2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9114 | — | — | 2.0% | May 21, 2017 | In OpenEXR 2.2.0, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cause the application to cras... |
| CVE-2017-9113 | — | — | 3.1% | May 21, 2017 | In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the appl... |
| CVE-2017-9112 | — | — | 1.9% | May 21, 2017 | In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash. |
| CVE-2017-9111 | — | — | 3.2% | May 21, 2017 | In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the appl... |
| CVE-2017-9110 | — | — | 1.7% | May 21, 2017 | In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash... |
| CVE-2017-9101 | — | — | 76.7% | May 21, 2017 | import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User... |
| CVE-2017-9046 | — | — | 0.6% | May 21, 2017 | winpm-32.exe in Pegasus Mail (aka Pmail) v4.72 build 572 allows code execution via a crafted ssgp.dll file that must be ... |
| CVE-2017-7620 | — | — | 1.4% | May 21, 2017 | MantisBT before 1.3.11, 2.x before 2.3.3, and 2.4.x before 2.4.1 omits a backslash check in string_api.php and consequen... |
| CVE-2017-7504 | — | — | 29.3% | May 19, 2017 | HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in... |
| CVE-2017-9094 | — | — | 1.3% | May 19, 2017 | The lzw_add_to_dict function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cau... |
| CVE-2017-9093 | — | — | 1.3% | May 19, 2017 | The my_skip_input_data_fn function in imagew-jpeg.c in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers... |
| CVE-2017-9091 | — | — | 1.2% | May 19, 2017 | /admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA by... |
| CVE-2017-9090 | — | — | 1.2% | May 19, 2017 | reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the... |
| CVE-2017-9083 | — | — | 1.1% | May 19, 2017 | poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte functio... |
| CVE-2017-9080 | — | — | 62.3% | May 19, 2017 | PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfile... |
| CVE-2017-7968 | — | — | 0.4% | May 19, 2017 | An Incorrect Default Permissions issue was discovered in Schneider Electric Wonderware InduSoft Web Studio v8.0 Patch 3 ... |
| CVE-2017-4979 | — | — | 0.8% | May 19, 2017 | EMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is affected by an NFS expo... |
| CVE-2017-4978 | — | — | 0.8% | May 19, 2017 | EMC RSA Adaptive Authentication (On-Premise) versions prior to 7.3 P2 (exclusive) contains a fix for a cross-site script... |
| CVE-2017-9079 | — | — | 0.3% | May 19, 2017 | Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file ... |
| CVE-2017-7937 | — | — | 0.7% | May 19, 2017 | An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An atta... |
| CVE-2017-7935 | — | — | 1.2% | May 19, 2017 | A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker ... |
| CVE-2017-7907 | — | — | 0.4% | May 19, 2017 | An Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware Historian Client 2014 R2 SP1 ... |
| CVE-2017-6048 | — | — | 15.5% | May 19, 2017 | A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataL... |
| CVE-2017-6027 | — | — | 2.6% | May 19, 2017 | An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following vers... |
| CVE-2017-6025 | — | — | 2.0% | May 19, 2017 | A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versi... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now