2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9161 | — | — | 1.9% | May 23, 2017 | libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:188:23. |
| CVE-2017-9160 | — | — | 1.8% | May 23, 2017 | libautotrace.a in AutoTrace 0.31.1 has a stack-based buffer overflow in the pnmscanner_gettoken function in input-pnm.c:... |
| CVE-2017-9159 | — | — | 2.0% | May 23, 2017 | libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), relate... |
| CVE-2017-9158 | — | — | 2.0% | May 23, 2017 | libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), relate... |
| CVE-2017-9157 | — | — | 2.0% | May 23, 2017 | libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), relate... |
| CVE-2017-9156 | — | — | 2.0% | May 23, 2017 | libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), relate... |
| CVE-2017-9155 | — | — | 1.8% | May 23, 2017 | libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related... |
| CVE-2017-9154 | — | — | 2.3% | May 23, 2017 | libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related... |
| CVE-2017-9153 | — | — | 2.5% | May 23, 2017 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_rawpbm function in input-pnm.c:391:1... |
| CVE-2017-9152 | — | — | 2.1% | May 23, 2017 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnm_load_raw function in input-pnm.c:346:41. |
| CVE-2017-9151 | — | — | 2.0% | May 23, 2017 | libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_ascii function in input-pnm.c:303:12... |
| CVE-2017-8915 | — | — | 2.6% | May 23, 2017 | sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of service (assertion failure a... |
| CVE-2017-8914 | — | — | 1.5% | May 23, 2017 | sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by... |
| CVE-2017-8913 | HIGH | 8.8 | 1.4% | May 23, 2017 | The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML ... |
| CVE-2017-8379 | MEDIUM | 6.5 | 0.4% | May 23, 2017 | Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged u... |
| CVE-2017-8309 | HIGH | 7.5 | 4.5% | May 23, 2017 | Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memo... |
| CVE-2017-7288 | — | — | 1.6% | May 23, 2017 | Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (ZCS) before 8.7.1 allows remote attackers to inj... |
| CVE-2017-6821 | — | — | 3.8% | May 23, 2017 | Directory traversal vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.7.6 allows attackers to have unspecif... |
| CVE-2017-6813 | — | — | 2.5% | May 23, 2017 | A service provided by Zimbra Collaboration Suite (ZCS) before 8.7.6 fails to require needed privileges before performing... |
| CVE-2017-5870 | — | — | 1.0% | May 23, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in ViMbAdmin 3.0.15 allow remote attackers to inject arbitrary web s... |
| CVE-2017-9150 | — | — | 1.3% | May 22, 2017 | The do_check function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allow_ptr_leaks value... |
| CVE-2017-1320 | — | — | 0.5% | May 22, 2017 | IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embe... |
| CVE-2017-1289 | — | — | 3.6% | May 22, 2017 | IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A rem... |
| CVE-2017-1282 | — | — | 0.5% | May 22, 2017 | IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed... |
| CVE-2017-1159 | — | — | 0.6% | May 22, 2017 | IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redire... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now