# Vulnerabilities published in 2017


- [CVE-2017-13743](https://insights.sbomify.com/CVE-2017-13743/): Memory corruption in liblouis:liblouis (medium 6.5)
- [CVE-2017-13742](https://insights.sbomify.com/CVE-2017-13742/): Memory corruption in liblouis:liblouis (medium 6.5)
- [CVE-2017-13741](https://insights.sbomify.com/CVE-2017-13741/): Use after free in liblouis:liblouis (medium 6.5)
- [CVE-2017-13740](https://insights.sbomify.com/CVE-2017-13740/): Memory corruption in liblouis:liblouis (high 8.8)
- [CVE-2017-1374](https://insights.sbomify.com/CVE-2017-1374/): Information disclosure in TRIRIGA Application Platform (medium 6.5)
- [CVE-2017-13739](https://insights.sbomify.com/CVE-2017-13739/): Memory corruption in liblouis:liblouis (high 8.8)
- [CVE-2017-13738](https://insights.sbomify.com/CVE-2017-13738/): Memory corruption in liblouis:liblouis (high 8.8)
- [CVE-2017-13737](https://insights.sbomify.com/CVE-2017-13737/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2017-13736](https://insights.sbomify.com/CVE-2017-13736/): Denial of service in graphicsmagick:graphicsmagick (medium 6.5)
- [CVE-2017-13735](https://insights.sbomify.com/CVE-2017-13735/): Denial of service in libraw:libraw (high 7.5)
- [CVE-2017-13734](https://insights.sbomify.com/CVE-2017-13734/): Memory corruption in invisible-island:ncurses (medium 6.5)
- [CVE-2017-13733](https://insights.sbomify.com/CVE-2017-13733/): Memory corruption in invisible-island:ncurses (medium 6.5)
- [CVE-2017-13732](https://insights.sbomify.com/CVE-2017-13732/): Memory corruption in invisible-island:ncurses (medium 6.5)
- [CVE-2017-13731](https://insights.sbomify.com/CVE-2017-13731/): Memory corruption in invisible-island:ncurses (medium 6.5)
- [CVE-2017-13730](https://insights.sbomify.com/CVE-2017-13730/): Memory corruption in invisible-island:ncurses (medium 6.5)
- [CVE-2017-1373](https://insights.sbomify.com/CVE-2017-1373/): Missing authorization in TRIRIGA Application Platform (high 8.8)
- [CVE-2017-13729](https://insights.sbomify.com/CVE-2017-13729/): Memory corruption in invisible-island:ncurses (medium 6.5)
- [CVE-2017-13728](https://insights.sbomify.com/CVE-2017-13728/): Denial of service in invisible-island:ncurses (high 7.5)
- [CVE-2017-13727](https://insights.sbomify.com/CVE-2017-13727/): Denial of service in libtiff:libtiff (medium 6.5)
- [CVE-2017-13726](https://insights.sbomify.com/CVE-2017-13726/): Denial of service in libtiff:libtiff (medium 6.5)
- [CVE-2017-13725](https://insights.sbomify.com/CVE-2017-13725/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2017-13724](https://insights.sbomify.com/CVE-2017-13724/): Cross-site scripting in axesstel:mu553s firmware (medium 5.4)
- [CVE-2017-13723](https://insights.sbomify.com/CVE-2017-13723/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2017-13722](https://insights.sbomify.com/CVE-2017-13722/): Memory corruption in x.org:libxfont (high 7.1)
- [CVE-2017-13721](https://insights.sbomify.com/CVE-2017-13721/): Privilege escalation in debian:debian linux (medium 4.7)
- [CVE-2017-13720](https://insights.sbomify.com/CVE-2017-13720/): Memory corruption in x.org:libxfont (high 7.1)
- [CVE-2017-1372](https://insights.sbomify.com/CVE-2017-1372/): Cross-site scripting in TRIRIGA Application Platform (medium 5.4)
- [CVE-2017-13719](https://insights.sbomify.com/CVE-2017-13719/): Memory corruption in amcrest:ipm-721s firmware (critical 9.8)
- [CVE-2017-13718](https://insights.sbomify.com/CVE-2017-13718/): Auth bypass in starry:s00111 firmware (high 8.0)
- [CVE-2017-13717](https://insights.sbomify.com/CVE-2017-13717/): Misconfiguration in starry:s00111 firmware (high 8.8)
- [CVE-2017-13716](https://insights.sbomify.com/CVE-2017-13716/): Denial of service in gnu:binutils (medium 5.5)
- [CVE-2017-13715](https://insights.sbomify.com/CVE-2017-13715/): Memory corruption in linux:linux kernel (critical 9.8)
- [CVE-2017-13713](https://insights.sbomify.com/CVE-2017-13713/): Command injection in twsz:wifi repeater firmware (high 8.8)
- [CVE-2017-13712](https://insights.sbomify.com/CVE-2017-13712/): Null dereference in lame project:lame (high 7.5)
- [CVE-2017-13711](https://insights.sbomify.com/CVE-2017-13711/): Use after free in debian:debian linux (high 7.5)
- [CVE-2017-13710](https://insights.sbomify.com/CVE-2017-13710/): Null dereference in gnu:binutils (high 7.5)
- [CVE-2017-1371](https://insights.sbomify.com/CVE-2017-1371/): Missing authorization in TRIRIGA Application Platform (high 8.8)
- [CVE-2017-13709](https://insights.sbomify.com/CVE-2017-13709/): Other in flightgear:flightgear (high 7.5)
- [CVE-2017-13708](https://insights.sbomify.com/CVE-2017-13708/): Memory corruption in vxsearch:vx search (critical 9.8)
- [CVE-2017-13707](https://insights.sbomify.com/CVE-2017-13707/): Privilege escalation in axcient:replibit (critical 9.8)
- [CVE-2017-13706](https://insights.sbomify.com/CVE-2017-13706/): XML external entity in lansweeper:lansweeper (critical 9.9)
- [CVE-2017-13704](https://insights.sbomify.com/CVE-2017-13704/): Integer overflow in canonical:ubuntu linux (high 7.5)
- [CVE-2017-13703](https://insights.sbomify.com/CVE-2017-13703/): Denial of service in moxa:eds-g512e firmware (high 7.5)
- [CVE-2017-13702](https://insights.sbomify.com/CVE-2017-13702/): Information disclosure in moxa:eds-g512e firmware (medium 5.3)
- [CVE-2017-13701](https://insights.sbomify.com/CVE-2017-13701/): Weak cryptography in moxa:eds-g512e firmware (critical 9.8)
- [CVE-2017-13700](https://insights.sbomify.com/CVE-2017-13700/): Cross-site scripting in moxa:eds-g512e firmware (medium 4.8)
- [CVE-2017-1370](https://insights.sbomify.com/CVE-2017-1370/): Information disclosure in Jazz Reporting Service (medium 4.9)
- [CVE-2017-13699](https://insights.sbomify.com/CVE-2017-13699/): Weak cryptography in moxa:eds-g512e firmware (high 7.5)
- [CVE-2017-13698](https://insights.sbomify.com/CVE-2017-13698/): Hardcoded credentials in moxa:eds-g512e firmware (high 7.5)
- [CVE-2017-13697](https://insights.sbomify.com/CVE-2017-13697/): Cross-site scripting in finecms project:finecms (medium 6.1)
- [CVE-2017-13696](https://insights.sbomify.com/CVE-2017-13696/): Memory corruption in flexense:diskpulse (critical 9.8)
- [CVE-2017-13695](https://insights.sbomify.com/CVE-2017-13695/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2017-13694](https://insights.sbomify.com/CVE-2017-13694/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2017-13693](https://insights.sbomify.com/CVE-2017-13693/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2017-13692](https://insights.sbomify.com/CVE-2017-13692/): Denial of service in htacg:tidy (high 7.5)
- [CVE-2017-13690](https://insights.sbomify.com/CVE-2017-13690/): Memory corruption in tcpdump:tcpdump (critical 9.8)
- [CVE-2017-1369](https://insights.sbomify.com/CVE-2017-1369/): Cross-site scripting in Rational Engineering Lifecycle Manager (medium 5.4)
- [CVE-2017-13689](https://insights.sbomify.com/CVE-2017-13689/): Memory corruption in tcpdump:tcpdump (critical 9.8)
- [CVE-2017-13688](https://insights.sbomify.com/CVE-2017-13688/): Memory corruption in tcpdump:tcpdump (critical 9.8)
- [CVE-2017-13687](https://insights.sbomify.com/CVE-2017-13687/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2017-13686](https://insights.sbomify.com/CVE-2017-13686/): Null dereference in linux:linux kernel (high 7.8)
- [CVE-2017-13685](https://insights.sbomify.com/CVE-2017-13685/): Denial of service in sqlite:sqlite (medium 5.5)
- [CVE-2017-13684](https://insights.sbomify.com/CVE-2017-13684/): Memory corruption in unisys:mcp-firmware (high 7.8)
- [CVE-2017-13683](https://insights.sbomify.com/CVE-2017-13683/): Denial of service in Symantec Endpoint Encryption (medium 5.7)
- [CVE-2017-13682](https://insights.sbomify.com/CVE-2017-13682/): Denial of service in Symantec Encryption Desktop (medium 5.7)
- [CVE-2017-13681](https://insights.sbomify.com/CVE-2017-13681/): Privilege escalation in Symantec Endpoint Protection (high 7.8)
- [CVE-2017-13680](https://insights.sbomify.com/CVE-2017-13680/): Other in Symantec Endpoint Protection (medium 5.5)
- [CVE-2017-1368](https://insights.sbomify.com/CVE-2017-1368/): Information disclosure in Security Identity Governance and Intelligence (medium 4.3)
- [CVE-2017-13679](https://insights.sbomify.com/CVE-2017-13679/): Denial of service in symantec:encryption desktop (medium 4.2)
- [CVE-2017-13678](https://insights.sbomify.com/CVE-2017-13678/): Cross-site scripting in Advanced Secure Gateway (ASG) (medium 4.8)
- [CVE-2017-13677](https://insights.sbomify.com/CVE-2017-13677/): Denial of service in Advanced Secure Gateway (ASG) (high 7.5)
- [CVE-2017-13676](https://insights.sbomify.com/CVE-2017-13676/): Code injection in Norton Remove & Reinstall (high 7.0)
- [CVE-2017-13675](https://insights.sbomify.com/CVE-2017-13675/): Denial of service in symantec:endpoint encryption (medium 4.2)
- [CVE-2017-13674](https://insights.sbomify.com/CVE-2017-13674/): Privilege escalation in ProxyClient (high 7.8)
- [CVE-2017-13673](https://insights.sbomify.com/CVE-2017-13673/): Denial of service in qemu:qemu (medium 6.5)
- [CVE-2017-13672](https://insights.sbomify.com/CVE-2017-13672/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2017-13671](https://insights.sbomify.com/CVE-2017-13671/): Cross-site scripting in misp-project:misp (medium 6.1)
- [CVE-2017-13670](https://insights.sbomify.com/CVE-2017-13670/): File upload in blackcat-cms:blackcat cms (medium 6.5)
- [CVE-2017-1367](https://insights.sbomify.com/CVE-2017-1367/): Information disclosure in Security Identity Governance and Intelligence (low 3.7)
- [CVE-2017-13669](https://insights.sbomify.com/CVE-2017-13669/): SQL injection in nexusphp:nexusphp (critical 9.8)
- [CVE-2017-13668](https://insights.sbomify.com/CVE-2017-13668/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 5.4)
- [CVE-2017-13667](https://insights.sbomify.com/CVE-2017-13667/): Server-side request forgery in open-xchange:open-xchange appsuite (critical 9.9)
- [CVE-2017-13666](https://insights.sbomify.com/CVE-2017-13666/): Integer overflow in multicorewareinc:x265 (medium 5.5)
- [CVE-2017-13664](https://insights.sbomify.com/CVE-2017-13664/): Information disclosure in ismartalarm:cubeone firmware (critical 9.8)
- [CVE-2017-13663](https://insights.sbomify.com/CVE-2017-13663/): Hardcoded credentials in ismartalarm:cubeone firmware (high 7.5)
- [CVE-2017-1366](https://insights.sbomify.com/CVE-2017-1366/): Weak cryptography in Security Identity Governance and Intelligence (medium 5.9)
- [CVE-2017-13658](https://insights.sbomify.com/CVE-2017-13658/): Null dereference in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-13652](https://insights.sbomify.com/CVE-2017-13652/): Other in netapp:oncommand insight (medium 6.5)
- [CVE-2017-1365](https://insights.sbomify.com/CVE-2017-1365/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-13649](https://insights.sbomify.com/CVE-2017-13649/): Privilege escalation in unrealircd:unrealircd (medium 5.5)
- [CVE-2017-13648](https://insights.sbomify.com/CVE-2017-13648/): Denial of service in graphicsmagick:graphicsmagick (medium 6.5)
- [CVE-2017-1364](https://insights.sbomify.com/CVE-2017-1364/): Cross-site scripting in Rational Engineering Lifecycle Manager (medium 5.4)
- [CVE-2017-1363](https://insights.sbomify.com/CVE-2017-1363/): Cross-site scripting in ibm:rational collaborative lifecycle management (medium 5.4)
- [CVE-2017-1362](https://insights.sbomify.com/CVE-2017-1362/): Information disclosure in Security Identity Manager (high 7.8)
- [CVE-2017-1359](https://insights.sbomify.com/CVE-2017-1359/): Cross-site scripting in Rational Engineering Lifecycle Manager (medium 5.4)
- [CVE-2017-1357](https://insights.sbomify.com/CVE-2017-1357/): Other in Maximo Asset Management (medium 4.3)
- [CVE-2017-1356](https://insights.sbomify.com/CVE-2017-1356/): SQL injection in Atlas eDiscovery Process Management (high 8.8)
- [CVE-2017-1355](https://insights.sbomify.com/CVE-2017-1355/): Information disclosure in Atlas eDiscovery Process Management (low 3.7)
- [CVE-2017-1354](https://insights.sbomify.com/CVE-2017-1354/): Cross-site scripting in Atlas eDiscovery Process Management (medium 5.4)
- [CVE-2017-1353](https://insights.sbomify.com/CVE-2017-1353/): Information disclosure in Atlas eDiscovery Process Management (low 3.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/107/