2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9504 | — | — | — | Jun 26, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-9741. Reason: This candidate is a reservation ... |
| CVE-2017-9145 | — | — | — | Jun 26, 2017 | TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to ... |
| CVE-2017-6383 | — | — | — | Jun 26, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-7855. Reason: This candidate is a reservation ... |
| CVE-2017-9937 | — | — | — | Jun 26, 2017 | In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resulting... |
| CVE-2017-9936 | — | — | — | Jun 26, 2017 | In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in a... |
| CVE-2017-9935 | — | — | — | Jun 26, 2017 | In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap ove... |
| CVE-2017-9929 | MEDIUM | 5.5 | — | Jun 26, 2017 | In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers t... |
| CVE-2017-9928 | MEDIUM | 5.5 | — | Jun 26, 2017 | In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers to... |
| CVE-2017-9615 | — | — | — | Jun 26, 2017 | Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all ... |
| CVE-2017-9466 | — | — | — | Jun 26, 2017 | The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use o... |
| CVE-2017-7459 | — | — | — | Jun 26, 2017 | ntopng before 3.0 allows HTTP Response Splitting. |
| CVE-2017-7416 | — | — | — | Jun 26, 2017 | ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated. |
| CVE-2017-6678 | — | — | — | Jun 26, 2017 | A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance... |
| CVE-2017-6669 | HIGH | 7.8 | — | Jun 26, 2017 | Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format... |
| CVE-2017-6662 | — | — | — | Jun 26, 2017 | A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Mana... |
| CVE-2017-9872 | — | — | — | Jun 25, 2017 | The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, ... |
| CVE-2017-9871 | — | — | — | Jun 25, 2017 | The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows re... |
| CVE-2017-9870 | — | — | — | Jun 25, 2017 | The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows re... |
| CVE-2017-9869 | — | — | — | Jun 25, 2017 | The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows rem... |
| CVE-2017-9868 | — | — | — | Jun 25, 2017 | In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obta... |
| CVE-2017-9865 | — | — | — | Jun 25, 2017 | The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of ser... |
| CVE-2017-9840 | — | — | — | Jun 25, 2017 | Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbi... |
| CVE-2017-9848 | — | — | — | Jun 24, 2017 | SQL injection vulnerability in C_InfoService.asmx in WebServices in Easysite 7.0 could allow remote attackers to execute... |
| CVE-2017-9847 | — | — | — | Jun 24, 2017 | The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service (heap-based... |
| CVE-2017-9846 | HIGH | 8.8 | — | Jun 24, 2017 | Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now