# Vulnerabilities published in 2017


- [CVE-2017-14472](https://insights.sbomify.com/CVE-2017-14472/): Missing authorization in Allen Bradley (critical 10.0)
- [CVE-2017-14471](https://insights.sbomify.com/CVE-2017-14471/): Missing authorization in Allen Bradley (critical 10.0)
- [CVE-2017-14470](https://insights.sbomify.com/CVE-2017-14470/): Missing authorization in Allen Bradley (critical 10.0)
- [CVE-2017-1447](https://insights.sbomify.com/CVE-2017-1447/): Cross-site scripting in Emptoris Sourcing (medium 5.4)
- [CVE-2017-14469](https://insights.sbomify.com/CVE-2017-14469/): Missing authorization in Allen Bradley (critical 10.0)
- [CVE-2017-14468](https://insights.sbomify.com/CVE-2017-14468/): Missing authorization in Allen Bradley (critical 10.0)
- [CVE-2017-14467](https://insights.sbomify.com/CVE-2017-14467/): Missing authorization in Allen Bradley (critical 10.0)
- [CVE-2017-14466](https://insights.sbomify.com/CVE-2017-14466/): Missing authorization in Allen Bradley (critical 10.0)
- [CVE-2017-14465](https://insights.sbomify.com/CVE-2017-14465/): Missing authorization in Allen Bradley (critical 10.0)
- [CVE-2017-14464](https://insights.sbomify.com/CVE-2017-14464/): Missing authorization in Allen Bradley (critical 10.0)
- [CVE-2017-14463](https://insights.sbomify.com/CVE-2017-14463/): Missing authorization in Allen Bradley (critical 10.0)
- [CVE-2017-14462](https://insights.sbomify.com/CVE-2017-14462/): Missing authorization in Allen Bradley (critical 10.0)
- [CVE-2017-14461](https://insights.sbomify.com/CVE-2017-14461/): Memory corruption in Dovecot (medium 5.9)
- [CVE-2017-14460](https://insights.sbomify.com/CVE-2017-14460/): Misconfiguration in Parity (high 7.5)
- [CVE-2017-1446](https://insights.sbomify.com/CVE-2017-1446/): Cross-site scripting in Emptoris Spend Analysis (medium 5.4)
- [CVE-2017-14459](https://insights.sbomify.com/CVE-2017-14459/): Command injection in Moxa (critical 10.0)
- [CVE-2017-14458](https://insights.sbomify.com/CVE-2017-14458/): Use after free in Foxit (high 8.8)
- [CVE-2017-14457](https://insights.sbomify.com/CVE-2017-14457/): Memory corruption in CPP-Ethereum (high 8.2)
- [CVE-2017-14455](https://insights.sbomify.com/CVE-2017-14455/): Memory corruption in Insteon Hub 2245-222 (high 8.5)
- [CVE-2017-14454](https://insights.sbomify.com/CVE-2017-14454/): Memory corruption in Hub (high 8.5)
- [CVE-2017-14453](https://insights.sbomify.com/CVE-2017-14453/): Memory corruption in Insteon Hub 2245-222 (high 8.5)
- [CVE-2017-14452](https://insights.sbomify.com/CVE-2017-14452/): Memory corruption in Insteon Hub 2245-222 (high 8.5)
- [CVE-2017-14451](https://insights.sbomify.com/CVE-2017-14451/): Memory corruption in CPP-Ethereum (critical 10.0)
- [CVE-2017-14450](https://insights.sbomify.com/CVE-2017-14450/): Memory corruption in Simple DirectMedia Layer (high 7.1)
- [CVE-2017-1445](https://insights.sbomify.com/CVE-2017-1445/): Cross-site scripting in Emptoris Spend Analysis (medium 5.4)
- [CVE-2017-14449](https://insights.sbomify.com/CVE-2017-14449/): Memory corruption in Simple DirectMedia Layer (high 7.5)
- [CVE-2017-14448](https://insights.sbomify.com/CVE-2017-14448/): Memory corruption in Simple DirectMedia Layer (high 8.8)
- [CVE-2017-14447](https://insights.sbomify.com/CVE-2017-14447/): Memory corruption in Insteon (high 8.5)
- [CVE-2017-14446](https://insights.sbomify.com/CVE-2017-14446/): Memory corruption in Insteon (high 8.5)
- [CVE-2017-14445](https://insights.sbomify.com/CVE-2017-14445/): Memory corruption in Insteon (medium 5.4)
- [CVE-2017-14444](https://insights.sbomify.com/CVE-2017-14444/): Memory corruption in Insteon (high 8.5)
- [CVE-2017-14443](https://insights.sbomify.com/CVE-2017-14443/): Information disclosure in insteon:hub 2245-222 firmware (critical 9.6)
- [CVE-2017-14442](https://insights.sbomify.com/CVE-2017-14442/): Memory corruption in Simple DirectMedia Layer (high 8.8)
- [CVE-2017-14441](https://insights.sbomify.com/CVE-2017-14441/): Integer overflow in Simple DirectMedia Layer (high 8.8)
- [CVE-2017-14440](https://insights.sbomify.com/CVE-2017-14440/): Memory corruption in Simple DirectMedia Layer (high 8.8)
- [CVE-2017-1444](https://insights.sbomify.com/CVE-2017-1444/): Cross-site scripting in Emptoris Sourcing (medium 5.4)
- [CVE-2017-14439](https://insights.sbomify.com/CVE-2017-14439/): Denial of service in Moxa (high 7.5)
- [CVE-2017-14438](https://insights.sbomify.com/CVE-2017-14438/): Denial of service in Moxa (high 7.5)
- [CVE-2017-14437](https://insights.sbomify.com/CVE-2017-14437/): Null dereference in Moxa (high 7.5)
- [CVE-2017-14436](https://insights.sbomify.com/CVE-2017-14436/): Null dereference in Moxa (high 7.5)
- [CVE-2017-14435](https://insights.sbomify.com/CVE-2017-14435/): Null dereference in Moxa (high 7.5)
- [CVE-2017-14434](https://insights.sbomify.com/CVE-2017-14434/): Command injection in Moxa (high 8.8)
- [CVE-2017-14433](https://insights.sbomify.com/CVE-2017-14433/): Command injection in Moxa (high 8.8)
- [CVE-2017-14432](https://insights.sbomify.com/CVE-2017-14432/): Command injection in Moxa (high 8.8)
- [CVE-2017-14431](https://insights.sbomify.com/CVE-2017-14431/): Denial of service in xen:xen (medium 5.5)
- [CVE-2017-14430](https://insights.sbomify.com/CVE-2017-14430/): Denial of service in dlink:dir-850l firmware (high 7.5)
- [CVE-2017-1443](https://insights.sbomify.com/CVE-2017-1443/): Cross-site scripting in Emptoris Services Procurement (medium 6.1)
- [CVE-2017-14429](https://insights.sbomify.com/CVE-2017-14429/): Command injection in dlink:dir-850l firmware (critical 9.8)
- [CVE-2017-14428](https://insights.sbomify.com/CVE-2017-14428/): Misconfiguration in dlink:dir-850l firmware (high 7.8)
- [CVE-2017-14427](https://insights.sbomify.com/CVE-2017-14427/): Misconfiguration in dlink:dir-850l firmware (high 7.8)
- [CVE-2017-14426](https://insights.sbomify.com/CVE-2017-14426/): Misconfiguration in dlink:dir-850l firmware (high 7.8)
- [CVE-2017-14425](https://insights.sbomify.com/CVE-2017-14425/): Misconfiguration in dlink:dir-850l firmware (high 7.8)
- [CVE-2017-14424](https://insights.sbomify.com/CVE-2017-14424/): Misconfiguration in dlink:dir-850l firmware (high 7.8)
- [CVE-2017-14423](https://insights.sbomify.com/CVE-2017-14423/): Auth bypass in dlink:dir-850l firmware (high 7.5)
- [CVE-2017-14422](https://insights.sbomify.com/CVE-2017-14422/): Hardcoded credentials in dlink:dir-850l firmware (high 7.5)
- [CVE-2017-14421](https://insights.sbomify.com/CVE-2017-14421/): Hardcoded credentials in dlink:dir-850l firmware (critical 9.8)
- [CVE-2017-14420](https://insights.sbomify.com/CVE-2017-14420/): Security feature bypass in dlink:dir-850l firmware (medium 5.9)
- [CVE-2017-1442](https://insights.sbomify.com/CVE-2017-1442/): Cross-site request forgery in Emptoris Services Procurement (high 8.8)
- [CVE-2017-14419](https://insights.sbomify.com/CVE-2017-14419/): Weak cryptography in dlink:dir-850l firmware (medium 5.9)
- [CVE-2017-14418](https://insights.sbomify.com/CVE-2017-14418/): Information disclosure in dlink:dir-850l firmware (high 8.1)
- [CVE-2017-14417](https://insights.sbomify.com/CVE-2017-14417/): Missing authorization in dlink:dir-850l firmware (critical 9.8)
- [CVE-2017-14416](https://insights.sbomify.com/CVE-2017-14416/): Cross-site scripting in dlink:dir-850l firmware (medium 6.1)
- [CVE-2017-14415](https://insights.sbomify.com/CVE-2017-14415/): Cross-site scripting in dlink:dir-850l firmware (medium 6.1)
- [CVE-2017-14414](https://insights.sbomify.com/CVE-2017-14414/): Cross-site scripting in dlink:dir-850l firmware (medium 6.1)
- [CVE-2017-14413](https://insights.sbomify.com/CVE-2017-14413/): Cross-site scripting in dlink:dir-850l firmware (medium 6.1)
- [CVE-2017-14412](https://insights.sbomify.com/CVE-2017-14412/): Memory corruption in mp3gain:mp3gain (high 7.8)
- [CVE-2017-14411](https://insights.sbomify.com/CVE-2017-14411/): Memory corruption in mp3gain:mp3gain (high 7.8)
- [CVE-2017-14410](https://insights.sbomify.com/CVE-2017-14410/): Memory corruption in mp3gain:mp3gain (medium 5.5)
- [CVE-2017-1441](https://insights.sbomify.com/CVE-2017-1441/): Information disclosure in Emptoris Services Procurement (medium 5.5)
- [CVE-2017-14409](https://insights.sbomify.com/CVE-2017-14409/): Memory corruption in mp3gain:mp3gain (high 7.8)
- [CVE-2017-14408](https://insights.sbomify.com/CVE-2017-14408/): Memory corruption in mp3gain:mp3gain (medium 5.5)
- [CVE-2017-14407](https://insights.sbomify.com/CVE-2017-14407/): Memory corruption in mp3gain:mp3gain (medium 5.5)
- [CVE-2017-14406](https://insights.sbomify.com/CVE-2017-14406/): Null dereference in mp3gain:mp3gain (medium 5.5)
- [CVE-2017-14405](https://insights.sbomify.com/CVE-2017-14405/): Command injection in eyesofnetwork:eyesofnetwork (high 7.2)
- [CVE-2017-14404](https://insights.sbomify.com/CVE-2017-14404/): Path traversal in eyesofnetwork:eyesofnetwork (high 7.5)
- [CVE-2017-14403](https://insights.sbomify.com/CVE-2017-14403/): SQL injection in eyesofnetwork:eyesofnetwork (critical 9.8)
- [CVE-2017-14402](https://insights.sbomify.com/CVE-2017-14402/): SQL injection in eyesofnetwork:eyesofnetwork (critical 9.8)
- [CVE-2017-14401](https://insights.sbomify.com/CVE-2017-14401/): SQL injection in eyesofnetwork:eyesofnetwork (critical 9.8)
- [CVE-2017-14400](https://insights.sbomify.com/CVE-2017-14400/): Null dereference in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-1440](https://insights.sbomify.com/CVE-2017-1440/): Code injection in Emptoris Services Procurement (high 8.8)
- [CVE-2017-14399](https://insights.sbomify.com/CVE-2017-14399/): File upload in blackcat-cms:blackcat cms (high 8.8)
- [CVE-2017-14398](https://insights.sbomify.com/CVE-2017-14398/): Memory corruption in razer:synapse (high 7.8)
- [CVE-2017-14397](https://insights.sbomify.com/CVE-2017-14397/): Code injection in anydesk:anydesk (critical 9.8)
- [CVE-2017-14396](https://insights.sbomify.com/CVE-2017-14396/): SQL injection in osticket:osticket (critical 9.8)
- [CVE-2017-14395](https://insights.sbomify.com/CVE-2017-14395/): Cross-site scripting in forgerock:access management (medium 6.1)
- [CVE-2017-14394](https://insights.sbomify.com/CVE-2017-14394/): Open redirect in forgerock:access management (medium 6.1)
- [CVE-2017-14390](https://insights.sbomify.com/CVE-2017-14390/): Misconfiguration in cf-deployment cf-deployment v0.35.0 (high 7.5)
- [CVE-2017-1439](https://insights.sbomify.com/CVE-2017-1439/): Privilege escalation in DB2 for Linux, UNIX and Windows (medium 6.7)
- [CVE-2017-14389](https://insights.sbomify.com/CVE-2017-14389/): Missing authorization in Cloud Foundry capi-release: All versions prior to 1.45.0, cf-release: All versions prior to v280, cf-deployment: All versions prior to v1.0.0 (medium 6.5)
- [CVE-2017-14388](https://insights.sbomify.com/CVE-2017-14388/): Other in GrootFS release GrootFS release 0.3.x versions prior to 0.30.0 (high 7.8)
- [CVE-2017-14387](https://insights.sbomify.com/CVE-2017-14387/): Security feature bypass in EMC Isilon OneFS EMC Isilon OneFS 8.1.0.0, EMC Isilon OneFS 8.0.1.0 -- 8.0.1.1, EMC Isilon OneFS 8.0.0.0 8.0.0.4 (medium 6.5)
- [CVE-2017-14386](https://insights.sbomify.com/CVE-2017-14386/): Cross-site scripting in Dell 2335dn Firmware and Dell 2355DN Firmware Version V2.70.45.34, A10 and Version V2.70.06.26, A13 (medium 6.1)
- [CVE-2017-14385](https://insights.sbomify.com/CVE-2017-14385/): Memory corruption in EMC Data Domain DD OS EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6, EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9, EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21, EMC Data Domain Virtual Edition 2.0 family, all versions, EMC Data Domain Virtual Edition 3.0 family, versions prior to 3.0 SP2 Update 1, EMC Data Domain Virtual Edition 3.1 family, versions prior to 3.1 Update 2 (high 7.5)
- [CVE-2017-14384](https://insights.sbomify.com/CVE-2017-14384/): Path traversal in Dell Storage Manager (medium 6.5)
- [CVE-2017-14383](https://insights.sbomify.com/CVE-2017-14383/): Cross-site scripting in Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and Dell EMC VNX1 versions prior to Operating Environment for File 7.1.80.8 (medium 6.1)
- [CVE-2017-14380](https://insights.sbomify.com/CVE-2017-14380/): Privilege escalation in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, 7.1.1.x (medium 6.7)
- [CVE-2017-1438](https://insights.sbomify.com/CVE-2017-1438/): Privilege escalation in DB2 for Linux, UNIX and Windows (medium 6.7)
- [CVE-2017-14379](https://insights.sbomify.com/CVE-2017-14379/): Cross-site scripting in RSA Authentication Manager software version 8.2 SP1 P5 and earlier (medium 5.4)
- [CVE-2017-14378](https://insights.sbomify.com/CVE-2017-14378/): Auth bypass in RSA Authentication Agent SDK RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C (critical 10.0)
- [CVE-2017-14377](https://insights.sbomify.com/CVE-2017-14377/): Auth bypass in RSA Authentication Agent for Web for Apache Web Server RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/101/