2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-6309 | — | — | 1.4% | Feb 24, 2017 | An issue was discovered in tnef before 1.4.13. Two type confusions have been identified in the parse_file() function. Th... |
| CVE-2017-6308 | — | — | 1.5% | Feb 24, 2017 | An issue was discovered in tnef before 1.4.13. Several Integer Overflows, which can lead to Heap Overflows, have been id... |
| CVE-2017-6307 | — | — | 1.4% | Feb 24, 2017 | An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapi_attr.c:mapi_attr_read(). ... |
| CVE-2017-6306 | — | — | 2.1% | Feb 24, 2017 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal usin... |
| CVE-2017-6305 | — | — | 1.2% | Feb 24, 2017 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "8 of 9. Out of Bounds read and w... |
| CVE-2017-6304 | — | — | 1.2% | Feb 24, 2017 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "7 of 9. Out of Bounds read." |
| CVE-2017-6303 | — | — | 1.3% | Feb 24, 2017 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "6 of 9. Invalid Write and Intege... |
| CVE-2017-6302 | — | — | 1.2% | Feb 24, 2017 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "5 of 9. Integer Overflow." |
| CVE-2017-6301 | — | — | 1.2% | Feb 24, 2017 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "4 of 9. Out of Bounds Reads." |
| CVE-2017-6300 | — | — | 1.3% | Feb 24, 2017 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "3 of 9. Buffer Overflow in versi... |
| CVE-2017-6299 | — | — | 1.2% | Feb 24, 2017 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "2 of 9. Infinite Loop / DoS in t... |
| CVE-2017-6298 | — | — | 1.5% | Feb 24, 2017 | An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / cal... |
| CVE-2017-6197 | — | — | 1.6% | Feb 24, 2017 | The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (... |
| CVE-2017-6196 | — | — | 1.8% | Feb 24, 2017 | Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecc... |
| CVE-2017-6099 | — | — | 1.2% | Feb 24, 2017 | Cross-site scripting (XSS) vulnerability in GetAuthDetails.html.php in PayPal PHP Merchant SDK (aka merchant-sdk-php) 3.... |
| CVE-2017-6076 | — | — | 0.5% | Feb 24, 2017 | In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a mali... |
| CVE-2017-6100 | — | — | 1.5% | Feb 23, 2017 | tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP. |
| CVE-2017-6214 | — | — | 4.7% | Feb 23, 2017 | The tcp_splice_read function in net/ipv4/tcp.c in the Linux kernel before 4.9.11 allows remote attackers to cause a deni... |
| CVE-2017-6207 | — | — | — | Feb 23, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9578. Reason: This candidate is a reservation ... |
| CVE-2017-6206 | — | — | 16.2% | Feb 23, 2017 | D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devi... |
| CVE-2017-6205 | — | — | 1.7% | Feb 23, 2017 | D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devi... |
| CVE-2017-6187 | — | — | 33.1% | Feb 22, 2017 | Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary c... |
| CVE-2017-5586 | — | — | 22.5% | Feb 22, 2017 | OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a craf... |
| CVE-2017-5585 | — | — | 2.0% | Feb 22, 2017 | OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and re... |
| CVE-2017-3847 | — | — | 0.6% | Feb 22, 2017 | A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now