2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-5654 | — | — | 2.2% | May 12, 2017 | In Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may be able to gain unauthor... |
| CVE-2017-8923 | CRITICAL | 9.8 | 7.2% | May 12, 2017 | The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects th... |
| CVE-2017-8246 | HIGH | 7.8 | 0.2% | May 12, 2017 | In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel, prtd is assigned substream... |
| CVE-2017-8245 | HIGH | 7.8 | 0.2% | May 12, 2017 | In all Android releases from CAF using the Linux kernel, while processing a voice SVC request which is nonstandard by sp... |
| CVE-2017-8244 | HIGH | 7 | 0.1% | May 12, 2017 | In core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel, variable "dbg_buf", "dbg_b... |
| CVE-2017-8921 | — | — | 1.4% | May 12, 2017 | In FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has write access to, but not... |
| CVE-2017-7486 | — | — | 6.3% | May 12, 2017 | PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server... |
| CVE-2017-7485 | — | — | 2.0% | May 12, 2017 | In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3, it was found that th... |
| CVE-2017-7484 | — | — | 2.6% | May 12, 2017 | It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9... |
| CVE-2017-7474 | — | — | 2.5% | May 12, 2017 | It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use... |
| CVE-2017-2167 | — | — | 1.9% | May 12, 2017 | Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows rem... |
| CVE-2017-2164 | — | — | 0.8% | May 12, 2017 | Cross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote attackers to inject arbitr... |
| CVE-2017-2163 | — | — | 2.5% | May 12, 2017 | Directory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated attackers to read arbitrary fi... |
| CVE-2017-2157 | — | — | 0.5% | May 12, 2017 | Untrusted search path vulnerability in installers for The Public Certification Service for Individuals "The JPKI user's ... |
| CVE-2017-2122 | — | — | 0.8% | May 12, 2017 | Cross-site scripting vulnerability in Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2 allows remote authenticated a... |
| CVE-2017-0635 | — | — | 0.4% | May 12, 2017 | A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to u... |
| CVE-2017-0634 | — | — | 0.9% | May 12, 2017 | An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application t... |
| CVE-2017-0633 | — | — | 0.9% | May 12, 2017 | An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious component to access ... |
| CVE-2017-0632 | — | — | 0.9% | May 12, 2017 | An information disclosure vulnerability in the Qualcomm sound codec driver could enable a local malicious application to... |
| CVE-2017-0631 | — | — | 0.9% | May 12, 2017 | An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to acce... |
| CVE-2017-0630 | — | — | 1.4% | May 12, 2017 | An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious application to acce... |
| CVE-2017-0629 | — | — | 0.9% | May 12, 2017 | An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to acce... |
| CVE-2017-0628 | — | — | 0.9% | May 12, 2017 | An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to acce... |
| CVE-2017-0627 | — | — | 1.5% | May 12, 2017 | An information disclosure vulnerability in the kernel UVC driver could enable a local malicious application to access da... |
| CVE-2017-0626 | — | — | 1.0% | May 12, 2017 | An information disclosure vulnerability in the Qualcomm crypto engine driver could enable a local malicious application ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now