2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-1092 | — | — | 75.8% | May 22, 2017 | IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system a... |
| CVE-2017-9149 | — | — | 1.8% | May 22, 2017 | Metadata Anonymisation Toolkit (MAT) 0.6 and 0.6.1 silently fails to perform "Clean metadata" actions upon invocation fr... |
| CVE-2017-6891 | HIGH | 8.8 | 5.6% | May 22, 2017 | Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to... |
| CVE-2017-9147 | — | — | 7.0% | May 22, 2017 | LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to cau... |
| CVE-2017-9146 | — | — | 2.4% | May 22, 2017 | The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before... |
| CVE-2017-5657 | — | — | 0.9% | May 22, 2017 | Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A ... |
| CVE-2017-2175 | — | — | 1.4% | May 22, 2017 | Untrusted search path vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to gain... |
| CVE-2017-2174 | — | — | 1.2% | May 22, 2017 | Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to injec... |
| CVE-2017-2173 | — | — | 0.9% | May 22, 2017 | Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote authenticated atta... |
| CVE-2017-2171 | — | — | 0.9% | May 22, 2017 | Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Mu... |
| CVE-2017-2169 | — | — | 1.4% | May 22, 2017 | Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows r... |
| CVE-2017-2168 | — | — | 1.4% | May 22, 2017 | Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium ... |
| CVE-2017-2162 | — | — | 0.6% | May 22, 2017 | FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series ... |
| CVE-2017-2161 | — | — | 0.4% | May 22, 2017 | FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series ... |
| CVE-2017-7492 | — | — | — | May 22, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-7503. Reason: This candidate is a reservation du... |
| CVE-2017-9144 | MEDIUM | 6.5 | 1.9% | May 22, 2017 | In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. |
| CVE-2017-9143 | MEDIUM | 6.5 | 2.1% | May 22, 2017 | In ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a denial of service (memory ... |
| CVE-2017-9142 | MEDIUM | 6.5 | 2.2% | May 22, 2017 | In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/bl... |
| CVE-2017-9141 | MEDIUM | 6.5 | 2.2% | May 22, 2017 | In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function ... |
| CVE-2017-4916 | — | — | 5.0% | May 22, 2017 | VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Succes... |
| CVE-2017-4915 | — | — | 5.4% | May 22, 2017 | VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration fil... |
| CVE-2017-9140 | — | — | 9.6% | May 22, 2017 | Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms ... |
| CVE-2017-6999 | — | — | 4.7% | May 22, 2017 | An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO... |
| CVE-2017-6998 | — | — | 4.2% | May 22, 2017 | An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO... |
| CVE-2017-6997 | — | — | 4.7% | May 22, 2017 | An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchO... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now