# Vulnerabilities published in 2017


- [openSUSE-SU-2017:3451-1](https://insights.sbomify.com/openSUSE-SU-2017-3451-1/): Security update for phpMyAdmin (not scored)
- [openSUSE-SU-2017:3448-1](https://insights.sbomify.com/openSUSE-SU-2017-3448-1/): Security update for phpMyAdmin (not scored)
- [openSUSE-SU-2017:3427-1](https://insights.sbomify.com/openSUSE-SU-2017-3427-1/): Security update for enigmail (not scored)
- [openSUSE-SU-2017:3419-1](https://insights.sbomify.com/openSUSE-SU-2017-3419-1/): Security update for enigmail (not scored)
- [openSUSE-SU-2017:2594-1](https://insights.sbomify.com/openSUSE-SU-2017-2594-1/): Security update for fmpeg (not scored)
- [openSUSE-SU-2017:1765-1](https://insights.sbomify.com/openSUSE-SU-2017-1765-1/): Security update for ffmpeg (not scored)
- [openSUSE-SU-2017:0917-1](https://insights.sbomify.com/openSUSE-SU-2017-0917-1/): Recommended update for geotiff (not scored)
- [openSUSE-SU-2017:0916-1](https://insights.sbomify.com/openSUSE-SU-2017-0916-1/): Recommended update for geotiff (not scored)
- [openSUSE-SU-2017:0739-1](https://insights.sbomify.com/openSUSE-SU-2017-0739-1/): Security update for irssi (not scored)
- [openSUSE-SU-2017:0737-1](https://insights.sbomify.com/openSUSE-SU-2017-0737-1/): Security update for irssi (not scored)
- [openSUSE-SU-2017:0413-1](https://insights.sbomify.com/openSUSE-SU-2017-0413-1/): Security update for irssi (not scored)
- [openSUSE-SU-2017:0035-1](https://insights.sbomify.com/openSUSE-SU-2017-0035-1/): Security update for kopete (not scored)
- [openSUSE-SU-2017:0034-1](https://insights.sbomify.com/openSUSE-SU-2017-0034-1/): Security update for kopete (not scored)
- [SUSE-SU-2017:3441-1](https://insights.sbomify.com/SUSE-SU-2017-3441-1/): Security update for gdk-pixbuf (not scored)
- [SUSE-SU-2017:3062-1](https://insights.sbomify.com/SUSE-SU-2017-3062-1/): Security update for gimp (not scored)
- [SUSE-SU-2017:2749-1](https://insights.sbomify.com/SUSE-SU-2017-2749-1/): Security update for xerces-j2 (not scored)
- [SUSE-SU-2017:2744-1](https://insights.sbomify.com/SUSE-SU-2017-2744-1/): Security update for xerces-j2 (not scored)
- [SUSE-SU-2017:2697-1](https://insights.sbomify.com/SUSE-SU-2017-2697-1/): Security update for libvirt (not scored)
- [SUSE-SU-2017:2660-1](https://insights.sbomify.com/SUSE-SU-2017-2660-1/): Security update for libvirt (not scored)
- [SUSE-SU-2017:2628-1](https://insights.sbomify.com/SUSE-SU-2017-2628-1/): Security update for openstack-glance (not scored)
- [SUSE-SU-2017:2598-1](https://insights.sbomify.com/SUSE-SU-2017-2598-1/): Security update for libvirt (not scored)
- [SUSE-SU-2017:2109-1](https://insights.sbomify.com/SUSE-SU-2017-2109-1/): Security update for tcmu-runner (not scored)
- [SUSE-SU-2017:2039-1](https://insights.sbomify.com/SUSE-SU-2017-2039-1/): Security update for hawk (not scored)
- [SUSE-SU-2017:1577-1](https://insights.sbomify.com/SUSE-SU-2017-1577-1/): Security update for libqt5-qtbase, libqt5-qtdeclarative (not scored)
- [SUSE-SU-2017:1008-1](https://insights.sbomify.com/SUSE-SU-2017-1008-1/): Security update for sblim-sfcb (not scored)
- [SUSE-SU-2017:0695-1](https://insights.sbomify.com/SUSE-SU-2017-0695-1/): Recommended update for dbus-1 (not scored)
- [SUSE-SU-2017:0292-1](https://insights.sbomify.com/SUSE-SU-2017-0292-1/): Security update for dbus-1 (not scored)
- [RUSTSEC-2017-0008](https://insights.sbomify.com/RUSTSEC-2017-0008/): `serial` crate is unmaintained (not scored)
- [RUSTSEC-2017-0007](https://insights.sbomify.com/RUSTSEC-2017-0007/): lz4-compress is unmaintained (not scored)
- [PSF-2017-9](https://insights.sbomify.com/PSF-2017-9/): bpo-30500: urllib connects to a wrong host (not scored)
- [PSF-2017-8](https://insights.sbomify.com/PSF-2017-8/): Environment variables injection in subprocess on Windows (not scored)
- [PSF-2017-11](https://insights.sbomify.com/PSF-2017-11/): Expat 2.2.3 (not scored)
- [PSF-2017-10](https://insights.sbomify.com/PSF-2017-10/): urllib FTP protocol stream injection (not scored)
- [GHSA-mcrf-7hf9-f6q5](https://insights.sbomify.com/GHSA-mcrf-7hf9-f6q5/): Unchecked vector pre-allocation (not scored)
- [DRUPAL-CONTRIB-2017-094](https://insights.sbomify.com/DRUPAL-CONTRIB-2017-094/): The Link Click Count module helps you to monitor the traffic to your website by creating link fields. (not scored)
- [DRUPAL-CONTRIB-2017-091](https://insights.sbomify.com/DRUPAL-CONTRIB-2017-091/): The Configuration Update Reports sub-module in the Configuration Update module project enables you to run reports to see what configuration (not scored)
- [DRUPAL-CONTRIB-2017-083](https://insights.sbomify.com/DRUPAL-CONTRIB-2017-083/): Custom Permissions is a lightweight module that allows permissions to be created and managed through an administrative form. (not scored)
- [DRUPAL-CONTRIB-2017-082](https://insights.sbomify.com/DRUPAL-CONTRIB-2017-082/): The Permissions by Term module extends Drupal by adding functionality for restricting access to single nodes via taxonomy terms. (not scored)
- [CVE-2017-9998](https://insights.sbomify.com/CVE-2017-9998/): Denial of service in n/a (medium 6.5)
- [CVE-2017-9996](https://insights.sbomify.com/CVE-2017-9996/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9995](https://insights.sbomify.com/CVE-2017-9995/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9994](https://insights.sbomify.com/CVE-2017-9994/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9993](https://insights.sbomify.com/CVE-2017-9993/): Path traversal in n/a (high 7.5)
- [CVE-2017-9992](https://insights.sbomify.com/CVE-2017-9992/): Memory corruption in n/a (high 8.8)
- [CVE-2017-9991](https://insights.sbomify.com/CVE-2017-9991/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9990](https://insights.sbomify.com/CVE-2017-9990/): Memory corruption in n/a (high 8.8)
- [CVE-2017-9989](https://insights.sbomify.com/CVE-2017-9989/): Null dereference in n/a (medium 6.5)
- [CVE-2017-9988](https://insights.sbomify.com/CVE-2017-9988/): Null dereference in n/a (medium 6.5)
- [CVE-2017-9987](https://insights.sbomify.com/CVE-2017-9987/): Memory corruption in n/a (high 7.5)
- [CVE-2017-9986](https://insights.sbomify.com/CVE-2017-9986/): Race condition in n/a (high 7.8)
- [CVE-2017-9985](https://insights.sbomify.com/CVE-2017-9985/): Race condition in n/a (high 7.8)
- [CVE-2017-9984](https://insights.sbomify.com/CVE-2017-9984/): Race condition in n/a (high 7.8)
- [CVE-2017-9982](https://insights.sbomify.com/CVE-2017-9982/): Denial of service in n/a (high 7.5)
- [CVE-2017-9980](https://insights.sbomify.com/CVE-2017-9980/): Command injection in n/a (critical 9.8)
- [CVE-2017-9979](https://insights.sbomify.com/CVE-2017-9979/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9978](https://insights.sbomify.com/CVE-2017-9978/): Information disclosure in n/a (medium 5.3)
- [CVE-2017-9977](https://insights.sbomify.com/CVE-2017-9977/): Security feature bypass in n/a (high 7.5)
- [CVE-2017-9970](https://insights.sbomify.com/CVE-2017-9970/): File upload in n/a (high 7.2)
- [CVE-2017-9969](https://insights.sbomify.com/CVE-2017-9969/): Hardcoded credentials in n/a (medium 6.7)
- [CVE-2017-9968](https://insights.sbomify.com/CVE-2017-9968/): Security feature bypass in n/a (medium 5.9)
- [CVE-2017-9967](https://insights.sbomify.com/CVE-2017-9967/): Misconfiguration in n/a (high 7.8)
- [CVE-2017-9966](https://insights.sbomify.com/CVE-2017-9966/): Privilege escalation in Pelco VideoXpert Enterprise (high 7.1)
- [CVE-2017-9965](https://insights.sbomify.com/CVE-2017-9965/): Path traversal in Pelco VideoXpert Enterprise (medium 5.8)
- [CVE-2017-9964](https://insights.sbomify.com/CVE-2017-9964/): Path traversal in Pelco VideoXpert Enterprise (medium 6.9)
- [CVE-2017-9963](https://insights.sbomify.com/CVE-2017-9963/): Cross-site request forgery in n/a (high 8.1)
- [CVE-2017-9962](https://insights.sbomify.com/CVE-2017-9962/): Memory corruption in ClearSCADA (high 7.5)
- [CVE-2017-9961](https://insights.sbomify.com/CVE-2017-9961/): Code injection in ProFace GP-Pro EX (high 7.8)
- [CVE-2017-9960](https://insights.sbomify.com/CVE-2017-9960/): Information disclosure in U.Motion (medium 5.3)
- [CVE-2017-9959](https://insights.sbomify.com/CVE-2017-9959/): Missing authorization in n/a (medium 5.5)
- [CVE-2017-9958](https://insights.sbomify.com/CVE-2017-9958/): Missing authorization in U.Motion (high 7.8)
- [CVE-2017-9957](https://insights.sbomify.com/CVE-2017-9957/): Hardcoded credentials in U.Motion (critical 9.8)
- [CVE-2017-9956](https://insights.sbomify.com/CVE-2017-9956/): Hardcoded credentials in U.Motion (high 7.3)
- [CVE-2017-9955](https://insights.sbomify.com/CVE-2017-9955/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-9954](https://insights.sbomify.com/CVE-2017-9954/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-9953](https://insights.sbomify.com/CVE-2017-9953/): Use after free in n/a (high 7.5)
- [CVE-2017-9951](https://insights.sbomify.com/CVE-2017-9951/): Memory corruption in n/a (high 7.5)
- [CVE-2017-9949](https://insights.sbomify.com/CVE-2017-9949/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9948](https://insights.sbomify.com/CVE-2017-9948/): Memory corruption in n/a (high 8.8)
- [CVE-2017-9947](https://insights.sbomify.com/CVE-2017-9947/): Path traversal in APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5 (medium 5.3)
- [CVE-2017-9946](https://insights.sbomify.com/CVE-2017-9946/): Auth bypass in APOGEE PXC and TALON TC BACnet Automation Controllers All versions <V3.5 (high 7.5)
- [CVE-2017-9945](https://insights.sbomify.com/CVE-2017-9945/): In the Siemens 7KM PAC Switched Ethernet PROFINET expansion module (All versions < V2.1.3), a Denial-of-Service condition could be induced b (medium 6.5)
- [CVE-2017-9944](https://insights.sbomify.com/CVE-2017-9944/): Auth bypass in Siemens 7KT PAC1200 data manager (7KT1260) All versions < V2.03 (critical 9.8)
- [CVE-2017-9942](https://insights.sbomify.com/CVE-2017-9942/): Information disclosure in SiPass integrated All versions before V2.70 (high 7.8)
- [CVE-2017-9941](https://insights.sbomify.com/CVE-2017-9941/): Other in SiPass integrated All versions before V2.70 (high 7.4)
- [CVE-2017-9940](https://insights.sbomify.com/CVE-2017-9940/): Path traversal in SiPass integrated All versions before V2.70 (high 8.1)
- [CVE-2017-9939](https://insights.sbomify.com/CVE-2017-9939/): Auth bypass in SiPass integrated All versions before V2.70 (critical 9.8)
- [CVE-2017-9938](https://insights.sbomify.com/CVE-2017-9938/): Denial of service in SIMATIC Logon All versions before V1.6 (high 7.5)
- [CVE-2017-9937](https://insights.sbomify.com/CVE-2017-9937/): Denial of service in n/a (medium 6.5)
- [CVE-2017-9936](https://insights.sbomify.com/CVE-2017-9936/): Denial of service in n/a (medium 6.5)
- [CVE-2017-9935](https://insights.sbomify.com/CVE-2017-9935/): Memory corruption in n/a (high 8.8)
- [CVE-2017-9934](https://insights.sbomify.com/CVE-2017-9934/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9933](https://insights.sbomify.com/CVE-2017-9933/): Information disclosure in n/a (high 7.5)
- [CVE-2017-9932](https://insights.sbomify.com/CVE-2017-9932/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2017-9931](https://insights.sbomify.com/CVE-2017-9931/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9930](https://insights.sbomify.com/CVE-2017-9930/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-9929](https://insights.sbomify.com/CVE-2017-9929/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-9928](https://insights.sbomify.com/CVE-2017-9928/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-9927](https://insights.sbomify.com/CVE-2017-9927/): Memory corruption in n/a (high 8.8)
- [CVE-2017-9926](https://insights.sbomify.com/CVE-2017-9926/): Memory corruption in n/a (high 8.8)
- [CVE-2017-9925](https://insights.sbomify.com/CVE-2017-9925/): Null dereference in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/
