2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-10788 | — | — | 4.6% | Jul 1, 2017 | The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and ap... |
| CVE-2017-2298 | MEDIUM | 6.5 | 1.5% | Jun 30, 2017 | The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path wher... |
| CVE-2017-2292 | — | — | 2.2% | Jun 30, 2017 | Versions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe_load, allowing the potential ... |
| CVE-2017-8443 | — | — | 1.1% | Jun 30, 2017 | In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the result could be a redi... |
| CVE-2017-10709 | — | — | 0.3% | Jun 30, 2017 | The lockscreen on Elephone P9000 devices (running Android 6.0) allows physically proximate attackers to bypass a wrong-P... |
| CVE-2017-10699 | — | — | 4.5% | Jun 30, 2017 | avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of-bounds heap memory write du... |
| CVE-2017-10674 | — | — | 0.3% | Jun 30, 2017 | Antiy Antivirus Engine 5.0.0.06281654 allows local users to cause a denial of service (BSOD) via a long third argument i... |
| CVE-2017-10670 | — | — | 1.4% | Jun 30, 2017 | An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI ... |
| CVE-2017-10669 | — | — | 0.5% | Jun 30, 2017 | Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Librar... |
| CVE-2017-10668 | — | — | 0.3% | Jun 30, 2017 | A Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library ... |
| CVE-2017-7905 | — | — | 1.3% | Jun 30, 2017 | A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay,... |
| CVE-2017-7903 | CRITICAL | 9.8 | 2.7% | Jun 30, 2017 | A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logi... |
| CVE-2017-7902 | — | — | 2.6% | Jun 30, 2017 | A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 pr... |
| CVE-2017-7901 | — | — | 6.6% | Jun 30, 2017 | A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100... |
| CVE-2017-7899 | — | — | 4.6% | Jun 30, 2017 | An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic con... |
| CVE-2017-7898 | CRITICAL | 9.8 | 5.1% | Jun 30, 2017 | An Improper Restriction of Excessive Authentication Attempts issue was discovered in Rockwell Automation Allen-Bradley M... |
| CVE-2017-6046 | — | — | 1.6% | Jun 30, 2017 | An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to ... |
| CVE-2017-6044 | — | — | 4.3% | Jun 30, 2017 | An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and Ai... |
| CVE-2017-6042 | — | — | 0.6% | Jun 30, 2017 | A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and... |
| CVE-2017-6041 | — | — | 1.8% | Jun 30, 2017 | An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 terminal associated with the followin... |
| CVE-2017-6040 | — | — | 0.9% | Jun 30, 2017 | An Information Exposure issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior ve... |
| CVE-2017-6038 | — | — | 0.4% | Jun 30, 2017 | A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and pri... |
| CVE-2017-6036 | — | — | 0.9% | Jun 30, 2017 | A Server-Side Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and pr... |
| CVE-2017-6034 | CRITICAL | 9.8 | 5.1% | Jun 30, 2017 | An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive... |
| CVE-2017-6032 | — | — | 1.7% | Jun 30, 2017 | A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now