2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-18298 | — | — | 0.3% | Oct 23, 2018 | Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Sna... |
| CVE-2017-18297 | — | — | 0.3% | Oct 23, 2018 | Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, S... |
| CVE-2017-18296 | — | — | 0.3% | Oct 23, 2018 | Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdra... |
| CVE-2017-18295 | — | — | 0.3% | Oct 23, 2018 | Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobi... |
| CVE-2017-18294 | — | — | 0.3% | Oct 23, 2018 | While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size o... |
| CVE-2017-18293 | — | — | 0.3% | Oct 23, 2018 | When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can ... |
| CVE-2017-18292 | — | — | 0.3% | Oct 23, 2018 | Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, S... |
| CVE-2017-18283 | — | — | 0.5% | Oct 23, 2018 | Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QC... |
| CVE-2017-18282 | — | — | 0.3% | Oct 23, 2018 | Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdrag... |
| CVE-2017-18277 | — | — | 0.2% | Oct 23, 2018 | When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop witho... |
| CVE-2017-18172 | — | — | 0.2% | Oct 23, 2018 | In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting i... |
| CVE-2017-18171 | — | — | 0.5% | Oct 23, 2018 | Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory cor... |
| CVE-2017-18170 | — | — | 0.5% | Oct 23, 2018 | Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile i... |
| CVE-2017-18348 | — | — | 0.4% | Oct 19, 2018 | Splunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local... |
| CVE-2017-17176 | — | — | 0.3% | Oct 17, 2018 | The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B... |
| CVE-2017-5934 | — | — | 1.9% | Oct 15, 2018 | Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote atta... |
| CVE-2017-5658 | — | — | 1.8% | Oct 4, 2018 | The statistics generator in Apache Pony Mail 0.7 to 0.9 was found to be returning timestamp data without proper authoriz... |
| CVE-2017-2751 | — | — | 1.1% | Oct 3, 2018 | A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. ... |
| CVE-2017-7908 | — | — | 1.0% | Oct 2, 2018 | A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 ... |
| CVE-2017-15608 | — | — | 0.4% | Sep 26, 2018 | Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings. |
| CVE-2017-5639 | — | — | — | Sep 24, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2017-18314 | — | — | 0.9% | Sep 20, 2018 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8... |
| CVE-2017-18302 | — | — | 0.2% | Sep 20, 2018 | In Snapdragon (Automobile ,Mobile) in version MSM8996AU, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 8... |
| CVE-2017-18301 | — | — | 0.2% | Sep 20, 2018 | In Small Cell SoC and Snapdragon (Automobile, Mobile, Wear) in version FSM9055, FSM9955, MDM9607, MDM9640, MDM9650, MSM8... |
| CVE-2017-18280 | — | — | 0.2% | Sep 20, 2018 | In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now