2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6892 | — | — | 2.5% | Jun 12, 2017 | In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-o... |
| CVE-2017-9557 | HIGH | 7.5 | 1.7% | Jun 12, 2017 | register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sendi... |
| CVE-2017-9418 | — | — | 2.4% | Jun 12, 2017 | SQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an authenticated user to execute ar... |
| CVE-2017-9548 | — | — | 0.8% | Jun 12, 2017 | admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated us... |
| CVE-2017-9547 | — | — | 0.8% | Jun 12, 2017 | admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated us... |
| CVE-2017-9546 | — | — | 1.1% | Jun 12, 2017 | admin.php in BigTree through 4.2.18 allows remote authenticated users to cause a denial of service (inability to save re... |
| CVE-2017-9544 | CRITICAL | 9.8 | 24.1% | Jun 12, 2017 | There is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1... |
| CVE-2017-9543 | HIGH | 7.5 | 1.3% | Jun 12, 2017 | register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords v... |
| CVE-2017-9324 | — | — | 2.4% | Jun 12, 2017 | In Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with ... |
| CVE-2017-9128 | — | — | 3.8% | Jun 12, 2017 | The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of... |
| CVE-2017-9127 | — | — | 5.1% | Jun 12, 2017 | The quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote attackers to cause a deni... |
| CVE-2017-9126 | — | — | 4.0% | Jun 12, 2017 | The quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to cause a denial of serv... |
| CVE-2017-9125 | — | — | 4.9% | Jun 12, 2017 | The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of se... |
| CVE-2017-9124 | — | — | 3.8% | Jun 12, 2017 | The quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (NU... |
| CVE-2017-9123 | — | — | 3.8% | Jun 12, 2017 | The lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of se... |
| CVE-2017-9122 | — | — | 6.5% | Jun 12, 2017 | The quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (i... |
| CVE-2017-8871 | MEDIUM | 6.5 | 13.0% | Jun 12, 2017 | The cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote attackers to cause a denial o... |
| CVE-2017-8834 | MEDIUM | 6.5 | 3.8% | Jun 12, 2017 | The cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to cause a denial of servic... |
| CVE-2017-9542 | — | — | 5.1% | Jun 11, 2017 | D-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to login.cgi. This issue o... |
| CVE-2017-9527 | HIGH | 7.8 | 1.0% | Jun 11, 2017 | The mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service (heap-based... |
| CVE-2017-9526 | — | — | 2.3% | Jun 11, 2017 | In Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel observation during the signin... |
| CVE-2017-5004 | MEDIUM | 5.4 | 1.0% | Jun 9, 2017 | EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance ver... |
| CVE-2017-5003 | MEDIUM | 6.1 | 1.2% | Jun 9, 2017 | EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance ver... |
| CVE-2017-0376 | — | — | 2.2% | Jun 9, 2017 | The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the c... |
| CVE-2017-0375 | — | — | 2.6% | Jun 9, 2017 | The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the r... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now