CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.09.29)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2017-17502
High

GraphicsMagick 1.3.26 has a vulnerability in the ReadCMYKImage function in coders/cmyk.c that allows for a heap-based buffer over-read via a crafted file.

CVE-2017-17501
High

GraphicsMagick 1.3.26 has a heap-based buffer over-read vulnerability in the WriteOnePNGImage function in coders/png.c, which can be exploited via a crafted file.

CVE-2017-17500
High

GraphicsMagick 1.3.26 has a vulnerability in the ReadRGBImage function in coders/rgb.c that allows for a heap-based buffer over-read via a crafted file.

CVE-2017-17498
High

The WritePNMImage function in coders/pnm.c in GraphicsMagick 1.3.26 has a vulnerability that allows remote attackers to cause a denial of service through a heap-based buffer overflow, leading to application crashes.

CVE-2017-17497
High

In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault) because the currentNode variable is modified in the loop without validating the new value.

CVE-2017-16241
High

Incorrect access control in AMAG Symmetry Door Edge Network Controllers allows remote attackers to execute door controller commands by sending unauthenticated requests. Attackers can, for example, lock or unlock doors and add ID card values.

CVE-2017-3111
High

An issue was discovered in Adobe Experience Manager versions 6.3, 6.2, 6.1, and 6.0, where sensitive tokens are included in HTTP GET requests under certain circumstances.

CVE-2017-16420
High

A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue affects the JavaScript engine responsible for annotation abstraction.

CVE-2017-16418
High

A vulnerability exists in Adobe Acrobat and Reader related to reading data past the end of the target buffer, affecting versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier. This issue occurs in the image conversion module that handles XPS files.

CVE-2017-16417
High

A vulnerability exists in Adobe Acrobat and Reader related to reading data past the end of the target buffer, occurring in the font parsing module. The use of an invalid pointer during access to internal data structure fields leads to this vulnerability.

CVE-2017-16416
High

An issue was discovered in Adobe Acrobat and Reader related to writing data past the end of the intended buffer. The vulnerability affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.

CVE-2017-16415
High

A vulnerability exists in Adobe Acrobat and Reader that allows data to be written past the end of the intended buffer, potentially leading to corruption of sensitive data or execution of arbitrary code. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.

CVE-2017-16414
High

A vulnerability exists in Adobe Acrobat and Reader related to computations that read data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.

CVE-2017-16413
High

A vulnerability exists in Adobe Acrobat and Reader related to a computation that writes data past the end of the intended buffer. This issue affects the XPS to PDF conversion when processing TIFF files.

CVE-2017-16412
High

A vulnerability in Adobe Acrobat and Reader allows reading data past the end of the target buffer during XPS conversion, potentially leading to sensitive data exposure.

CVE-2017-16411
High

A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue is related to the WebCapture module and an internal hash table implementation.

CVE-2017-16410
High

A vulnerability exists in Adobe Acrobat and Reader related to untrusted input used to calculate an array index in the image conversion module when processing GIF files. This can lead to writing to a memory location outside of the allocated memory addresses for the data structure.

CVE-2017-16409
High

A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.

CVE-2017-16408
High

A vulnerability exists in Adobe Acrobat and Reader that involves reading data past the end of the target buffer. This issue affects versions 2017.012.20098 and earlier, 2017.011.30066 and earlier, 2015.006.30355 and earlier, and 11.0.22 and earlier.

CVE-2017-16407
High

An issue was discovered in Adobe Acrobat and Reader that involves writing data past the end of the intended buffer. This vulnerability results from an out of range pointer offset, which can lead to corrupting sensitive data or executing arbitrary code.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS