2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-2819 | HIGH | 8.8 | 1.7% | May 24, 2017 | An exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version 9.6.1.4350) of Hancom T... |
| CVE-2017-2817 | HIGH | 8.8 | 1.7% | May 24, 2017 | A stack buffer overflow vulnerability exists in the ISO parsing functionality of Power Software Ltd PowerISO 6.8. A spec... |
| CVE-2017-2801 | MEDIUM | 6.5 | 1.3% | May 24, 2017 | A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string compariso... |
| CVE-2017-2800 | CRITICAL | 9.8 | 8.5% | May 24, 2017 | A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting... |
| CVE-2017-2799 | HIGH | 8.3 | 1.3% | May 24, 2017 | An exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House DMC HTMLFilter as used ... |
| CVE-2017-2798 | HIGH | 8.3 | 1.3% | May 24, 2017 | An exploitable heap corruption vulnerability exists in the GetIndexArray functionality of Antenna House DMC HTMLFilter a... |
| CVE-2017-9217 | HIGH | 7.5 | 15.4% | May 24, 2017 | systemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash) via a crafted DNS respo... |
| CVE-2017-9216 | MEDIUM | 6.5 | 3.5% | May 24, 2017 | libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_hu... |
| CVE-2017-8314 | — | — | 2.5% | May 23, 2017 | Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via... |
| CVE-2017-8313 | — | — | 1.5% | May 23, 2017 | Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attack... |
| CVE-2017-8312 | — | — | 1.4% | May 23, 2017 | Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap u... |
| CVE-2017-8311 | — | — | 8.8% | May 23, 2017 | Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an inpu... |
| CVE-2017-8310 | — | — | 1.3% | May 23, 2017 | Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows att... |
| CVE-2017-0374 | — | — | 0.4% | May 23, 2017 | lib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before 2.102 allows local users to gain privileges via a ... |
| CVE-2017-0373 | — | — | 1.8% | May 23, 2017 | The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) bef... |
| CVE-2017-9214 | CRITICAL | 9.8 | 2.9% | May 23, 2017 | In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-r... |
| CVE-2017-3128 | — | — | 0.7% | May 23, 2017 | A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or c... |
| CVE-2017-2797 | HIGH | 8.3 | 0.9% | May 23, 2017 | An exploitable heap overflow vulnerability exists in the ParseEnvironment functionality of AntennaHouse DMC HTMLFilter a... |
| CVE-2017-2794 | HIGH | 8.3 | 1.3% | May 23, 2017 | An exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTML... |
| CVE-2017-2793 | HIGH | 8.3 | 1.4% | May 23, 2017 | An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilt... |
| CVE-2017-2783 | HIGH | 8.3 | 1.3% | May 23, 2017 | An exploitable heap corruption vulnerability exists in the FillRowFormat functionality of Antenna House DMC HTMLFilter t... |
| CVE-2017-6131 | — | — | 1.1% | May 23, 2017 | In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default admin... |
| CVE-2017-9212 | — | — | 1.1% | May 23, 2017 | The Bluetooth stack on the BMW 330i 2011 allows a remote crash of the CD/Multimedia software via %x or %c format string ... |
| CVE-2017-9211 | — | — | 0.4% | May 23, 2017 | The crypto_skcipher_init_tfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey functio... |
| CVE-2017-5966 | — | — | 1.6% | May 23, 2017 | Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files via an absolute path trav... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now