2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7246 | — | — | 2.6% | Mar 23, 2017 | Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote a... |
| CVE-2017-7245 | — | — | 2.2% | Mar 23, 2017 | Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote a... |
| CVE-2017-7244 | — | — | 2.0% | Mar 23, 2017 | The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of servi... |
| CVE-2017-6950 | — | — | 3.8% | Mar 23, 2017 | SAP GUI 7.2 through 7.5 allows remote attackers to bypass intended security policy restrictions and execute arbitrary co... |
| CVE-2017-6911 | — | — | 0.6% | Mar 23, 2017 | USB Pratirodh is prone to sensitive information disclosure. It stores sensitive information such as username and passwor... |
| CVE-2017-6895 | — | — | 3.0% | Mar 23, 2017 | USB Pratirodh allows remote attackers to conduct XML External Entity (XXE) attacks via XML data in usb.xml. |
| CVE-2017-6517 | — | — | 46.3% | Mar 23, 2017 | Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbi... |
| CVE-2017-7242 | — | — | 0.8% | Mar 23, 2017 | Multiple Cross-Site Scripting (XSS) were discovered in admin/modules components in SLiMS 7 Cendana through 2017-03-23: t... |
| CVE-2017-7199 | — | — | 0.4% | Mar 23, 2017 | Nessus 6.6.2 - 6.10.3 contains a flaw related to insecure permissions that may allow a local attacker to escalate privil... |
| CVE-2017-6361 | — | — | 56.8% | Mar 23, 2017 | QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors. |
| CVE-2017-6360 | — | — | 66.1% | Mar 23, 2017 | QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information ... |
| CVE-2017-6359 | — | — | 26.9% | Mar 23, 2017 | QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands vi... |
| CVE-2017-6191 | — | — | 6.7% | Mar 23, 2017 | Buffer overflow in APNGDis 2.8 and below allows a remote attacker to execute arbitrary code via a crafted filename. |
| CVE-2017-5538 | — | — | 2.9% | Mar 23, 2017 | The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) an... |
| CVE-2017-5524 | — | — | 1.3% | Mar 23, 2017 | Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtai... |
| CVE-2017-5227 | — | — | 6.4% | Mar 23, 2017 | QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by... |
| CVE-2017-5207 | — | — | 0.4% | Mar 23, 2017 | Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell a... |
| CVE-2017-5206 | — | — | 1.9% | Mar 23, 2017 | Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a secc... |
| CVE-2017-7235 | — | — | 1.5% | Mar 23, 2017 | An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website owner could craft a page that exec... |
| CVE-2017-6972 | — | — | 14.6% | Mar 22, 2017 | AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execu... |
| CVE-2017-3859 | — | — | 2.5% | Mar 22, 2017 | A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Ro... |
| CVE-2017-3858 | — | — | 3.1% | Mar 22, 2017 | A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject ar... |
| CVE-2017-3856 | — | — | 2.5% | Mar 22, 2017 | A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attack... |
| CVE-2017-3853 | — | — | 8.7% | Mar 22, 2017 | A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an ... |
| CVE-2017-3852 | — | — | 2.5% | Mar 22, 2017 | A vulnerability in the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment coul... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now