2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-9078 | HIGH | 8.8 | 5.1% | May 19, 2017 | The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double fre... |
| CVE-2017-9077 | HIGH | 7.8 | 0.7% | May 19, 2017 | The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whic... |
| CVE-2017-9076 | HIGH | 7.8 | 0.4% | May 19, 2017 | The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whi... |
| CVE-2017-9075 | HIGH | 7.8 | 0.4% | May 19, 2017 | The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whic... |
| CVE-2017-9074 | HIGH | 7.8 | 0.4% | May 19, 2017 | The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be... |
| CVE-2017-7937 | — | — | 0.7% | May 19, 2017 | An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An atta... |
| CVE-2017-7935 | — | — | 1.2% | May 19, 2017 | A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker ... |
| CVE-2017-7907 | — | — | 0.4% | May 19, 2017 | An Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware Historian Client 2014 R2 SP1 ... |
| CVE-2017-6048 | — | — | 15.5% | May 19, 2017 | A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataL... |
| CVE-2017-6027 | — | — | 2.6% | May 19, 2017 | An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following vers... |
| CVE-2017-6025 | — | — | 2.0% | May 19, 2017 | A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versi... |
| CVE-2017-6016 | — | — | 0.3% | May 19, 2017 | An Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis ... |
| CVE-2017-5177 | — | — | 17.7% | May 19, 2017 | A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overfl... |
| CVE-2017-5176 | — | — | 0.5% | May 19, 2017 | A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The following versions ar... |
| CVE-2017-5174 | — | — | 52.3% | May 19, 2017 | An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An authenticatio... |
| CVE-2017-5173 | CRITICAL | 9.8 | 29.6% | May 19, 2017 | An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD... |
| CVE-2017-9073 | — | — | — | May 18, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-0176. Reason: This candidate is a reservation ... |
| CVE-2017-6652 | — | — | 3.6% | May 18, 2017 | A vulnerability in the web framework of the Cisco TelePresence IX5000 Series could allow an unauthenticated, remote atta... |
| CVE-2017-6623 | — | — | 0.3% | May 18, 2017 | A vulnerability in a script file that is installed as part of the Cisco Policy Suite (CPS) Software distribution for the... |
| CVE-2017-6622 | — | — | 62.2% | May 18, 2017 | A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote a... |
| CVE-2017-6621 | — | — | 6.2% | May 18, 2017 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote at... |
| CVE-2017-3980 | — | — | 2.8% | May 18, 2017 | A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 an... |
| CVE-2017-9072 | — | — | 0.9% | May 18, 2017 | Two CalendarXP products have XSS in common parts of HTML files. CalendarXP FlatCalendarXP through 9.9.290 has XSS in ifl... |
| CVE-2017-9071 | — | — | 0.6% | May 18, 2017 | In MODX Revolution before 2.5.7, an attacker might be able to trigger XSS by injecting a payload into the HTTP Host head... |
| CVE-2017-9070 | — | — | 0.6% | May 18, 2017 | In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any p... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now