2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7209 | — | — | 1.2% | Mar 21, 2017 | The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section content... |
| CVE-2017-7208 | — | — | 1.1% | Mar 21, 2017 | The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer ov... |
| CVE-2017-7207 | — | — | 2.3% | Mar 21, 2017 | The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial... |
| CVE-2017-7206 | — | — | 1.0% | Mar 21, 2017 | The ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (hea... |
| CVE-2017-7205 | — | — | 0.9% | Mar 21, 2017 | A Cross-Site Scripting (XSS) was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtra... |
| CVE-2017-7204 | — | — | 0.7% | Mar 21, 2017 | A Cross-Site Scripting (XSS) was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of... |
| CVE-2017-7203 | — | — | 0.8% | Mar 21, 2017 | A Cross-Site Scripting (XSS) was discovered in ZoneMinder before 1.30.2. The vulnerability exists due to insufficient fi... |
| CVE-2017-7202 | — | — | 0.7% | Mar 21, 2017 | Multiple Cross-Site Scripting (XSS) were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due ... |
| CVE-2017-7200 | MEDIUM | 5.8 | 2.1% | Mar 21, 2017 | An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allo... |
| CVE-2017-6839 | — | — | 3.0% | Mar 20, 2017 | Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a d... |
| CVE-2017-6838 | — | — | 3.0% | Mar 20, 2017 | Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause ... |
| CVE-2017-6837 | — | — | 2.8% | Mar 20, 2017 | WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via ve... |
| CVE-2017-6836 | MEDIUM | 5.5 | 2.9% | Mar 20, 2017 | Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Li... |
| CVE-2017-6835 | — | — | 2.8% | Mar 20, 2017 | The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote att... |
| CVE-2017-6834 | MEDIUM | 5.5 | 2.6% | Mar 20, 2017 | Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.... |
| CVE-2017-6833 | — | — | 2.8% | Mar 20, 2017 | The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote at... |
| CVE-2017-6832 | MEDIUM | 5.5 | 3.0% | Mar 20, 2017 | Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, ... |
| CVE-2017-6831 | MEDIUM | 5.5 | 3.1% | Mar 20, 2017 | Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5... |
| CVE-2017-6830 | — | — | 3.0% | Mar 20, 2017 | Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allow... |
| CVE-2017-6829 | — | — | 2.8% | Mar 20, 2017 | The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a deni... |
| CVE-2017-6805 | — | — | 7.8% | Mar 20, 2017 | Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read a... |
| CVE-2017-6803 | — | — | 4.4% | Mar 20, 2017 | Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly... |
| CVE-2017-6550 | — | — | 4.0% | Mar 20, 2017 | Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitra... |
| CVE-2017-6356 | MEDIUM | 5.3 | 1.0% | Mar 20, 2017 | Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified... |
| CVE-2017-6318 | — | — | 3.0% | Mar 20, 2017 | saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CONT... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now