2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7623 | — | — | 1.3% | Apr 10, 2017 | The iwmiffr_convert_row32 function in imagew-miff.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers... |
| CVE-2017-7622 | — | — | 1.3% | Apr 10, 2017 | dde-daemon, the daemon process of DDE (Deepin Desktop Environment) 15.0 through 15.3, runs with root privileges and hard... |
| CVE-2017-7345 | — | — | 1.7% | Apr 10, 2017 | NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind... |
| CVE-2017-7239 | — | — | 3.6% | Apr 10, 2017 | Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan resu... |
| CVE-2017-7185 | — | — | 12.3% | Apr 10, 2017 | Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embed... |
| CVE-2017-5988 | — | — | 1.7% | Apr 10, 2017 | NetApp Clustered Data ONTAP 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote attackers to cause a denial of ... |
| CVE-2017-5983 | — | — | 16.2% | Apr 10, 2017 | The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, ... |
| CVE-2017-5607 | — | — | 5.9% | Apr 10, 2017 | Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3... |
| CVE-2017-7619 | — | — | 1.5% | Apr 10, 2017 | In ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in some of the color algor... |
| CVE-2017-7617 | — | — | 6.2% | Apr 10, 2017 | Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asteris... |
| CVE-2017-7616 | — | — | 0.4% | Apr 10, 2017 | Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.... |
| CVE-2017-6190 | — | — | 15.8% | Apr 10, 2017 | Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows... |
| CVE-2017-7319 | — | — | — | Apr 10, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-7286 | — | — | — | Apr 10, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-7614 | — | — | 3.8% | Apr 9, 2017 | elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member a... |
| CVE-2017-7613 | — | — | 1.7% | Apr 9, 2017 | elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote att... |
| CVE-2017-7612 | — | — | 1.8% | Apr 9, 2017 | The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-b... |
| CVE-2017-7611 | — | — | 1.8% | Apr 9, 2017 | The check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (hea... |
| CVE-2017-7610 | — | — | 1.8% | Apr 9, 2017 | The check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based... |
| CVE-2017-7609 | — | — | 1.6% | Apr 9, 2017 | elf_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a... |
| CVE-2017-7608 | — | — | 2.1% | Apr 9, 2017 | The ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a deni... |
| CVE-2017-7607 | — | — | 1.7% | Apr 9, 2017 | The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-b... |
| CVE-2017-7606 | — | — | 2.2% | Apr 9, 2017 | coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined b... |
| CVE-2017-7602 | — | — | 2.6% | Apr 9, 2017 | LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (applicatio... |
| CVE-2017-7601 | — | — | 2.5% | Apr 9, 2017 | LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote a... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now