2017 CVE Vulnerabilities
17,105 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-5858 | — | — | 0.9% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5606 | MEDIUM | 5.9 | 0.8% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5605 | — | — | 0.9% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5604 | — | — | 1.3% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5603 | — | — | 1.6% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5602 | — | — | 0.7% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5593 | — | — | 0.7% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5592 | MEDIUM | 5.9 | 0.8% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5591 | MEDIUM | 5.9 | 1.3% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5590 | — | — | 0.7% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5589 | — | — | 0.7% | Feb 9, 2017 | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to imperson... |
| CVE-2017-5941 | CRITICAL | 9.8 | 60.4% | Feb 9, 2017 | An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() fu... |
| CVE-2017-5940 | — | — | 0.4% | Feb 9, 2017 | Firejail before 0.9.44.6 and 0.9.38.x LTS before 0.9.38.10 LTS does not comprehensively address dotfile cases during its... |
| CVE-2017-5180 | — | — | 0.7% | Feb 9, 2017 | Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt ... |
| CVE-2017-3813 | — | — | 1.7% | Feb 9, 2017 | A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows c... |
| CVE-2017-3807 | — | — | 14.8% | Feb 9, 2017 | A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software,... |
| CVE-2017-5634 | — | — | 0.4% | Feb 9, 2017 | The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended... |
| CVE-2017-5848 | HIGH | 7.5 | 4.4% | Feb 9, 2017 | The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attack... |
| CVE-2017-5847 | HIGH | 7.5 | 3.7% | Feb 9, 2017 | The gst_asf_demux_process_ext_content_desc function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer allow... |
| CVE-2017-5846 | — | — | 2.0% | Feb 9, 2017 | The gst_asf_demux_process_ext_stream_props function in gst/asfdemux/gstasfdemux.c in gst-plugins-ugly in GStreamer befor... |
| CVE-2017-5845 | — | — | 3.8% | Feb 9, 2017 | The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows rem... |
| CVE-2017-5844 | — | — | 2.5% | Feb 9, 2017 | The gst_riff_create_audio_caps function in gst-libs/gst/riff/riff-media.c in gst-plugins-base in GStreamer before 1.10.3... |
| CVE-2017-5843 | — | — | 3.8% | Feb 9, 2017 | Multiple use-after-free vulnerabilities in the (1) gst_mini_object_unref, (2) gst_tag_list_unref, and (3) gst_mxf_demux_... |
| CVE-2017-5842 | — | — | 2.2% | Feb 9, 2017 | The html_context_handle_element function in gst/subparse/samiparse.c in gst-plugins-base in GStreamer before 1.10.3 allo... |
| CVE-2017-5841 | — | — | 3.8% | Feb 9, 2017 | The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows rem... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now