2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-2789 | HIGH | 8.8 | 2.3% | Feb 24, 2017 | When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how m... |
| CVE-2017-5669 | HIGH | 7.8 | 0.4% | Feb 24, 2017 | The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a cert... |
| CVE-2017-6074 | HIGH | 7.8 | 6.0% | Feb 18, 2017 | The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST p... |
| CVE-2017-6001 | HIGH | 7 | 1.7% | Feb 18, 2017 | Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a craf... |
| CVE-2017-5991 | HIGH | 7.5 | 15.2% | Feb 15, 2017 | An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function i... |
| CVE-2017-2996 | HIGH | 8.8 | 4.9% | Feb 15, 2017 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in Primetime SDK.... |
| CVE-2017-2995 | HIGH | 8.8 | 6.5% | Feb 15, 2017 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable type confusion vulnerability related to the Messa... |
| CVE-2017-2994 | HIGH | 8.8 | 6.3% | Feb 15, 2017 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in Primetime SDK eve... |
| CVE-2017-2993 | HIGH | 8.8 | 6.1% | Feb 15, 2017 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability related to event han... |
| CVE-2017-2992 | HIGH | 8.8 | 32.8% | Feb 15, 2017 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 h... |
| CVE-2017-2991 | HIGH | 8.8 | 8.7% | Feb 15, 2017 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec... |
| CVE-2017-2990 | HIGH | 8.8 | 9.7% | Feb 15, 2017 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decom... |
| CVE-2017-2988 | HIGH | 8.8 | 18.2% | Feb 15, 2017 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing g... |
| CVE-2017-2987 | HIGH | 8.8 | 8.6% | Feb 15, 2017 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash B... |
| CVE-2017-2986 | HIGH | 8.8 | 31.0% | Feb 15, 2017 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (F... |
| CVE-2017-2985 | HIGH | 8.8 | 21.9% | Feb 15, 2017 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript ... |
| CVE-2017-2984 | HIGH | 8.8 | 18.3% | Feb 15, 2017 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder r... |
| CVE-2017-2982 | HIGH | 8.8 | 6.1% | Feb 15, 2017 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in a routine related... |
| CVE-2017-5972 | HIGH | 7.5 | 23.9% | Feb 14, 2017 | The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fa... |
| CVE-2017-5149 | HIGH | 8.9 | 1.0% | Feb 13, 2017 | An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 (RF models: EX1150; Inductive m... |
| CVE-2017-5169 | HIGH | 7.5 | 1.3% | Feb 13, 2017 | An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Cross Site Request For... |
| CVE-2017-5168 | HIGH | 7.5 | 3.6% | Feb 13, 2017 | An issue was discovered in Hanwha Techwin Smart Security Manager Versions 1.5 and prior. Multiple Path Traversal vulnera... |
| CVE-2017-5151 | HIGH | 7.3 | 2.4% | Feb 13, 2017 | An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions. A SQL Injection vulnerability... |
| CVE-2017-5848 | HIGH | 7.5 | 4.4% | Feb 9, 2017 | The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attack... |
| CVE-2017-5847 | HIGH | 7.5 | 3.7% | Feb 9, 2017 | The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allow... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now