2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-1181 | — | — | 0.2% | Jul 17, 2017 | IBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges for IBM Tivoli Monitorin... |
| CVE-2017-11362 | — | — | 2.9% | Jul 17, 2017 | In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale lengt... |
| CVE-2017-11360 | — | — | 0.9% | Jul 17, 2017 | The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file t... |
| CVE-2017-11354 | — | — | 1.0% | Jul 17, 2017 | Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/app_article/sys_article.php via the name parameter in e... |
| CVE-2017-11353 | — | — | 0.8% | Jul 17, 2017 | yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting permi... |
| CVE-2017-11352 | MEDIUM | 6.5 | 1.8% | Jul 17, 2017 | In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.... |
| CVE-2017-11349 | CRITICAL | 9.8 | 2.0% | Jul 17, 2017 | dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mai... |
| CVE-2017-11348 | — | — | 1.2% | Jul 17, 2017 | In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a... |
| CVE-2017-11347 | — | — | 1.7% | Jul 17, 2017 | Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP sc... |
| CVE-2017-11346 | — | — | 43.3% | Jul 17, 2017 | Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors invo... |
| CVE-2017-11345 | — | — | 1.8% | Jul 17, 2017 | Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT... |
| CVE-2017-11344 | — | — | 2.8% | Jul 17, 2017 | Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, R... |
| CVE-2017-11343 | — | — | 0.9% | Jul 17, 2017 | Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to ... |
| CVE-2017-11342 | — | — | 1.2% | Jul 17, 2017 | There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service ... |
| CVE-2017-11341 | — | — | 1.7% | Jul 17, 2017 | There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of se... |
| CVE-2017-11340 | — | — | 1.4% | Jul 17, 2017 | There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted i... |
| CVE-2017-11339 | — | — | 1.1% | Jul 17, 2017 | There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted inp... |
| CVE-2017-11338 | — | — | 1.4% | Jul 17, 2017 | There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input wi... |
| CVE-2017-11337 | — | — | 1.4% | Jul 17, 2017 | There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will... |
| CVE-2017-11336 | — | — | 1.4% | Jul 17, 2017 | There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted in... |
| CVE-2017-11335 | — | — | 3.6% | Jul 17, 2017 | There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes... |
| CVE-2017-11329 | — | — | 1.2% | Jul 17, 2017 | GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that i... |
| CVE-2017-11328 | — | — | 0.7% | Jul 17, 2017 | Heap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a denial-of-service attac... |
| CVE-2017-11318 | — | — | 1.3% | Jul 17, 2017 | Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is... |
| CVE-2017-11311 | — | — | 1.7% | Jul 17, 2017 | soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow wit... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now