# Vulnerabilities published in 2017


- [CVE-2017-1457](https://insights.sbomify.com/CVE-2017-1457/): Cross-site scripting in QRadar Network Security (medium 6.1)
- [CVE-2017-14569](https://insights.sbomify.com/CVE-2017-14569/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14568](https://insights.sbomify.com/CVE-2017-14568/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14567](https://insights.sbomify.com/CVE-2017-14567/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14566](https://insights.sbomify.com/CVE-2017-14566/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14565](https://insights.sbomify.com/CVE-2017-14565/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14564](https://insights.sbomify.com/CVE-2017-14564/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14563](https://insights.sbomify.com/CVE-2017-14563/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14562](https://insights.sbomify.com/CVE-2017-14562/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14561](https://insights.sbomify.com/CVE-2017-14561/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14560](https://insights.sbomify.com/CVE-2017-14560/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14559](https://insights.sbomify.com/CVE-2017-14559/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14558](https://insights.sbomify.com/CVE-2017-14558/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14557](https://insights.sbomify.com/CVE-2017-14557/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14556](https://insights.sbomify.com/CVE-2017-14556/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14555](https://insights.sbomify.com/CVE-2017-14555/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14554](https://insights.sbomify.com/CVE-2017-14554/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14553](https://insights.sbomify.com/CVE-2017-14553/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14552](https://insights.sbomify.com/CVE-2017-14552/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14551](https://insights.sbomify.com/CVE-2017-14551/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14550](https://insights.sbomify.com/CVE-2017-14550/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14549](https://insights.sbomify.com/CVE-2017-14549/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14548](https://insights.sbomify.com/CVE-2017-14548/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14547](https://insights.sbomify.com/CVE-2017-14547/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14546](https://insights.sbomify.com/CVE-2017-14546/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14545](https://insights.sbomify.com/CVE-2017-14545/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14544](https://insights.sbomify.com/CVE-2017-14544/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14543](https://insights.sbomify.com/CVE-2017-14543/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14542](https://insights.sbomify.com/CVE-2017-14542/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14541](https://insights.sbomify.com/CVE-2017-14541/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-14540](https://insights.sbomify.com/CVE-2017-14540/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-14539](https://insights.sbomify.com/CVE-2017-14539/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-14538](https://insights.sbomify.com/CVE-2017-14538/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-14537](https://insights.sbomify.com/CVE-2017-14537/): Path traversal in netfortris:trixbox (medium 6.5)
- [CVE-2017-14536](https://insights.sbomify.com/CVE-2017-14536/): Cross-site scripting in netfortris:trixbox (medium 5.4)
- [CVE-2017-14535](https://insights.sbomify.com/CVE-2017-14535/): Command injection in netfortris:trixbox (high 8.8)
- [CVE-2017-14534](https://insights.sbomify.com/CVE-2017-14534/): Cross-site scripting in nexusphp project:nexusphp (medium 6.1)
- [CVE-2017-14533](https://insights.sbomify.com/CVE-2017-14533/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-14532](https://insights.sbomify.com/CVE-2017-14532/): Null dereference in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-14531](https://insights.sbomify.com/CVE-2017-14531/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-14530](https://insights.sbomify.com/CVE-2017-14530/): Cross-site request forgery in crony cronjob manager project:crony cronjob manager (high 8.0)
- [CVE-2017-1453](https://insights.sbomify.com/CVE-2017-1453/): Command injection in Security Access Manager (high 8.8)
- [CVE-2017-14529](https://insights.sbomify.com/CVE-2017-14529/): Memory corruption in gnu:binutils (medium 5.5)
- [CVE-2017-14528](https://insights.sbomify.com/CVE-2017-14528/): Use after free in debian:debian linux (medium 6.5)
- [CVE-2017-14527](https://insights.sbomify.com/CVE-2017-14527/): XML external entity in opentext:documentum administrator (high 8.8)
- [CVE-2017-14526](https://insights.sbomify.com/CVE-2017-14526/): XML external entity in opentext:documentum administrator (high 8.8)
- [CVE-2017-14525](https://insights.sbomify.com/CVE-2017-14525/): Open redirect in opentext:documentum administrator (medium 6.1)
- [CVE-2017-14524](https://insights.sbomify.com/CVE-2017-14524/): Open redirect in opentext:documentum administrator (medium 6.1)
- [CVE-2017-14523](https://insights.sbomify.com/CVE-2017-14523/): Open redirect in wondercms:wondercms (high 7.5)
- [CVE-2017-14522](https://insights.sbomify.com/CVE-2017-14522/): Cross-site scripting in wondercms:wondercms (medium 6.1)
- [CVE-2017-14521](https://insights.sbomify.com/CVE-2017-14521/): File upload in wondercms:wondercms (high 8.8)
- [CVE-2017-14520](https://insights.sbomify.com/CVE-2017-14520/): Denial of service in freedesktop:poppler (high 7.8)
- [CVE-2017-1452](https://insights.sbomify.com/CVE-2017-1452/): Privilege escalation in DB2 for Linux, UNIX and Windows (high 7.8)
- [CVE-2017-14519](https://insights.sbomify.com/CVE-2017-14519/): Memory corruption in freedesktop:poppler (high 7.5)
- [CVE-2017-14518](https://insights.sbomify.com/CVE-2017-14518/): Denial of service in freedesktop:poppler (high 7.8)
- [CVE-2017-14517](https://insights.sbomify.com/CVE-2017-14517/): Null dereference in freedesktop:poppler (medium 5.5)
- [CVE-2017-14516](https://insights.sbomify.com/CVE-2017-14516/): Cross-site scripting in sap:businessobjects financial consolidation (medium 6.1)
- [CVE-2017-14515](https://insights.sbomify.com/CVE-2017-14515/): Memory corruption in tenda:w15e firmware (high 7.5)
- [CVE-2017-14514](https://insights.sbomify.com/CVE-2017-14514/): Path traversal in tenda:w15e firmware (high 7.5)
- [CVE-2017-14513](https://insights.sbomify.com/CVE-2017-14513/): Path traversal in metinfo:metinfo (medium 5.3)
- [CVE-2017-14512](https://insights.sbomify.com/CVE-2017-14512/): SQL injection in nexusphp project:nexusphp (critical 9.8)
- [CVE-2017-14511](https://insights.sbomify.com/CVE-2017-14511/): Business logic in sap:e-recruiting (high 7.5)
- [CVE-2017-14510](https://insights.sbomify.com/CVE-2017-14510/): Cross-site scripting in sugarcrm:sugarcrm (medium 6.1)
- [CVE-2017-1451](https://insights.sbomify.com/CVE-2017-1451/): Privilege escalation in DB2 for Linux, UNIX and Windows (high 7.8)
- [CVE-2017-14509](https://insights.sbomify.com/CVE-2017-14509/): Code injection in sugarcrm:sugarcrm (high 8.8)
- [CVE-2017-14508](https://insights.sbomify.com/CVE-2017-14508/): SQL injection in sugarcrm:sugarcrm (high 8.8)
- [CVE-2017-14507](https://insights.sbomify.com/CVE-2017-14507/): SQL injection in shindiristudio:content timeline (critical 9.8)
- [CVE-2017-14506](https://insights.sbomify.com/CVE-2017-14506/): Gem in a Box vulnerable to Cross-site Scripting (medium 5.4)
- [CVE-2017-14505](https://insights.sbomify.com/CVE-2017-14505/): Null dereference in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-14504](https://insights.sbomify.com/CVE-2017-14504/): Null dereference in debian:debian linux (medium 6.5)
- [CVE-2017-14503](https://insights.sbomify.com/CVE-2017-14503/): Memory corruption in libarchive:libarchive (medium 6.5)
- [CVE-2017-14502](https://insights.sbomify.com/CVE-2017-14502/): Memory corruption in libarchive:libarchive (high 7.5)
- [CVE-2017-14501](https://insights.sbomify.com/CVE-2017-14501/): Memory corruption in libarchive:libarchive (medium 6.5)
- [CVE-2017-14500](https://insights.sbomify.com/CVE-2017-14500/): Command injection in newsbeuter:newsbeuter (high 8.8)
- [CVE-2017-1450](https://insights.sbomify.com/CVE-2017-1450/): Open redirect in Emptoris Sourcing (medium 6.1)
- [CVE-2017-14498](https://insights.sbomify.com/CVE-2017-14498/): Silverstripe CMS XSS Vulnerability (medium 6.1)
- [CVE-2017-14497](https://insights.sbomify.com/CVE-2017-14497/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2017-14496](https://insights.sbomify.com/CVE-2017-14496/): Integer overflow in canonical:ubuntu linux (high 7.5)
- [CVE-2017-14495](https://insights.sbomify.com/CVE-2017-14495/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2017-14494](https://insights.sbomify.com/CVE-2017-14494/): Information disclosure in canonical:ubuntu linux (medium 5.9)
- [CVE-2017-14493](https://insights.sbomify.com/CVE-2017-14493/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-14492](https://insights.sbomify.com/CVE-2017-14492/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-14491](https://insights.sbomify.com/CVE-2017-14491/): Memory corruption in arista:eos (critical 9.8)
- [CVE-2017-1449](https://insights.sbomify.com/CVE-2017-1449/): Open redirect in Emptoris Sourcing (medium 5.4)
- [CVE-2017-14489](https://insights.sbomify.com/CVE-2017-14489/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2017-14487](https://insights.sbomify.com/CVE-2017-14487/): Auth bypass in ohmibod:ohmibod remote (critical 9.1)
- [CVE-2017-14486](https://insights.sbomify.com/CVE-2017-14486/): Information disclosure in vibease:chat (high 7.5)
- [CVE-2017-14484](https://insights.sbomify.com/CVE-2017-14484/): Privilege escalation in gentoo:sci-mathematics-gimps (high 7.3)
- [CVE-2017-14483](https://insights.sbomify.com/CVE-2017-14483/): Privilege escalation in gentoo:dev-python-flower (medium 5.5)
- [CVE-2017-14482](https://insights.sbomify.com/CVE-2017-14482/): Code injection in debian:debian linux (high 8.8)
- [CVE-2017-14481](https://insights.sbomify.com/CVE-2017-14481/): Command injection in MySql MMM (critical 9.8)
- [CVE-2017-14480](https://insights.sbomify.com/CVE-2017-14480/): Command injection in MySql MMM (critical 9.8)
- [CVE-2017-1448](https://insights.sbomify.com/CVE-2017-1448/): Open redirect in Emptoris Supplier Lifecycle Management (medium 5.4)
- [CVE-2017-14479](https://insights.sbomify.com/CVE-2017-14479/): Command injection in MySql MMM (critical 9.8)
- [CVE-2017-14478](https://insights.sbomify.com/CVE-2017-14478/): Command injection in MySql MMM (critical 9.8)
- [CVE-2017-14477](https://insights.sbomify.com/CVE-2017-14477/): Command injection in MySql MMM (critical 9.8)
- [CVE-2017-14476](https://insights.sbomify.com/CVE-2017-14476/): Command injection in MySql MMM (critical 9.8)
- [CVE-2017-14475](https://insights.sbomify.com/CVE-2017-14475/): Command injection in MySql MMM (critical 9.8)
- [CVE-2017-14474](https://insights.sbomify.com/CVE-2017-14474/): Command injection in MySql MMM (critical 9.8)
- [CVE-2017-14473](https://insights.sbomify.com/CVE-2017-14473/): Missing authorization in Allen Bradley (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/100/