2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-18274 | — | — | 0.2% | May 6, 2019 | While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorr... |
| CVE-2017-18173 | — | — | 0.2% | May 6, 2019 | In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapd... |
| CVE-2017-18157 | — | — | 0.2% | May 6, 2019 | A Use After Free Condition can occur in Thermal Engine in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in M... |
| CVE-2017-18156 | — | — | 0.2% | May 6, 2019 | While processing camera buffers in camera driver, a use after free condition can occur in Snapdragon Automobile, Snapdra... |
| CVE-2017-18131 | — | — | 0.2% | May 6, 2019 | In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MD... |
| CVE-2017-15841 | — | — | 0.2% | May 6, 2019 | When HOST sends a Special command ID packet, Controller triggers a RAM Dump and FW reset in Snapdragon Mobile in version... |
| CVE-2017-18374 | — | — | 5.5% | May 2, 2019 | The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user account... |
| CVE-2017-18373 | — | — | 5.4% | May 2, 2019 | The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with defaul... |
| CVE-2017-18372 | — | — | 21.9% | May 2, 2019 | The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerabili... |
| CVE-2017-18371 | — | — | 22.5% | May 2, 2019 | The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passw... |
| CVE-2017-18370 | — | — | 22.9% | May 2, 2019 | The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in t... |
| CVE-2017-18369 | — | — | 67.6% | May 2, 2019 | The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote ... |
| CVE-2017-18368 | CRITICAL | 9.8 | 94.5% | May 2, 2019 | The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command inject... |
| CVE-2017-16558 | — | — | 1.2% | Apr 25, 2019 | Contao 3.0.0 to 3.5.30 and 4.0.0 to 4.4.7 contains an SQL injection vulnerability in the back end as well as in the list... |
| CVE-2017-18367 | — | — | 2.5% | Apr 24, 2019 | libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A pro... |
| CVE-2017-15716 | — | — | — | Apr 23, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n... |
| CVE-2017-12619 | — | — | 4.9% | Apr 23, 2019 | Apache Zeppelin prior to 0.7.3 was vulnerable to session fixation which allowed an attacker to hijack a valid user sessi... |
| CVE-2017-11430 | HIGH | 7.7 | 2.3% | Apr 17, 2019 | OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization ... |
| CVE-2017-11429 | HIGH | 7.7 | 2.4% | Apr 17, 2019 | Clever saml2-js 2.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in su... |
| CVE-2017-11428 | HIGH | 7.7 | 2.5% | Apr 17, 2019 | OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs ... |
| CVE-2017-11427 | HIGH | 7.7 | 4.4% | Apr 17, 2019 | OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs... |
| CVE-2017-7777 | — | — | 1.2% | Apr 15, 2019 | Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph funct... |
| CVE-2017-7776 | — | — | 2.8% | Apr 15, 2019 | Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph. |
| CVE-2017-7774 | — | — | 1.4% | Apr 15, 2019 | Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function. |
| CVE-2017-7773 | — | — | 1.4% | Apr 15, 2019 | Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now