2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-5500 | — | — | 1.3% | Mar 1, 2017 | libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via vectors invo... |
| CVE-2017-5499 | — | — | 1.3% | Mar 1, 2017 | Integer overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service (cra... |
| CVE-2017-5498 | — | — | 1.1% | Mar 1, 2017 | libjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via ... |
| CVE-2017-5682 | — | — | 1.0% | Feb 28, 2017 | Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel In... |
| CVE-2017-5982 | — | — | 77.6% | Feb 28, 2017 | Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files v... |
| CVE-2017-5885 | — | — | 5.0% | Feb 28, 2017 | Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc befor... |
| CVE-2017-5884 | — | — | 2.2% | Feb 28, 2017 | gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers to... |
| CVE-2017-5581 | — | — | 4.2% | Feb 28, 2017 | Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execut... |
| CVE-2017-2683 | — | — | 1.4% | Feb 27, 2017 | A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a ... |
| CVE-2017-2682 | — | — | 1.4% | Feb 27, 2017 | The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform ... |
| CVE-2017-6350 | — | — | 3.4% | Feb 27, 2017 | An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does n... |
| CVE-2017-6349 | — | — | 2.7% | Feb 27, 2017 | An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not pr... |
| CVE-2017-6344 | — | — | 1.2% | Feb 27, 2017 | XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a c... |
| CVE-2017-6343 | — | — | 60.3% | Feb 27, 2017 | The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.00... |
| CVE-2017-6342 | — | — | 12.8% | Feb 27, 2017 | An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.... |
| CVE-2017-6341 | — | — | 8.9% | Feb 27, 2017 | Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, a... |
| CVE-2017-6297 | MEDIUM | 5.9 | 0.7% | Feb 27, 2017 | The L2TP Client in MikroTik RouterOS versions 6.38.3 and 6.37.4 does not enable IPsec encryption after a reboot, which a... |
| CVE-2017-5946 | CRITICAL | 9.8 | 3.5% | Feb 27, 2017 | The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allo... |
| CVE-2017-5928 | LOW | 3.7 | 1.7% | Feb 27, 2017 | The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times ... |
| CVE-2017-5927 | — | — | 1.6% | Feb 27, 2017 | Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cac... |
| CVE-2017-5926 | — | — | 1.6% | Feb 27, 2017 | Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cac... |
| CVE-2017-5925 | — | — | 1.6% | Feb 27, 2017 | Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cac... |
| CVE-2017-0037 | HIGH | 8.1 | 80.4% | Feb 26, 2017 | Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilde... |
| CVE-2017-2791 | HIGH | 7.5 | 1.2% | Feb 24, 2017 | JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint ... |
| CVE-2017-2790 | HIGH | 8.8 | 1.9% | Feb 24, 2017 | When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls), JustSystems Ichitaro Office trus... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now