2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

CVE IDSeverityCVSSDescription
CVE-2017-9859——An issue was discovered in SMA Solar Technology products. The inverters make use of a weak hashing algorithm to encrypt ...
CVE-2017-9858——An issue was discovered in SMA Solar Technology products. By sending crafted packets to an inverter and observing the re...
CVE-2017-9857——An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use aut...
CVE-2017-9856LOW3.4An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypte...
CVE-2017-9855CRITICAL9.8An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers ...
CVE-2017-9854——An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext p...
CVE-2017-9853——An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user an...
CVE-2017-9852——An Incorrect Password Management issue was discovered in SMA Solar Technology products. Default passwords exist that are...
CVE-2017-9851——An issue was discovered in SMA Solar Technology products. By sending nonsense data or setting up a TELNET session to the...
CVE-2017-12562CRITICAL9.8Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote a...
CVE-2017-7533HIGH7Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges o...
CVE-2017-12439HIGH7.5SocuSoft Flash Slideshow Maker Professional through v5.20, when the advanced configuration is used, has an xml_path HTTP...
CVE-2017-12419——If, after successful installation of MantisBT through 2.5.2 on MySQL/MariaDB, the administrator does not remove the 'adm...
CVE-2017-12482——The ledger::parse_date_mask_routine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of se...
CVE-2017-12481——The find_option function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based ...
CVE-2017-2221——Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileg...
CVE-2017-1331——IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar...
CVE-2017-10820——Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain pri...
CVE-2017-10819MEDIUM5.9MaLion for Mac 4.3.0 to 5.2.1 does not properly validate certificates, which may allow an attacker to eavesdrop on an en...
CVE-2017-10818CRITICAL9.8MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alt...
CVE-2017-10817CRITICAL9.8MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Se...
CVE-2017-10816CRITICAL9.8SQL injection vulnerability in the MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to execute arbitrar...
CVE-2017-10815——MaLion for Windows 5.2.1 and earlier (only when "Remote Control" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only w...
CVE-2017-12459——The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as ...
CVE-2017-12458——The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as...

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now