2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

CVE IDSeverityCVSSDescription
CVE-2017-5548——drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK o...
CVE-2017-5547HIGH7.8drivers/hid/hid-corsair.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option...
CVE-2017-5546HIGH7.8The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to c...
CVE-2017-2596——The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMXO...
CVE-2017-2583——The load_segment_descriptor implementation in arch/x86/kvm/emulate.c in the Linux kernel before 4.9.5 improperly emulate...
CVE-2017-5137——An issue was discovered on SendQuick Entera and Avera devices before 2HF16. An attacker could request and download the S...
CVE-2017-5136——An issue was discovered on SendQuick Entera and Avera devices before 2HF16. The application failed to check the access c...
CVE-2017-5882——Cross-site scripting (XSS) vulnerability in index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrar...
CVE-2017-5880——Splunk Web in Splunk Enterprise versions 6.5.x before 6.5.2, 6.4.x before 6.4.5, 6.3.x before 6.3.9, 6.2.x before 6.2.13...
CVE-2017-3824——A vulnerability in the handling of list headers in Cisco cBR Series Converged Broadband Routers could allow an unauthent...
CVE-2017-3822MEDIUM5.3A vulnerability in the logging subsystem of the Cisco Firepower Threat Defense (FTD) Firepower Device Manager (FDM) coul...
CVE-2017-3820——A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Rou...
CVE-2017-3818——A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Se...
CVE-2017-3814——A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass...
CVE-2017-3812——A vulnerability in the implementation of Common Industrial Protocol (CIP) functionality in Cisco Industrial Ethernet 200...
CVE-2017-3810——A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to con...
CVE-2017-3809——A vulnerability in the Policy deployment module of the Cisco Firepower Management Center (FMC) could allow an unauthenti...
CVE-2017-3806MEDIUM5.3A vulnerability in CLI command processing in the Cisco Firepower 4100 Series Next-Generation Firewall and Cisco Firepowe...
CVE-2017-2768——EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuratio...
CVE-2017-2767——EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuratio...
CVE-2017-2766——EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 ...
CVE-2017-1093——IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privil...
CVE-2017-5600——The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative a...
CVE-2017-5219——An issue was discovered in SageCRM 7.x before 7.3 SP3. The Component Manager functionality, provided by SageCRM, permits...
CVE-2017-5218——A SQL Injection issue was discovered in SageCRM 7.x before 7.3 SP3. The AP_DocumentUI.asp web resource includes Utilityf...

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now