2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-14777 | — | — | — | May 22, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7502. Reason: This candidate is a reservation ... |
| CVE-2017-14776 | — | — | — | May 22, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7502. Reason: This candidate is a reservation ... |
| CVE-2017-18273 | — | — | 2.4% | May 18, 2018 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in ... |
| CVE-2017-18272 | — | — | 1.2% | May 18, 2018 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allow... |
| CVE-2017-18271 | — | — | 2.2% | May 18, 2018 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in... |
| CVE-2017-18270 | — | — | 0.4% | May 18, 2018 | In the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl commands, setting unwan... |
| CVE-2017-18269 | — | — | 4.8% | May 18, 2018 | An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Li... |
| CVE-2017-9637 | — | — | 0.2% | May 18, 2018 | Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. When connectivity... |
| CVE-2017-9635 | — | — | 0.2% | May 18, 2018 | Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges. When Ampla MES users are c... |
| CVE-2017-15855 | — | — | 0.2% | May 17, 2018 | In Qualcomm Android for MSM, Firefox OS for MSM, and QRD Android with all Android releases from CAF using the Linux kern... |
| CVE-2017-15533 | — | — | 1.9% | May 17, 2018 | Symantec SSL Visibility (SSLV) 3.8.4FC, 3.10 prior to 3.10.4.1, 3.11, and 3.12 prior to 3.12.2.1 are vulnerable to the R... |
| CVE-2017-17689 | — | — | 4.2% | May 16, 2018 | The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to pla... |
| CVE-2017-17688 | — | — | 5.6% | May 16, 2018 | The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to pla... |
| CVE-2017-6021 | — | — | 1.7% | May 14, 2018 | In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build ... |
| CVE-2017-16860 | — | — | 0.9% | May 14, 2018 | The invalidRedirectUrl template in Atlassian Application Links before version 5.2.7, from version 5.3.0 before version 5... |
| CVE-2017-6015 | — | — | 0.7% | May 11, 2018 | Without quotation marks, any whitespace in the file path for Rockwell Automation FactoryTalk Activation version 4.00.02 ... |
| CVE-2017-18267 | — | — | 1.9% | May 10, 2018 | The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a den... |
| CVE-2017-6293 | — | — | 0.2% | May 10, 2018 | In Android before the 2018-05-05 security patch level, NVIDIA Tegra X1 TZ contains a vulnerability in Widevine TA where ... |
| CVE-2017-6289 | — | — | 0.2% | May 10, 2018 | In Android before the 2018-05-05 security patch level, NVIDIA Trusted Execution Environment (TEE) contains a memory corr... |
| CVE-2017-18266 | — | — | 2.5% | May 10, 2018 | The open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before launching the program sp... |
| CVE-2017-5175 | — | — | 1.6% | May 9, 2018 | Advantech WebAccess 8.1 and earlier contains a DLL hijacking vulnerability which may allow an attacker to run a maliciou... |
| CVE-2017-18265 | — | — | 1.7% | May 9, 2018 | Prosody before 0.10.0 allows remote attackers to cause a denial of service (application crash), related to an incompatib... |
| CVE-2017-17540 | — | — | 2.1% | May 8, 2018 | The presence of a hardcoded account in Fortinet FortiWLC 8.3.3 allows attackers to gain unauthorized read/write access v... |
| CVE-2017-17539 | — | — | 2.1% | May 8, 2018 | The presence of a hardcoded account in Fortinet FortiWLC 7.0.11 and earlier allows attackers to gain unauthorized read/w... |
| CVE-2017-15043 | — | — | 4.2% | May 4, 2018 | A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now