2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-18303 | — | — | 0.3% | Oct 23, 2018 | While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Sn... |
| CVE-2017-18300 | — | — | 0.2% | Oct 23, 2018 | Secure display content could be accessed by third party trusted application after creating a fault in other trusted appl... |
| CVE-2017-18299 | — | — | 0.3% | Oct 23, 2018 | Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Sna... |
| CVE-2017-18298 | — | — | 0.3% | Oct 23, 2018 | Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Sna... |
| CVE-2017-18297 | — | — | 0.3% | Oct 23, 2018 | Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, S... |
| CVE-2017-18296 | — | — | 0.3% | Oct 23, 2018 | Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdra... |
| CVE-2017-18295 | — | — | 0.3% | Oct 23, 2018 | Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobi... |
| CVE-2017-18294 | — | — | 0.3% | Oct 23, 2018 | While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size o... |
| CVE-2017-18293 | — | — | 0.3% | Oct 23, 2018 | When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can ... |
| CVE-2017-18292 | — | — | 0.3% | Oct 23, 2018 | Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, S... |
| CVE-2017-18283 | — | — | 0.5% | Oct 23, 2018 | Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QC... |
| CVE-2017-18282 | — | — | 0.3% | Oct 23, 2018 | Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdrag... |
| CVE-2017-18277 | — | — | 0.2% | Oct 23, 2018 | When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop witho... |
| CVE-2017-18172 | — | — | 0.2% | Oct 23, 2018 | In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting i... |
| CVE-2017-18171 | — | — | 0.5% | Oct 23, 2018 | Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory cor... |
| CVE-2017-18170 | — | — | 0.5% | Oct 23, 2018 | Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile i... |
| CVE-2017-18348 | — | — | 0.4% | Oct 19, 2018 | Splunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local... |
| CVE-2017-17176 | — | — | 0.3% | Oct 17, 2018 | The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B... |
| CVE-2017-5934 | — | — | 1.9% | Oct 15, 2018 | Cross-site scripting (XSS) vulnerability in the link dialogue in GUI editor in MoinMoin before 1.9.10 allows remote atta... |
| CVE-2017-1231 | MEDIUM | 4.4 | 0.3% | Oct 12, 2018 | IBM BigFix Platform 9.5 - 9.5.9 stores user credentials in plain in clear text which can be read by a local user. IBM X-... |
| CVE-2017-5658 | — | — | 1.8% | Oct 4, 2018 | The statistics generator in Apache Pony Mail 0.7 to 0.9 was found to be returning timestamp data without proper authoriz... |
| CVE-2017-2751 | — | — | 1.1% | Oct 3, 2018 | A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others. ... |
| CVE-2017-7908 | — | — | 1.0% | Oct 2, 2018 | A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 ... |
| CVE-2017-1649 | MEDIUM | 5.4 | 0.7% | Oct 2, 2018 | IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This v... |
| CVE-2017-15608 | — | — | 0.4% | Sep 26, 2018 | Inedo ProGet before 5.0 Beta5 has CSRF, allowing an attacker to change advanced settings. |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now