2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-5237 | — | — | 2.0% | Mar 27, 2017 | Due to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's phone number can rever... |
| CVE-2017-7275 | — | — | 1.4% | Mar 27, 2017 | The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (a... |
| CVE-2017-7274 | — | — | 1.6% | Mar 27, 2017 | The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of serv... |
| CVE-2017-7273 | — | — | 0.5% | Mar 27, 2017 | The cp_report_fixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically... |
| CVE-2017-7272 | — | — | 3.5% | Mar 27, 2017 | PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with ... |
| CVE-2017-7271 | — | — | 1.0% | Mar 27, 2017 | Reflected Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.11, when development mode is used, allows... |
| CVE-2017-7191 | — | — | 3.4% | Mar 27, 2017 | The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service (use-after-free) and poss... |
| CVE-2017-7183 | — | — | 5.9% | Mar 27, 2017 | The TFTP server in ExtraPuTTY 0.30 and earlier allows remote attackers to cause a denial of service (crash) via a large ... |
| CVE-2017-6542 | — | — | 21.8% | Mar 27, 2017 | The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large ... |
| CVE-2017-6464 | — | — | 5.1% | Mar 27, 2017 | NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malf... |
| CVE-2017-6463 | — | — | 5.2% | Mar 27, 2017 | NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash... |
| CVE-2017-6462 | — | — | 0.5% | Mar 27, 2017 | Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x bef... |
| CVE-2017-6460 | — | — | 2.7% | Mar 27, 2017 | Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote... |
| CVE-2017-6459 | — | — | 0.4% | Mar 27, 2017 | The Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via ... |
| CVE-2017-6458 | HIGH | 8.8 | 6.5% | Mar 27, 2017 | Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenti... |
| CVE-2017-6455 | — | — | 0.5% | Mar 27, 2017 | NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the P... |
| CVE-2017-6452 | — | — | 0.4% | Mar 27, 2017 | Stack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users ... |
| CVE-2017-6451 | — | — | 0.5% | Mar 27, 2017 | The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly ... |
| CVE-2017-6878 | — | — | 1.0% | Mar 27, 2017 | Cross-site scripting (XSS) vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web scr... |
| CVE-2017-5973 | MEDIUM | 5.5 | 0.5% | Mar 27, 2017 | The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to... |
| CVE-2017-5932 | — | — | 0.4% | Mar 27, 2017 | The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a... |
| CVE-2017-5931 | HIGH | 8.8 | 0.5% | Mar 27, 2017 | Integer overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cau... |
| CVE-2017-5899 | — | — | 1.0% | Mar 27, 2017 | Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local... |
| CVE-2017-5850 | — | — | 17.2% | Mar 27, 2017 | httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for ... |
| CVE-2017-5330 | — | — | 3.1% | Mar 27, 2017 | ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to as... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now