2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6892 | — | — | 2.5% | Jun 12, 2017 | In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-o... |
| CVE-2017-9418 | — | — | 2.4% | Jun 12, 2017 | SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute ar... |
| CVE-2017-9548 | — | — | 0.8% | Jun 12, 2017 | admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated us... |
| CVE-2017-9547 | — | — | 0.8% | Jun 12, 2017 | admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated us... |
| CVE-2017-9546 | — | — | 1.1% | Jun 12, 2017 | admin.php in BigTree through 4.2.18 allows remote authenticated users to cause a denial of service (inability to save re... |
| CVE-2017-9324 | — | — | 2.4% | Jun 12, 2017 | In Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with ... |
| CVE-2017-9128 | — | — | 3.8% | Jun 12, 2017 | The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of... |
| CVE-2017-9127 | — | — | 5.1% | Jun 12, 2017 | The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a deni... |
| CVE-2017-9126 | — | — | 4.0% | Jun 12, 2017 | The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of serv... |
| CVE-2017-9125 | — | — | 4.9% | Jun 12, 2017 | The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of se... |
| CVE-2017-9124 | — | — | 3.8% | Jun 12, 2017 | The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NU... |
| CVE-2017-9123 | — | — | 3.8% | Jun 12, 2017 | The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of se... |
| CVE-2017-9122 | — | — | 6.5% | Jun 12, 2017 | The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (i... |
| CVE-2017-9542 | — | — | 5.1% | Jun 11, 2017 | D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue o... |
| CVE-2017-9526 | — | — | 2.3% | Jun 11, 2017 | In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signin... |
| CVE-2017-0376 | — | — | 2.2% | Jun 9, 2017 | The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the c... |
| CVE-2017-0375 | — | — | 2.6% | Jun 9, 2017 | The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the r... |
| CVE-2017-2219 | — | — | 1.1% | Jun 9, 2017 | Untrusted search path vulnerability in the [Simeji for Windows] installer (simeji.exe) allows an attacker to gain privil... |
| CVE-2017-2214 | — | — | 1.7% | Jun 9, 2017 | Untrusted search path vulnerability in AppCheck and AppCheck Pro prior to version 2.0.1.15 allows an attacker to execute... |
| CVE-2017-2213 | — | — | 1.1% | Jun 9, 2017 | Untrusted search path vulnerability in SemiDynaEXE (SemiDynaEXE2008.EXE) ver. 1.0.2 allows an attacker to gain privilege... |
| CVE-2017-2212 | — | — | 1.1% | Jun 9, 2017 | Untrusted search path vulnerability in TKY2JGD (TKY2JGD1379.EXE) ver. 1.3.79 allows an attacker to gain privileges via a... |
| CVE-2017-2211 | — | — | 1.1% | Jun 9, 2017 | Untrusted search path vulnerability in PatchJGD (Hyoko) (PatchJGDh101.EXE) ver. 1.0.1 allows an attacker to gain privile... |
| CVE-2017-2210 | — | — | 0.9% | Jun 9, 2017 | Untrusted search path vulnerability in PatchJGD (PatchJGD101.EXE) ver. 1.0.1 allows an attacker to gain privileges via a... |
| CVE-2017-2209 | — | — | 1.1% | Jun 9, 2017 | Untrusted search path vulnerability in the installer of Houkokusyo Sakusei Shien Tool ver3.0.2 (For the first installati... |
| CVE-2017-2207 | — | — | 1.6% | Jun 9, 2017 | Untrusted search path vulnerability in the installer of SaAT Personal ver.1.0.10.272 and earlier allows an attacker to g... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now