2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6436 | — | — | 0.5% | Mar 15, 2017 | The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of ser... |
| CVE-2017-6435 | — | — | 0.5% | Mar 15, 2017 | The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of ser... |
| CVE-2017-6366 | — | — | 3.5% | Mar 15, 2017 | Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 all... |
| CVE-2017-6317 | — | — | 0.4% | Mar 15, 2017 | Memory leak in the add_shader_program function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS u... |
| CVE-2017-6210 | — | — | 0.4% | Mar 15, 2017 | The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a d... |
| CVE-2017-6209 | — | — | 0.4% | Mar 15, 2017 | Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium ... |
| CVE-2017-5994 | — | — | 0.4% | Mar 15, 2017 | Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer befor... |
| CVE-2017-5993 | — | — | 0.4% | Mar 15, 2017 | Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local g... |
| CVE-2017-5938 | — | — | 1.3% | Mar 15, 2017 | Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x bef... |
| CVE-2017-5584 | — | — | 0.8% | Mar 15, 2017 | Cross-site scripting (XSS) vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6.... |
| CVE-2017-5583 | — | — | 1.5% | Mar 15, 2017 | The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 all... |
| CVE-2017-6909 | — | — | 0.8% | Mar 15, 2017 | An issue was discovered in Shimmie <= 2.5.1. The vulnerability exists due to insufficient filtration of user-supplied da... |
| CVE-2017-6908 | — | — | 1.2% | Mar 15, 2017 | An issue was discovered in concrete5 <= 5.6.3.4. The vulnerability exists due to insufficient filtration of user-supplie... |
| CVE-2017-6907 | — | — | 0.7% | Mar 15, 2017 | An issue was discovered in Open.GL before 2017-03-13. The vulnerability exists due to insufficient filtration of user-su... |
| CVE-2017-6906 | — | — | 0.7% | Mar 15, 2017 | An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-s... |
| CVE-2017-6905 | — | — | 1.0% | Mar 15, 2017 | An issue was discovered in concrete5 <= 5.6.3.4. The vulnerability exists due to insufficient filtration of user-supplie... |
| CVE-2017-6903 | — | — | 1.3% | Mar 14, 2017 | In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Qua... |
| CVE-2017-3899 | — | — | 1.7% | Mar 14, 2017 | SQL injection vulnerability in Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 and earlier allows remote authen... |
| CVE-2017-6902 | — | — | — | Mar 14, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ... |
| CVE-2017-6896 | — | — | 3.7% | Mar 14, 2017 | Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from... |
| CVE-2017-6516 | — | — | 5.3% | Mar 14, 2017 | A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow... |
| CVE-2017-5985 | — | — | 0.3% | Mar 14, 2017 | lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on ... |
| CVE-2017-2983 | — | — | 3.0% | Mar 14, 2017 | Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successf... |
| CVE-2017-6335 | — | — | 1.9% | Mar 14, 2017 | The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause ... |
| CVE-2017-5668 | — | — | 3.0% | Mar 14, 2017 | bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash)... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now