2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-3083 | — | — | 14.4% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK... |
| CVE-2017-3082 | — | — | 11.7% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID c... |
| CVE-2017-3081 | — | — | 14.4% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal comp... |
| CVE-2017-3079 | — | — | 7.0% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal r... |
| CVE-2017-3078 | — | — | 30.9% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Text... |
| CVE-2017-3077 | — | — | 22.3% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image ... |
| CVE-2017-3076 | — | — | 24.7% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC... |
| CVE-2017-3075 | — | — | 8.7% | Jun 20, 2017 | Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating th... |
| CVE-2017-7679 | — | — | 39.3% | Jun 20, 2017 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when se... |
| CVE-2017-7668 | HIGH | 7.5 | 57.5% | Jun 20, 2017 | The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which al... |
| CVE-2017-3169 | — | — | 20.0% | Jun 20, 2017 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party mod... |
| CVE-2017-3167 | CRITICAL | 9.8 | 20.2% | Jun 20, 2017 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules ou... |
| CVE-2017-3745 | — | — | 0.4% | Jun 20, 2017 | In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative user... |
| CVE-2017-3744 | — | — | 0.8% | Jun 20, 2017 | In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in th... |
| CVE-2017-3743 | — | — | 0.7% | Jun 20, 2017 | If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsC... |
| CVE-2017-3216 | — | — | 5.2% | Jun 20, 2017 | WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypa... |
| CVE-2017-3215 | — | — | 0.9% | Jun 20, 2017 | The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. This bearer token, i... |
| CVE-2017-3214 | HIGH | 7.5 | 0.6% | Jun 20, 2017 | The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary. |
| CVE-2017-9763 | — | — | 4.2% | Jun 19, 2017 | The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 ... |
| CVE-2017-9762 | — | — | 1.0% | Jun 19, 2017 | The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use... |
| CVE-2017-9761 | — | — | 1.3% | Jun 19, 2017 | The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-bas... |
| CVE-2017-1000379 | HIGH | 7.8 | 1.8% | Jun 19, 2017 | The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where ... |
| CVE-2017-1000378 | — | — | 4.1% | Jun 19, 2017 | The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N ... |
| CVE-2017-1000377 | — | — | 0.4% | Jun 19, 2017 | An issue was discovered in the size of the default stack guard page on PAX Linux (originally from GRSecurity but shipped... |
| CVE-2017-1000376 | HIGH | 7 | 0.5% | Jun 19, 2017 | libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting th... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now