2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-3198 | — | — | 1.6% | Jul 9, 2018 | GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additional... |
| CVE-2017-3197 | — | — | 5.3% | Jul 9, 2018 | GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 (version F6) and GB-BXi7-5775 (version F2) platforms does not securely... |
| CVE-2017-7471 | CRITICAL | 9 | 0.9% | Jul 9, 2018 | Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable... |
| CVE-2017-16890 | — | — | 0.9% | Jul 9, 2018 | SWFTools 0.9.2 has a divide-by-zero error in the wav_convert2mono function in lib/wav.c because the align value may be z... |
| CVE-2017-15851 | — | — | 0.2% | Jul 6, 2018 | Lack of copy_from_user and information leak in function "msm_ois_subdev_do_ioctl, file msm_ois.c can lead to a camera cr... |
| CVE-2017-18159 | — | — | 0.2% | Jul 6, 2018 | In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security p... |
| CVE-2017-18158 | — | — | 0.2% | Jul 6, 2018 | Possible buffer overflows and array out of bounds accesses in Android releases from CAF using the linux kernel (Android ... |
| CVE-2017-15856 | — | — | 0.1% | Jul 6, 2018 | Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in... |
| CVE-2017-15824 | — | — | 0.2% | Jul 6, 2018 | In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security p... |
| CVE-2017-14893 | — | — | 0.2% | Jul 6, 2018 | While flashing meta image, a buffer over-read may potentially occur when the image size is smaller than the image header... |
| CVE-2017-14872 | — | — | 0.2% | Jul 6, 2018 | While flashing a meta image, a buffer over-read can potentially occur when the number of images are out of the maximum r... |
| CVE-2017-11088 | — | — | 0.7% | Jul 6, 2018 | Improper Input Validation in Linux io-prefetch in Snapdragon Mobile and Snapdragon Wear, A SQL injection vulnerability e... |
| CVE-2017-1795 | MEDIUM | 4.4 | 0.4% | Jul 6, 2018 | IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via tra... |
| CVE-2017-1559 | LOW | 3.1 | 0.9% | Jul 6, 2018 | Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests. ... |
| CVE-2017-1509 | MEDIUM | 4.3 | 1.0% | Jul 6, 2018 | IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that c... |
| CVE-2017-1488 | LOW | 3.7 | 1.2% | Jul 6, 2018 | An undisclosed vulnerability in Jazz common products exists with potential for information disclosure. IBM X-Force ID: 1... |
| CVE-2017-1329 | MEDIUM | 5.4 | 0.8% | Jul 6, 2018 | IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject m... |
| CVE-2017-1248 | MEDIUM | 5.4 | 1.1% | Jul 6, 2018 | IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject m... |
| CVE-2017-1242 | MEDIUM | 5.4 | 0.8% | Jul 6, 2018 | IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject m... |
| CVE-2017-1239 | MEDIUM | 4.3 | 1.3% | Jul 6, 2018 | IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Err... |
| CVE-2017-1238 | MEDIUM | 5.4 | 0.7% | Jul 6, 2018 | IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows ... |
| CVE-2017-1237 | MEDIUM | 5.4 | 0.7% | Jul 6, 2018 | IBM Jazz based applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J... |
| CVE-2017-2665 | MEDIUM | 4.8 | 0.3% | Jul 6, 2018 | The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /... |
| CVE-2017-16816 | — | — | 1.2% | Jul 5, 2018 | The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a... |
| CVE-2017-11175 | MEDIUM | 6.1 | 0.9% | Jul 5, 2018 | In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /logi... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now