2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-18344 | — | — | 3.2% | Jul 26, 2018 | The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly... |
| CVE-2017-12150 | HIGH | 7.4 | 13.2% | Jul 26, 2018 | It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when ce... |
| CVE-2017-2582 | MEDIUM | 6.5 | 2.5% | Jul 26, 2018 | It was found that while parsing the SAML messages the StaxParserUtil class of keycloak before 2.5.1 replaces special str... |
| CVE-2017-12175 | LOW | 3.5 | 1.1% | Jul 26, 2018 | Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering filter and you use autocompl... |
| CVE-2017-12171 | MEDIUM | 6.5 | 8.1% | Jul 26, 2018 | A regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" a... |
| CVE-2017-12167 | MEDIUM | 5.5 | 0.4% | Jul 26, 2018 | It was found in EAP 7 before 7.0.9 that properties based files of the management and the application realm configuration... |
| CVE-2017-7509 | LOW | 3.5 | 0.7% | Jul 26, 2018 | An input validation error was found in Red Hat Certificate System's handling of client provided certificates before 8.1.... |
| CVE-2017-12164 | MEDIUM | 4.1 | 0.4% | Jul 26, 2018 | A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If au... |
| CVE-2017-12163 | MEDIUM | 4.1 | 7.6% | Jul 26, 2018 | An information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4.16, 4.5.x before 4.5.14,... |
| CVE-2017-7562 | MEDIUM | 6.5 | 3.3% | Jul 26, 2018 | An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of cli... |
| CVE-2017-7558 | MEDIUM | 5.1 | 3.8% | Jul 26, 2018 | A kernel data leak due to an out-of-bound read was found in the Linux kernel in inet_diag_msg_sctp{,l}addr_fill() and sc... |
| CVE-2017-7545 | MEDIUM | 6.5 | 2.8% | Jul 26, 2018 | It was discovered that the XmlUtils class in jbpmmigration 6.5 performed expansion of external parameter entities while ... |
| CVE-2017-7538 | LOW | 3.5 | 0.7% | Jul 26, 2018 | A cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite 5, before 5.8. A user ... |
| CVE-2017-2589 | HIGH | 8.7 | 0.9% | Jul 26, 2018 | It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cook... |
| CVE-2017-7543 | MEDIUM | 5.3 | 1.8% | Jul 26, 2018 | A race-condition flaw was discovered in openstack-neutron before 7.2.0-12.1, 8.x before 8.3.0-11.1, 9.x before 9.3.1-2.1... |
| CVE-2017-7539 | MEDIUM | 5.3 | 5.5% | Jul 26, 2018 | An assertion-failure flaw was found in Qemu before 2.10.1, in the Network Block Device (NBD) server's initial connection... |
| CVE-2017-2664 | MEDIUM | 6.5 | 1.3% | Jul 26, 2018 | CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1 lacks RBAC controls on certain methods in the ra... |
| CVE-2017-12610 | — | — | 3.0% | Jul 26, 2018 | In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.1, authenticated Kafka clients may use impersonation via a m... |
| CVE-2017-7537 | MEDIUM | 5.9 | 1.5% | Jul 26, 2018 | It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pk... |
| CVE-2017-7535 | MEDIUM | 6.1 | 1.5% | Jul 26, 2018 | foreman before version 1.16.0 is vulnerable to a stored XSS in organizations/locations assignment to hosts. Exploiting t... |
| CVE-2017-7530 | HIGH | 8.8 | 1.7% | Jul 26, 2018 | In CloudForms Management Engine (cfme) before 5.7.3 and 5.8.x before 5.8.1, it was found that privilege check is missing... |
| CVE-2017-7526 | MEDIUM | 6.1 | 3.9% | Jul 26, 2018 | libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 ... |
| CVE-2017-2637 | CRITICAL | 9.9 | 4.8% | Jul 26, 2018 | A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-mi... |
| CVE-2017-10937 | — | — | 1.3% | Jul 25, 2018 | SQL injection vulnerability in all versions prior to V2.01.05.09 of the ZTE ZXIPTV-UCM product allows remote attackers t... |
| CVE-2017-10936 | — | — | 1.3% | Jul 25, 2018 | SQL injection vulnerability in all versions prior to V4.01.01 of the ZTE ZXCDN-SNS product allows remote attackers to ex... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now