2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9631 | HIGH | 7.5 | 3.2% | Jul 7, 2017 | A Null Pointer Dereference issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.230... |
| CVE-2017-9629 | CRITICAL | 9.8 | 9.8% | Jul 7, 2017 | A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.... |
| CVE-2017-9627 | HIGH | 8.6 | 4.1% | Jul 7, 2017 | An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 20... |
| CVE-2017-6868 | — | — | 4.2% | Jul 7, 2017 | An Improper Authentication issue was discovered in Siemens SIMATIC CP 44x-1 RNA, all versions prior to 1.4.1. An unauthe... |
| CVE-2017-1000381 | HIGH | 7.5 | 3.3% | Jul 7, 2017 | The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read me... |
| CVE-2017-1000082 | CRITICAL | 9.8 | 3.9% | Jul 7, 2017 | systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the servic... |
| CVE-2017-10995 | — | — | 1.8% | Jul 7, 2017 | The mng_get_long function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service (h... |
| CVE-2017-10994 | — | — | 4.9% | Jul 7, 2017 | Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attacke... |
| CVE-2017-10991 | — | — | 0.8% | Jul 7, 2017 | The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wps_refer... |
| CVE-2017-10966 | — | — | 2.9% | Jul 7, 2017 | An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GH... |
| CVE-2017-10965 | — | — | 3.4% | Jul 7, 2017 | An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dere... |
| CVE-2017-0340 | — | — | 1.2% | Jul 7, 2017 | An elevation of privilege vulnerability in the NVIDIA Libnvparser component due to a memcpy into a fixed sized buffer wi... |
| CVE-2017-0326 | — | — | 0.4% | Jul 7, 2017 | An information disclosure vulnerability in the NVIDIA Video Driver due to an out-of-bounds read function in the Tegra Di... |
| CVE-2017-2245 | MEDIUM | 5 | 2.6% | Jul 7, 2017 | Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitra... |
| CVE-2017-2244 | HIGH | 8.8 | 0.7% | Jul 7, 2017 | Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hij... |
| CVE-2017-2243 | — | — | 1.5% | Jul 7, 2017 | Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary ... |
| CVE-2017-2239 | MEDIUM | 5.3 | 0.5% | Jul 7, 2017 | Marp versions v0.0.10 and earlier may allow an attacker to access local resources and files using JavaScript. |
| CVE-2017-2238 | — | — | 0.8% | Jul 7, 2017 | Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earli... |
| CVE-2017-2237 | — | — | 2.0% | Jul 7, 2017 | Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW2... |
| CVE-2017-2236 | — | — | 1.4% | Jul 7, 2017 | Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW2... |
| CVE-2017-2235 | — | — | 1.5% | Jul 7, 2017 | Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW2... |
| CVE-2017-2234 | — | — | 1.8% | Jul 7, 2017 | Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW2... |
| CVE-2017-2233 | — | — | 1.1% | Jul 7, 2017 | Untrusted search path vulnerability in Installer of PDF Digital Signature Plugin (G2.30) and earlier, distributed till J... |
| CVE-2017-2232 | — | — | 1.1% | Jul 7, 2017 | Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft (4.8A) and earlier allows an attacker to gain pr... |
| CVE-2017-2231 | — | — | 1.2% | Jul 7, 2017 | Untrusted search path vulnerability in The installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlie... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now