# Vulnerabilities published in 2017


- [CVE-2017-14139](https://insights.sbomify.com/CVE-2017-14139/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-14138](https://insights.sbomify.com/CVE-2017-14138/): Denial of service in imagemagick:imagemagick (critical 9.8)
- [CVE-2017-14137](https://insights.sbomify.com/CVE-2017-14137/): Denial of service in imagemagick:imagemagick (high 7.5)
- [CVE-2017-14136](https://insights.sbomify.com/CVE-2017-14136/): Out-of-bounds Write in OpenCV (medium 6.5)
- [CVE-2017-14135](https://insights.sbomify.com/CVE-2017-14135/): Command injection in dreambox:opendreambox (critical 9.8)
- [CVE-2017-14134](https://insights.sbomify.com/CVE-2017-14134/): Cross-site scripting in maplesoft:maple t.a. (medium 6.1)
- [CVE-2017-14132](https://insights.sbomify.com/CVE-2017-14132/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2017-14130](https://insights.sbomify.com/CVE-2017-14130/): Memory corruption in gnu:binutils (medium 5.5)
- [CVE-2017-14129](https://insights.sbomify.com/CVE-2017-14129/): Memory corruption in gnu:binutils (medium 5.5)
- [CVE-2017-14128](https://insights.sbomify.com/CVE-2017-14128/): Memory corruption in gnu:binutils (medium 5.5)
- [CVE-2017-14127](https://insights.sbomify.com/CVE-2017-14127/): Command injection in technicolor:td5336 firmware (critical 9.8)
- [CVE-2017-14126](https://insights.sbomify.com/CVE-2017-14126/): Cross-site scripting in xnau:participants database (medium 6.1)
- [CVE-2017-14125](https://insights.sbomify.com/CVE-2017-14125/): SQL injection in wpdevart:responsive image gallery gallery album (critical 9.8)
- [CVE-2017-14124](https://insights.sbomify.com/CVE-2017-14124/): Privilege escalation in unicon-software:rp (medium 6.3)
- [CVE-2017-14123](https://insights.sbomify.com/CVE-2017-14123/): File upload in zohocorp:manageengine firewall analyzer (high 8.8)
- [CVE-2017-14122](https://insights.sbomify.com/CVE-2017-14122/): Memory corruption in debian:debian linux (critical 9.1)
- [CVE-2017-14121](https://insights.sbomify.com/CVE-2017-14121/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2017-14120](https://insights.sbomify.com/CVE-2017-14120/): Path traversal in debian:debian linux (high 7.5)
- [CVE-2017-1412](https://insights.sbomify.com/CVE-2017-1412/): Information disclosure in Security Identity Governance and Intelligence (medium 4.3)
- [CVE-2017-14119](https://insights.sbomify.com/CVE-2017-14119/): Command injection in eyesofnetwork:eyesofnetwork (high 8.8)
- [CVE-2017-14118](https://insights.sbomify.com/CVE-2017-14118/): Command injection in eyesofnetwork:eyesofnetwork (high 8.8)
- [CVE-2017-14117](https://insights.sbomify.com/CVE-2017-14117/): Auth bypass in att:u-verse firmware (medium 5.9)
- [CVE-2017-14116](https://insights.sbomify.com/CVE-2017-14116/): Hardcoded credentials in att:u-verse firmware (high 8.1)
- [CVE-2017-14115](https://insights.sbomify.com/CVE-2017-14115/): Hardcoded credentials in att:u-verse firmware (high 8.1)
- [CVE-2017-14114](https://insights.sbomify.com/CVE-2017-14114/): Information disclosure in rtpproxy:rtpproxy (medium 6.5)
- [CVE-2017-14111](https://insights.sbomify.com/CVE-2017-14111/): Information disclosure in philips:intellispace cardiovascular (high 7.2)
- [CVE-2017-1411](https://insights.sbomify.com/CVE-2017-1411/): Misconfiguration in Security Identity Governance and Intelligence (medium 5.9)
- [CVE-2017-14108](https://insights.sbomify.com/CVE-2017-14108/): Denial of service in gnome:gedit (medium 5.5)
- [CVE-2017-14107](https://insights.sbomify.com/CVE-2017-14107/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2017-14106](https://insights.sbomify.com/CVE-2017-14106/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2017-14105](https://insights.sbomify.com/CVE-2017-14105/): Code injection in aerohive:hivemanager classic (high 7.8)
- [CVE-2017-14103](https://insights.sbomify.com/CVE-2017-14103/): Use after free in graphicsmagick:graphicsmagick (high 8.8)
- [CVE-2017-14102](https://insights.sbomify.com/CVE-2017-14102/): Privilege escalation in mimedefang:mimedefang (high 7.8)
- [CVE-2017-14101](https://insights.sbomify.com/CVE-2017-14101/): XML external entity in changehealthcare:conserus image repository (critical 9.8)
- [CVE-2017-14100](https://insights.sbomify.com/CVE-2017-14100/): Command injection in digium:asterisk (critical 9.8)
- [CVE-2017-14099](https://insights.sbomify.com/CVE-2017-14099/): Information disclosure in digium:asterisk (high 7.5)
- [CVE-2017-14098](https://insights.sbomify.com/CVE-2017-14098/): Denial of service in digium:asterisk (high 7.5)
- [CVE-2017-14097](https://insights.sbomify.com/CVE-2017-14097/): Missing authorization in Trend Micro Smart Protection Server (Standalone) (critical 9.8)
- [CVE-2017-14096](https://insights.sbomify.com/CVE-2017-14096/): Cross-site scripting in Trend Micro Smart Protection Server (Standalone) (medium 6.1)
- [CVE-2017-14095](https://insights.sbomify.com/CVE-2017-14095/): Code injection in Trend Micro Smart Protection Server (Standalone) (high 8.1)
- [CVE-2017-14094](https://insights.sbomify.com/CVE-2017-14094/): Command injection in Trend Micro Smart Protection Server (Standalone) (critical 9.8)
- [CVE-2017-14093](https://insights.sbomify.com/CVE-2017-14093/): Cross-site scripting in Trend Micro ScanMail for Exchange (medium 6.1)
- [CVE-2017-14092](https://insights.sbomify.com/CVE-2017-14092/): Cross-site request forgery in trendmicro:scanmail (high 8.8)
- [CVE-2017-14091](https://insights.sbomify.com/CVE-2017-14091/): Other in Trend Micro ScanMail for Exchange (high 7.5)
- [CVE-2017-14090](https://insights.sbomify.com/CVE-2017-14090/): Weak cryptography in Trend Micro ScanMail for Exchange (critical 9.1)
- [CVE-2017-1409](https://insights.sbomify.com/CVE-2017-1409/): Information disclosure in Security Identity Governance and Intelligence (medium 5.3)
- [CVE-2017-14089](https://insights.sbomify.com/CVE-2017-14089/): Memory corruption in Trend Micro OfficeScan (critical 9.8)
- [CVE-2017-14088](https://insights.sbomify.com/CVE-2017-14088/): Memory corruption in Trend Micro OfficeScan (high 7.0)
- [CVE-2017-14087](https://insights.sbomify.com/CVE-2017-14087/): Other in Trend Micro OfficeScan (high 7.5)
- [CVE-2017-14086](https://insights.sbomify.com/CVE-2017-14086/): Missing authorization in Trend Micro OfficeScan (high 7.5)
- [CVE-2017-14085](https://insights.sbomify.com/CVE-2017-14085/): Information disclosure in Trend Micro OfficeScan (medium 5.3)
- [CVE-2017-14084](https://insights.sbomify.com/CVE-2017-14084/): Other in Trend Micro OfficeScan (high 8.1)
- [CVE-2017-14083](https://insights.sbomify.com/CVE-2017-14083/): Information disclosure in Trend Micro OfficeScan (high 7.5)
- [CVE-2017-14082](https://insights.sbomify.com/CVE-2017-14082/): Information disclosure in Trend Micro Mobile Security (Enterprise) (high 7.5)
- [CVE-2017-14081](https://insights.sbomify.com/CVE-2017-14081/): Command injection in trendmicro:mobile security (high 8.8)
- [CVE-2017-14080](https://insights.sbomify.com/CVE-2017-14080/): Auth bypass in Mobile Security (Enterprise) (critical 9.8)
- [CVE-2017-14079](https://insights.sbomify.com/CVE-2017-14079/): File upload in Mobile Security (Enterprise) (high 8.8)
- [CVE-2017-14078](https://insights.sbomify.com/CVE-2017-14078/): SQL injection in Mobile Security (Enterprise) (critical 9.8)
- [CVE-2017-14077](https://insights.sbomify.com/CVE-2017-14077/): Securimage HTML Injection (medium 6.1)
- [CVE-2017-14076](https://insights.sbomify.com/CVE-2017-14076/): SQL injection in nexusphp:nexusphp (critical 9.8)
- [CVE-2017-14075](https://insights.sbomify.com/CVE-2017-14075/): Memory corruption in jungo:windriver (high 7.8)
- [CVE-2017-14070](https://insights.sbomify.com/CVE-2017-14070/): Cross-site scripting in nexusphp:nexusphp (medium 6.1)
- [CVE-2017-1407](https://insights.sbomify.com/CVE-2017-1407/): Command injection in Security Identity Manager (high 8.8)
- [CVE-2017-14069](https://insights.sbomify.com/CVE-2017-14069/): SQL injection in nexusphp:nexusphp (critical 9.8)
- [CVE-2017-14064](https://insights.sbomify.com/CVE-2017-14064/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-14063](https://insights.sbomify.com/CVE-2017-14063/): Improper Input Validation in async-http-client (high 7.5)
- [CVE-2017-14062](https://insights.sbomify.com/CVE-2017-14062/): Integer overflow in debian:debian linux (critical 9.8)
- [CVE-2017-14061](https://insights.sbomify.com/CVE-2017-14061/): Integer overflow in gnu:libidn2 (critical 9.8)
- [CVE-2017-14060](https://insights.sbomify.com/CVE-2017-14060/): Null dereference in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-14059](https://insights.sbomify.com/CVE-2017-14059/): Denial of service in ffmpeg:ffmpeg (medium 6.5)
- [CVE-2017-14058](https://insights.sbomify.com/CVE-2017-14058/): Denial of service in ffmpeg:ffmpeg (medium 6.5)
- [CVE-2017-14057](https://insights.sbomify.com/CVE-2017-14057/): Denial of service in ffmpeg:ffmpeg (medium 6.5)
- [CVE-2017-14056](https://insights.sbomify.com/CVE-2017-14056/): Denial of service in ffmpeg:ffmpeg (medium 6.5)
- [CVE-2017-14055](https://insights.sbomify.com/CVE-2017-14055/): Denial of service in ffmpeg:ffmpeg (medium 6.5)
- [CVE-2017-14054](https://insights.sbomify.com/CVE-2017-14054/): Denial of service in ffmpeg:ffmpeg (medium 6.5)
- [CVE-2017-14053](https://insights.sbomify.com/CVE-2017-14053/): Information disclosure in netapp:oncommand unified manager for clustered data ontap (high 7.5)
- [CVE-2017-14051](https://insights.sbomify.com/CVE-2017-14051/): Integer overflow in linux:linux kernel (medium 4.4)
- [CVE-2017-14050](https://insights.sbomify.com/CVE-2017-14050/): File upload in blackcat-cms:blackcat cms (high 8.8)
- [CVE-2017-1405](https://insights.sbomify.com/CVE-2017-1405/): Security feature bypass in Security Identity Manager (medium 4.4)
- [CVE-2017-14049](https://insights.sbomify.com/CVE-2017-14049/): Cross-site scripting in blackcat-cms:blackcat cms (medium 5.4)
- [CVE-2017-14048](https://insights.sbomify.com/CVE-2017-14048/): Code injection in blackcat-cms:blackcat cms (high 8.8)
- [CVE-2017-14042](https://insights.sbomify.com/CVE-2017-14042/): Denial of service in graphicsmagick:graphicsmagick (medium 6.5)
- [CVE-2017-14041](https://insights.sbomify.com/CVE-2017-14041/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2017-14040](https://insights.sbomify.com/CVE-2017-14040/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2017-14039](https://insights.sbomify.com/CVE-2017-14039/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2017-14038](https://insights.sbomify.com/CVE-2017-14038/): Open redirect in crushftp:crushftp (medium 6.1)
- [CVE-2017-14037](https://insights.sbomify.com/CVE-2017-14037/): Other in crushftp:crushftp (medium 6.1)
- [CVE-2017-14036](https://insights.sbomify.com/CVE-2017-14036/): Cross-site scripting in crushftp:crushftp (medium 6.1)
- [CVE-2017-14035](https://insights.sbomify.com/CVE-2017-14035/): Deserialization in crushftp:crushftp (critical 9.8)
- [CVE-2017-14034](https://insights.sbomify.com/CVE-2017-14034/): Memory corruption in libbpg project:libbpg (high 8.8)
- [CVE-2017-14033](https://insights.sbomify.com/CVE-2017-14033/): Ruby OpenSSL DoS Vulnerability (high 7.5)
- [CVE-2017-14032](https://insights.sbomify.com/CVE-2017-14032/): Auth bypass in arm:mbed tls (high 8.1)
- [CVE-2017-14031](https://insights.sbomify.com/CVE-2017-14031/): Privilege escalation in Trihedral Engineering Limited VTScada (high 7.8)
- [CVE-2017-14030](https://insights.sbomify.com/CVE-2017-14030/): Privilege escalation in Moxa MXview (high 7.8)
- [CVE-2017-14029](https://insights.sbomify.com/CVE-2017-14029/): Other in Trihedral Engineering Limited VTScada (high 7.8)
- [CVE-2017-14028](https://insights.sbomify.com/CVE-2017-14028/): Denial of service in Moxa NPort 5110, 5130, and 5150 (high 7.5)
- [CVE-2017-14027](https://insights.sbomify.com/CVE-2017-14027/): Hardcoded credentials in Korenix JetNet (critical 9.8)
- [CVE-2017-14026](https://insights.sbomify.com/CVE-2017-14026/): Auth bypass in Thermal Management Center (high 7.5)
- [CVE-2017-14025](https://insights.sbomify.com/CVE-2017-14025/): Path traversal in ABB FOX515T (medium 5.5)
- [CVE-2017-14024](https://insights.sbomify.com/CVE-2017-14024/): Memory corruption in Schneider Electric InduSoft Web Studio and InTouch Machine Edition (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/104/