2017 CVE Vulnerabilities

17,113 CVEs published in 2017.

CVE IDSeverityCVSSDescription
CVE-2017-15137MEDIUM4.3The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", fo...
CVE-2017-7468MEDIUM4.8In curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session even if the client cer...
CVE-2017-2638MEDIUM6.5It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints. An attacker...
CVE-2017-13097——The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as...
CVE-2017-13096——The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as...
CVE-2017-13095——The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as...
CVE-2017-13094——The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as...
CVE-2017-13093——The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as...
CVE-2017-13092——The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as...
CVE-2017-13091——The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), as well as...
CVE-2017-1395MEDIUM5.9IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 could allow a remote attacker to...
CVE-2017-1367LOW3.7IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 stores sensitive information in ...
CVE-2017-14710MEDIUM5.9The Shein Group Ltd. "SHEIN - Fashion Shopping" app -- aka shein fashion-shopping/id878577184 -- for iOS does not verify...
CVE-2017-14709——The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for i...
CVE-2017-14612——"Shpock Boot Sale & Classifieds" app before 3.17.0 -- aka shpock-boot-sale-classifieds/id557153158 -- for iOS does not v...
CVE-2017-18155——While playing HEVC content using HD DMB in Snapdragon Automobile and Snapdragon Mobile in version MSM8996AU, SD 450, SD ...
CVE-2017-16710——Cross-site scripting (XSS) vulnerability in Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devic...
CVE-2017-16709——Crestron Airmedia AM-100 devices with firmware before 1.6.0 and AM-101 devices with firmware before 2.7.0 allows remote ...
CVE-2017-7467HIGH7A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious ter...
CVE-2017-5704——Platform sample code firmware included with 4th Gen Intel Core Processor, 5th Gen Intel Core Processor, 6th Gen Intel Co...
CVE-2017-1793MEDIUM5.4IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulner...
CVE-2017-1792MEDIUM5.4IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulner...
CVE-2017-1791MEDIUM5.4IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulner...
CVE-2017-1738MEDIUM6.3IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 contains an undisclosed vulnerability that would al...
CVE-2017-1729MEDIUM5.4IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulner...

Check if your code is affected by 2017 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now