2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-2647 | — | — | 0.4% | Mar 31, 2017 | The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (N... |
| CVE-2017-7346 | — | — | 0.4% | Mar 30, 2017 | The vmw_gb_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.7 d... |
| CVE-2017-7253 | — | — | 2.3% | Mar 30, 2017 | Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to l... |
| CVE-2017-6412 | — | — | 7.5% | Mar 30, 2017 | In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310. |
| CVE-2017-6184 | — | — | 2.5% | Mar 30, 2017 | In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports wa... |
| CVE-2017-6183 | — | — | 3.2% | Mar 30, 2017 | In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecti... |
| CVE-2017-6182 | — | — | 16.6% | Mar 30, 2017 | In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports wa... |
| CVE-2017-5185 | — | — | 1.7% | Mar 30, 2017 | A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote denial of service. |
| CVE-2017-5184 | — | — | 1.0% | Mar 30, 2017 | A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account ... |
| CVE-2017-7324 | CRITICAL | 9.8 | 2.1% | Mar 30, 2017 | setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP co... |
| CVE-2017-7323 | HIGH | 8.1 | 2.1% | Mar 30, 2017 | The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier use http://rest.modx.com by... |
| CVE-2017-7322 | HIGH | 8.1 | 1.2% | Mar 30, 2017 | The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier do not verify X.509 certifi... |
| CVE-2017-7321 | CRITICAL | 9.8 | 2.1% | Mar 30, 2017 | setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP c... |
| CVE-2017-7320 | MEDIUM | 6.1 | 0.9% | Mar 30, 2017 | setup/controllers/language.php in MODX Revolution 2.5.4-pl and earlier does not properly constrain the language paramete... |
| CVE-2017-7318 | — | — | 3.8% | Mar 30, 2017 | Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerabilit... |
| CVE-2017-7290 | — | — | 2.3% | Mar 30, 2017 | SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrator... |
| CVE-2017-7310 | — | — | 66.8% | Mar 29, 2017 | A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9... |
| CVE-2017-4980 | — | — | 2.3% | Mar 29, 2017 | EMC Isilon OneFS is affected by a path traversal vulnerability that may potentially be exploited by attackers to comprom... |
| CVE-2017-4977 | — | — | 0.3% | Mar 29, 2017 | EMC RSA Archer Security Operations Management with RSA Unified Collector Framework versions prior to 1.3.1.52 contain a ... |
| CVE-2017-7308 | HIGH | 7.8 | 17.8% | Mar 29, 2017 | The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate cer... |
| CVE-2017-7258 | — | — | 2.2% | Mar 29, 2017 | HTTP Exploit in eMLi Portal in AuroMeera Technometrix Pvt. Ltd. eMLi allows an Attacker to View Restricted Information o... |
| CVE-2017-5226 | — | — | 3.2% | Mar 29, 2017 | When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the T... |
| CVE-2017-7304 | — | — | 2.1% | Mar 29, 2017 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid ... |
| CVE-2017-7303 | — | — | 2.2% | Mar 29, 2017 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid ... |
| CVE-2017-7302 | — | — | 2.4% | Mar 29, 2017 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out fun... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now