2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

CVE IDSeverityCVSSDescription
CVE-2017-6386MEDIUM6.5Memory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer allows local guest O...
CVE-2017-6366——Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 all...
CVE-2017-6317——Memory leak in the add_shader_program function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS u...
CVE-2017-6210——The vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local guest OS users to cause a d...
CVE-2017-6209——Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium ...
CVE-2017-6060HIGH7.8Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. MuPDF 1.10a allows remote attackers t...
CVE-2017-5994——Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer befor...
CVE-2017-5993——Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local g...
CVE-2017-5938——Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x bef...
CVE-2017-5584——Cross-site scripting (XSS) vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6....
CVE-2017-5583——The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 all...
CVE-2017-6909——An issue was discovered in Shimmie <= 2.5.1. The vulnerability exists due to insufficient filtration of user-supplied da...
CVE-2017-6908——An issue was discovered in concrete5 <= 5.6.3.4. The vulnerability exists due to insufficient filtration of user-supplie...
CVE-2017-6907——An issue was discovered in Open.GL before 2017-03-13. The vulnerability exists due to insufficient filtration of user-su...
CVE-2017-6906——An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-s...
CVE-2017-6905——An issue was discovered in concrete5 <= 5.6.3.4. The vulnerability exists due to insufficient filtration of user-supplie...
CVE-2017-6903——In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Qua...
CVE-2017-3899——SQL injection vulnerability in Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 and earlier allows remote authen...
CVE-2017-6902——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. ...
CVE-2017-6896——Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from...
CVE-2017-6516——A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow...
CVE-2017-5985——lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on ...
CVE-2017-3003HIGH8.8Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an intera...
CVE-2017-3002HIGH8.8Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2...
CVE-2017-3001HIGH8.8Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage c...

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now