2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-3069 | HIGH | 8.8 | 5.0% | May 9, 2017 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode ... |
| CVE-2017-3068 | HIGH | 8.8 | 20.4% | May 9, 2017 | Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced V... |
| CVE-2017-3067 | — | — | 4.8% | May 9, 2017 | Adobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure vulnerability resulting from abuse ... |
| CVE-2017-6137 | — | — | 1.1% | May 9, 2017 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and ... |
| CVE-2017-0302 | — | — | 0.7% | May 9, 2017 | In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-I... |
| CVE-2017-0290 | — | — | 77.2% | May 9, 2017 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serve... |
| CVE-2017-8767 | — | — | — | May 8, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-5526. Reason: This candidate is a reservation ... |
| CVE-2017-4982 | — | — | 2.4% | May 8, 2017 | EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0, and 8.1.0 contains a fix for a privilege management vulne... |
| CVE-2017-0895 | — | — | 0.7% | May 8, 2017 | Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged... |
| CVE-2017-0894 | MEDIUM | 4.3 | 1.2% | May 8, 2017 | Nextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public calendars due to a logical e... |
| CVE-2017-0893 | — | — | 0.6% | May 8, 2017 | Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are shipping a vulnerable JavaScript library for sanitizing untrust... |
| CVE-2017-0892 | LOW | 3.5 | 1.0% | May 8, 2017 | Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password wi... |
| CVE-2017-0891 | — | — | 0.6% | May 8, 2017 | Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading ... |
| CVE-2017-0890 | MEDIUM | 5.4 | 0.7% | May 8, 2017 | Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search modu... |
| CVE-2017-8848 | — | — | 0.5% | May 8, 2017 | Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password. |
| CVE-2017-6953 | — | — | 1.3% | May 8, 2017 | Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card... |
| CVE-2017-6051 | — | — | 1.4% | May 8, 2017 | An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9.9.14.0 and prior. The ... |
| CVE-2017-8825 | — | — | 1.8% | May 8, 2017 | A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCo... |
| CVE-2017-8847 | MEDIUM | 5.5 | 1.4% | May 8, 2017 | The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial... |
| CVE-2017-8846 | MEDIUM | 5.5 | 1.6% | May 8, 2017 | The read_stream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service ... |
| CVE-2017-8845 | MEDIUM | 5.5 | 1.4% | May 8, 2017 | The lzo1x_decompress function in lzo1x_d.ch in LZO 2.08, as used in lrzip 0.631, allows remote attackers to cause a deni... |
| CVE-2017-8844 | HIGH | 7.8 | 1.6% | May 8, 2017 | The read_1g function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (hea... |
| CVE-2017-8843 | MEDIUM | 5.5 | 1.4% | May 8, 2017 | The join_pthread function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service... |
| CVE-2017-8842 | MEDIUM | 5.5 | 1.6% | May 8, 2017 | The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial... |
| CVE-2017-8833 | — | — | 0.7% | May 8, 2017 | Zen Cart 1.6.0 has XSS in the main_page parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now