1469 | — | — | 0.4% | Aug 14, 2017 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing ar... |
| CVE-2017-1190 | — | — | 0.3% | Aug 14, 2017 | IBM Emptoris Strategic Supply Management Platform 10.x and 10.1 could allow a local user with special access roles to ex... |
| CVE-2017-12426 | — | — | 3.5% | Aug 14, 2017 | GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x... |
| CVE-2017-12853 | — | — | 0.9% | Aug 14, 2017 | The RealTime RWR-3G-100 Router Firmware Version : Ver1.0.56 is affected by CSRF an attack that forces an end user to exe... |
| CVE-2017-12851 | — | — | 1.3% | Aug 14, 2017 | An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.... |
| CVE-2017-12850 | — | — | 1.3% | Aug 14, 2017 | An authenticated standard user could reset the password of other users (including the admin) by altering form data. Affe... |
| CVE-2017-11156 | — | — | 2.2% | Aug 14, 2017 | Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 uses weak permissions (0777) for ui/dlm/btsear... |
| CVE-2017-11150 | — | — | 1.5% | Aug 14, 2017 | Command injection vulnerability in Document.php in Synology Office 2.2.0-1502 and 2.2.1-1506 allows remote authenticated... |
| CVE-2017-11149 | — | — | 1.6% | Aug 14, 2017 | Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and ... |
| CVE-2017-9662 | — | — | 0.4% | Aug 14, 2017 | An Improper Privilege Management issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.... |
| CVE-2017-9661 | — | — | 1.4% | Aug 14, 2017 | An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The unc... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now