2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-0214 | — | — | 3.5% | May 12, 2017 | Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2... |
| CVE-2017-0212 | — | — | 1.1% | May 12, 2017 | Windows Hyper-V allows an elevation of privilege vulnerability when Microsoft Windows 10 Gold, 1511, 1607, and 1703, and... |
| CVE-2017-0190 | — | — | 43.5% | May 12, 2017 | The GDI component in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold ... |
| CVE-2017-0175 | — | — | 7.0% | May 12, 2017 | The Windows kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows authenticated attackers to obtain sen... |
| CVE-2017-0171 | — | — | 4.1% | May 12, 2017 | Windows DNS Server allows a denial of service vulnerability when Microsoft Windows Server 2008 SP2 and R2 SP1, Windows S... |
| CVE-2017-0077 | — | — | 1.5% | May 12, 2017 | The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and ... |
| CVE-2017-0064 | — | — | 5.2% | May 12, 2017 | A security feature bypass vulnerability exists in Internet Explorer that allows for bypassing Mixed Content warnings, ak... |
| CVE-2017-8911 | — | — | 1.9% | May 12, 2017 | An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid wr... |
| CVE-2017-8908 | — | — | 1.1% | May 12, 2017 | The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service ... |
| CVE-2017-8900 | — | — | 0.4% | May 12, 2017 | LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass i... |
| CVE-2017-8360 | — | — | 0.5% | May 12, 2017 | Conexant Systems mictray64 task, as used on HP Elite, EliteBook, ProBook, and ZBook systems, leaks sensitive data (keyst... |
| CVE-2017-8905 | — | — | 0.4% | May 11, 2017 | Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arb... |
| CVE-2017-8904 | — | — | 0.4% | May 11, 2017 | Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOP_transfer (aka guest transfer) o... |
| CVE-2017-8903 | — | — | 0.5% | May 11, 2017 | Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS user... |
| CVE-2017-7472 | — | — | 2.3% | May 11, 2017 | The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumptio... |
| CVE-2017-8851 | — | — | 0.5% | May 11, 2017 | An issue was discovered on OnePlus One and X devices. Due to a lenient updater-script on the OnePlus One and X OTA image... |
| CVE-2017-8850 | — | — | 0.4% | May 11, 2017 | An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. Due to a lenient updater-script in the OnePlus OTA imag... |
| CVE-2017-5948 | — | — | 0.8% | May 11, 2017 | An issue was discovered on OnePlus One, X, 2, 3, and 3T devices. OxygenOS and HydrogenOS are vulnerable to downgrade att... |
| CVE-2017-8899 | — | — | 1.5% | May 11, 2017 | Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Information Disclos... |
| CVE-2017-8898 | — | — | 1.9% | May 11, 2017 | Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has stored XSS in the Announcements, allowing privile... |
| CVE-2017-8897 | — | — | 1.2% | May 11, 2017 | Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has pre-auth reflected XSS in the IPS UTF8 Converter ... |
| CVE-2017-6867 | — | — | 1.9% | May 11, 2017 | A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime ... |
| CVE-2017-6865 | — | — | 0.5% | May 11, 2017 | A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All ... |
| CVE-2017-8798 | — | — | 24.0% | May 11, 2017 | Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of s... |
| CVE-2017-5461 | — | — | 4.7% | May 11, 2017 | Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now