2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9026 | — | — | 1.6% | May 17, 2017 | Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote una... |
| CVE-2017-9025 | — | — | 1.6% | May 17, 2017 | Heap buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unau... |
| CVE-2017-7488 | — | — | 1.4% | May 16, 2017 | Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server... |
| CVE-2017-7662 | — | — | 1.1% | May 16, 2017 | Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple ... |
| CVE-2017-7661 | — | — | 1.1% | May 16, 2017 | Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF (Cro... |
| CVE-2017-6658 | — | — | 1.1% | May 16, 2017 | Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. The size was off by... |
| CVE-2017-6657 | — | — | 1.1% | May 16, 2017 | Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. Since valid ether type and IP protocol num... |
| CVE-2017-6651 | — | — | 2.0% | May 16, 2017 | A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that co... |
| CVE-2017-3882 | — | — | 1.8% | May 16, 2017 | A vulnerability in the Universal Plug-and-Play (UPnP) implementation in the Cisco CVR100W Wireless-N VPN Router could al... |
| CVE-2017-3876 | — | — | 2.5% | May 16, 2017 | A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, re... |
| CVE-2017-3873 | — | — | 0.7% | May 16, 2017 | A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points runn... |
| CVE-2017-3825 | — | — | 3.0% | May 16, 2017 | A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could a... |
| CVE-2017-6887 | — | — | 1.6% | May 16, 2017 | A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can... |
| CVE-2017-6886 | — | — | 3.4% | May 16, 2017 | An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be expl... |
| CVE-2017-6885 | — | — | 1.2% | May 16, 2017 | An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon ... |
| CVE-2017-8382 | — | — | 2.6% | May 16, 2017 | admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user acc... |
| CVE-2017-7953 | — | — | 1.0% | May 16, 2017 | INFOR EAM V11.0 Build 201410 has XSS via comment fields. |
| CVE-2017-7952 | — | — | 1.4% | May 16, 2017 | INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter. |
| CVE-2017-8942 | — | — | 0.5% | May 15, 2017 | The YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does not verify X.509 certi... |
| CVE-2017-8941 | — | — | 0.6% | May 15, 2017 | The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allo... |
| CVE-2017-8940 | — | — | 0.5% | May 15, 2017 | The Zipongo - Healthy Recipes and Grocery Deals app before 6.3 for iOS does not verify X.509 certificates from SSL serve... |
| CVE-2017-8937 | — | — | 0.5% | May 15, 2017 | The Life Before Us Yo app 2.5.8 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-mid... |
| CVE-2017-8926 | — | — | 3.1% | May 15, 2017 | Buffer overflow in Halliburton LogView Pro 10.0.1 allows attackers to cause a denial of service or possibly have unspeci... |
| CVE-2017-7499 | — | — | — | May 15, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-8933. Reason: This candidate is a reservation ... |
| CVE-2017-7498 | — | — | — | May 15, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-8934. Reason: This candidate is a reservation ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now