2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-1370 | — | — | 1.2% | Jul 31, 2017 | IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through a... |
| CVE-2017-1332 | — | — | 1.0% | Jul 31, 2017 | IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr... |
| CVE-2017-1303 | MEDIUM | 6.1 | 1.3% | Jul 31, 2017 | IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerab... |
| CVE-2017-1227 | — | — | 1.4% | Jul 31, 2017 | IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system. IBM X-Force I... |
| CVE-2017-11760 | — | — | 1.3% | Jul 31, 2017 | uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a... |
| CVE-2017-11670 | — | — | 1.3% | Jul 31, 2017 | A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network t... |
| CVE-2017-11669 | — | — | 1.3% | Jul 31, 2017 | An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4... |
| CVE-2017-11668 | — | — | 1.3% | Jul 31, 2017 | An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4... |
| CVE-2017-11757 | — | — | 2.5% | Jul 31, 2017 | Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code... |
| CVE-2017-11743 | — | — | 1.6% | Jul 31, 2017 | MEDHOST Connex contains a hard-coded Mirth Connect admin credential that is used for customer Mirth Connect management a... |
| CVE-2017-11735 | — | — | — | Jul 31, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-11551 | — | — | 1.4% | Jul 31, 2017 | The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) ... |
| CVE-2017-11550 | — | — | 1.5% | Jul 31, 2017 | The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL P... |
| CVE-2017-11549 | — | — | 1.0% | Jul 31, 2017 | The play_midi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (large lo... |
| CVE-2017-11548 | MEDIUM | 5.5 | 3.9% | Jul 31, 2017 | The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of servic... |
| CVE-2017-11547 | — | — | 1.1% | Jul 31, 2017 | The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (hea... |
| CVE-2017-11546 | — | — | 1.1% | Jul 31, 2017 | The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (... |
| CVE-2017-11359 | — | — | 6.6% | Jul 31, 2017 | The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (d... |
| CVE-2017-11358 | — | — | 7.4% | Jul 31, 2017 | The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service ... |
| CVE-2017-11333 | — | — | 4.8% | Jul 31, 2017 | The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial ... |
| CVE-2017-11332 | — | — | 6.6% | Jul 31, 2017 | The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (div... |
| CVE-2017-11331 | MEDIUM | 5.5 | 3.8% | Jul 31, 2017 | The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of serv... |
| CVE-2017-11330 | — | — | 3.1% | Jul 31, 2017 | The DivFixppCore::avi_header_fix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denia... |
| CVE-2017-11119 | — | — | 0.9% | Jul 31, 2017 | The chk_mem_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cau... |
| CVE-2017-11118 | — | — | 0.9% | Jul 31, 2017 | The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a deni... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now