2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-7771 | — | — | 1.2% | Apr 15, 2019 | Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function. |
| CVE-2017-18366 | — | — | 0.7% | Apr 15, 2019 | Subrion CMS 4.1.5 has CSRF in blog/delete/. |
| CVE-2017-7775 | — | — | — | Apr 15, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2017-7772 | — | — | 1.4% | Apr 12, 2019 | Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function. |
| CVE-2017-14199 | — | — | 1.7% | Apr 12, 2019 | A buffer overflow has been found in the Zephyr Project's getaddrinfo() implementation in 1.9.0 and 1.10.0. |
| CVE-2017-3139 | HIGH | 7.5 | 1.6% | Apr 9, 2019 | A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to m... |
| CVE-2017-17023 | — | — | 0.6% | Apr 9, 2019 | The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering (www.ncp-e.com). The affected cli... |
| CVE-2017-17544 | HIGH | 7.2 | 1.7% | Apr 9, 2019 | A privilege escalation vulnerability in Fortinet FortiOS 6.0.0 to 6.0.6, 5.6.0 to 5.6.10, 5.4 and below allows admin use... |
| CVE-2017-7912 | — | — | 4.8% | Apr 8, 2019 | Hanwha Techwin SRN-4000, SRN-4000 firmware versions prior to SRN4000_v2.16_170401, A specially crafted http request and ... |
| CVE-2017-7151 | — | — | 1.0% | Apr 3, 2019 | A race condition was addressed with additional validation. This issue affected versions prior to iOS 11.2, macOS High Si... |
| CVE-2017-13911 | — | — | 0.9% | Apr 3, 2019 | A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS X El Capit... |
| CVE-2017-6049 | — | — | 1.3% | Apr 2, 2019 | Detcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the device using a specially c... |
| CVE-2017-6047 | — | — | 1.8% | Apr 2, 2019 | Detcon Sitewatch Gateway, all versions without cellular, Passwords are presented in plaintext in a file that is accessib... |
| CVE-2017-8023 | CRITICAL | 9.8 | 5.9% | Apr 1, 2019 | EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the Networker C... |
| CVE-2017-16775 | HIGH | 7.1 | 1.1% | Apr 1, 2019 | Improper restriction of rendered UI layers or frames vulnerability in SSOOauth.cgi in Synology SSO Server before 2.1.3-0... |
| CVE-2017-16774 | MEDIUM | 6.5 | 0.8% | Apr 1, 2019 | Cross-site scripting (XSS) vulnerability in SYNO.Core.PersonalNotification.Event in Synology DiskStation Manager (DSM) b... |
| CVE-2017-18111 | — | — | 1.7% | Mar 29, 2019 | The OAuthHelper in Atlassian Application Links before version 5.0.10, from version 5.1.0 before version 5.1.3, and from ... |
| CVE-2017-18110 | — | — | 1.2% | Mar 29, 2019 | The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version... |
| CVE-2017-18109 | — | — | 1.1% | Mar 29, 2019 | The login resource of CrowdId in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows... |
| CVE-2017-18108 | — | — | 2.3% | Mar 29, 2019 | The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with adm... |
| CVE-2017-18106 | — | — | 1.3% | Mar 29, 2019 | The identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an identi... |
| CVE-2017-18105 | — | — | 1.4% | Mar 29, 2019 | The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows re... |
| CVE-2017-18365 | — | — | 21.4% | Mar 28, 2019 | The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated r... |
| CVE-2017-9626 | — | — | 1.9% | Mar 27, 2019 | Systems using the Marel Food Processing Systems Pluto platform do not restrict remote access. Marel has created an updat... |
| CVE-2017-7655 | HIGH | 7.5 | 1.9% | Mar 27, 2019 | In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library whi... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now