2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-14444 | CRITICAL | 9.9 | 1.4% | Aug 2, 2018 | An exploitable buffer overflow vulnerability exists in Insteon Hub running firmware version 1012. The HTTP server implem... |
| CVE-2017-9120 | CRITICAL | 9.8 | 7.6% | Aug 2, 2018 | PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or po... |
| CVE-2017-9118 | HIGH | 7.5 | 3.0% | Aug 2, 2018 | PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call. |
| CVE-2017-5692 | — | — | 0.3% | Aug 1, 2018 | Out-of-bounds read condition in older versions of some Intel Graphics Driver for Windows code branches allows local user... |
| CVE-2017-5693 | — | — | 4.3% | Jul 31, 2018 | Firmware in the Intel Puma 5, 6, and 7 Series might experience resource depletion or timeout, which allows a network att... |
| CVE-2017-13652 | — | — | 1.0% | Jul 31, 2018 | NetApp OnCommand Insight version 7.3.0 and versions prior to 7.2.0 are susceptible to clickjacking attacks which could c... |
| CVE-2017-17708 | — | — | 0.6% | Jul 31, 2018 | Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other u... |
| CVE-2017-17707 | — | — | 0.8% | Jul 31, 2018 | Due to missing authorization checks, any authenticated user is able to list, upload, or delete attachments to password s... |
| CVE-2017-17174 | — | — | 1.1% | Jul 31, 2018 | Some Huawei products RSE6500 V500R002C00; SoftCo V200R003C20SPCb00; VP9660 V600R006C10; eSpace U1981 V100R001C20; V200R0... |
| CVE-2017-7518 | MEDIUM | 5.5 | 0.7% | Jul 30, 2018 | A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in EF... |
| CVE-2017-7514 | MEDIUM | 4.3 | 0.6% | Jul 30, 2018 | A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red Hat Satellite before vers... |
| CVE-2017-7482 | HIGH | 7.8 | 0.5% | Jul 30, 2018 | In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the si... |
| CVE-2017-15118 | HIGH | 8.3 | 11.9% | Jul 27, 2018 | A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client... |
| CVE-2017-2663 | HIGH | 8.2 | 0.4% | Jul 27, 2018 | It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.... |
| CVE-2017-2652 | — | — | 1.4% | Jul 27, 2018 | It was found that there were no permission checks performed in the Distributed Fork plugin before and including 1.5.0 fo... |
| CVE-2017-2650 | — | — | 1.1% | Jul 27, 2018 | It was found that the use of Pipeline: Classpath Step Jenkins plugin enables a bypass of the Script Security sandbox for... |
| CVE-2017-2649 | — | — | 1.0% | Jul 27, 2018 | It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of... |
| CVE-2017-2648 | MEDIUM | 6.8 | 1.4% | Jul 27, 2018 | It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling ... |
| CVE-2017-15101 | HIGH | 7.8 | 1.5% | Jul 27, 2018 | A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. ... |
| CVE-2017-15097 | MEDIUM | 6.5 | 0.5% | Jul 27, 2018 | Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to th... |
| CVE-2017-2634 | HIGH | 7.5 | 5.2% | Jul 27, 2018 | It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used th... |
| CVE-2017-2633 | MEDIUM | 5.4 | 3.0% | Jul 27, 2018 | An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This fla... |
| CVE-2017-2632 | MEDIUM | 4.9 | 1.5% | Jul 27, 2018 | A logic error in valid_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create ... |
| CVE-2017-2629 | MEDIUM | 4.3 | 1.4% | Jul 27, 2018 | curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the ... |
| CVE-2017-2626 | MEDIUM | 5.2 | 0.5% | Jul 27, 2018 | It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially us... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now