2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

CVE IDSeverityCVSSDescription
CVE-2017-12600——OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrate...
CVE-2017-12599HIGH8.8OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2BGR...
CVE-2017-12598HIGH8.8OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlo...
CVE-2017-12597HIGH8.8OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow1 ...
CVE-2017-12596——In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp du...
CVE-2017-10677——Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demons...
CVE-2017-12588——The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly al...
CVE-2017-12587——ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c.
CVE-2017-12480——Sandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan horse dwmapi.dll or pro...
CVE-2017-12586——SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to ...
CVE-2017-12585——SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), ...
CVE-2017-12584HIGH8.8There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1. Also, an entire user profile (including the password) can b...
CVE-2017-12583——DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variable) to doku.php.
CVE-2017-12581——GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This als...
CVE-2017-12568——Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows...
CVE-2017-12572——Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x befo...
CVE-2017-12566——In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allows...
CVE-2017-12565——In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which all...
CVE-2017-12564——In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows...
CVE-2017-12563——In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which ...
CVE-2017-9864——An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authentica...
CVE-2017-9863——An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visits...
CVE-2017-9862——An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer with a wrong password, it is p...
CVE-2017-9861——An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication wi...
CVE-2017-9860——An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network pr...

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now