CVE-2017-17944

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

The ASUS Vivobaby application before 1.1.09 for Android has Missing SSL Certificate Validation.

Metrics

CVSS 3.0 9.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-295

Affected software

No affected versions have been published.

Timeline

Published
Jun 20, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-179459.1The ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation.CVE-2017-179469.8A buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long "Title name" field in "mail box" dataCVE-2017-179474.8A cross site scripting issue has been found in custompage.cgi in Pulse Secure Pulse Connect Secure (PCS) before 8.0R17.0, 8.1.x before 8.1R1CVE-2017-179486.1Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request.CVE-2017-179496.1Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.CVE-2017-17954.4IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via trace logs in IBM WebSpCVE-2017-179508.8Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.CVE-2017-179519.8PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.CVE-2017-179528.6PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with anCVE-2017-179536.1PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.CVE-2017-179546.1PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.CVE-2017-179556.1PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.
CVE-2017-17944: Critical severity, CVSS 9.1 | Vulnix