2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-2411 | — | — | 0.7% | Jan 11, 2019 | In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. This was addressed by enabling HTTPS for ... |
| CVE-2017-13891 | — | — | 0.8% | Jan 11, 2019 | In iOS before 11.2, an inconsistent user interface issue was addressed through improved state management. |
| CVE-2017-13889 | — | — | 1.1% | Jan 11, 2019 | In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, a logic e... |
| CVE-2017-13888 | — | — | 0.8% | Jan 11, 2019 | In iOS before 11.2, a type confusion issue was addressed with improved memory handling. |
| CVE-2017-13887 | — | — | 0.8% | Jan 11, 2019 | In macOS High Sierra before 10.13.2, a logic issue existed in APFS when deleting keys during hibernation. This was addre... |
| CVE-2017-13886 | — | — | 0.8% | Jan 11, 2019 | In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration. This issue was a... |
| CVE-2017-1002157 | CRITICAL | 9.8 | 2.8% | Jan 10, 2019 | modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execu... |
| CVE-2017-1002152 | MEDIUM | 6.1 | 0.8% | Jan 10, 2019 | Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation o... |
| CVE-2017-3718 | — | — | 0.3% | Jan 10, 2019 | Improper setting of device configuration in system firmware for Intel(R) NUC kits may allow a privileged user to potenti... |
| CVE-2017-15428 | — | — | 18.1% | Jan 9, 2019 | Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in ... |
| CVE-2017-15405 | — | — | 0.2% | Jan 9, 2019 | Inappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a pers... |
| CVE-2017-15404 | — | — | 0.2% | Jan 9, 2019 | An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privil... |
| CVE-2017-15403 | — | — | 0.6% | Jan 9, 2019 | Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google... |
| CVE-2017-15402 | — | — | 0.6% | Jan 9, 2019 | Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any o... |
| CVE-2017-15401 | — | — | 2.0% | Jan 9, 2019 | A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google Ch... |
| CVE-2017-18330 | — | — | 0.2% | Jan 3, 2019 | Buffer overflow in AES-CCM and AES-GCM encryption via initialization vector in snapdragon automobile, snapdragon mobile ... |
| CVE-2017-18329 | — | — | 0.2% | Jan 3, 2019 | Possible Buffer overflow when transmitting an RTP packet in snapdragon automobile and snapdragon wear in versions MDM961... |
| CVE-2017-18328 | — | — | 0.2% | Jan 3, 2019 | Use after free in QSH client rule processing in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9... |
| CVE-2017-18327 | — | — | 0.2% | Jan 3, 2019 | Security keys are logged when any WCDMA call is configured or reconfigured in snapdragon automobile, snapdragon mobile a... |
| CVE-2017-18326 | — | — | 0.2% | Jan 3, 2019 | Cryptographic keys are printed in modem debug messages in snapdragon mobile and snapdragon wear in versions MDM9607, MDM... |
| CVE-2017-18324 | — | — | 0.2% | Jan 3, 2019 | Cryptographic key material leaked in debug messages - GERAN in snapdragon mobile and snapdragon wear in versions MDM9206... |
| CVE-2017-18323 | — | — | 0.2% | Jan 3, 2019 | Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdrag... |
| CVE-2017-18322 | — | — | 0.2% | Jan 3, 2019 | Cryptographic key material leaked in WCDMA debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, ... |
| CVE-2017-18321 | — | — | 0.2% | Jan 3, 2019 | Security keys used by the terminal and NW for a session could be leaked in snapdragon mobile in versions MDM9650, MDM965... |
| CVE-2017-18320 | — | — | 0.2% | Jan 3, 2019 | QSEE unload attempt on a 3rd party TEE without previously loading results in a data abort in snapdragon automobile and s... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now