2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2017-6393——An issue was discovered in NagVis 1.9b12. The vulnerability exists due to insufficient filtration of user-supplied data ...
CVE-2017-6392——An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-...
CVE-2017-6391——An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-...
CVE-2017-6390——An issue was discovered in whatanime.ga before c334dd8499a681587dd4199e90b0aa0eba814c1d. The vulnerability exists due to...
CVE-2017-6384——Memory leak in the login_user function in saslserv/main.c in saslserv/main.so in Atheme 7.2.7 allows a remote unauthenti...
CVE-2017-6062——The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.5 for the Apac...
CVE-2017-6387——The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service ...
CVE-2017-6319——The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of ...
CVE-2017-3826——A vulnerability in the Stream Control Transmission Protocol (SCTP) decoder of the Cisco NetFlow Generation Appliance (NG...
CVE-2017-6353——net/sctp/socket.c in the Linux kernel through 4.10.1 does not properly restrict association peel-off operations during c...
CVE-2017-6348——The hashbin_delete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, wh...
CVE-2017-6345——The LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor exists in required circums...
CVE-2017-2685——Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding) and between 3.0.4.00....
CVE-2017-5981——seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a craf...
CVE-2017-5980——The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NU...
CVE-2017-5979——The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL poi...
CVE-2017-5978——The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (ou...
CVE-2017-5977——The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of ser...
CVE-2017-5886——Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows...
CVE-2017-5855——The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a d...
CVE-2017-5854——base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference ...
CVE-2017-5853——Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted ...
CVE-2017-5852——The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers t...
CVE-2017-5851——The free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (NU...
CVE-2017-5666——The free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause a denial of service (in...

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now