# Vulnerabilities published in 2017 - [CVE-2017-13151](https://insights.sbomify.com/CVE-2017-13151/): Memory corruption in Android (high 8.8) - [CVE-2017-13150](https://insights.sbomify.com/CVE-2017-13150/): Information disclosure in Android (critical 9.1) - [CVE-2017-1315](https://insights.sbomify.com/CVE-2017-1315/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2017-13149](https://insights.sbomify.com/CVE-2017-13149/): Information disclosure in Android (critical 9.1) - [CVE-2017-13148](https://insights.sbomify.com/CVE-2017-13148/): Denial of service in Android (medium 6.5) - [CVE-2017-13147](https://insights.sbomify.com/CVE-2017-13147/): Denial of service in graphicsmagick:graphicsmagick (high 8.8) - [CVE-2017-13146](https://insights.sbomify.com/CVE-2017-13146/): Denial of service in imagemagick:imagemagick (high 8.8) - [CVE-2017-13145](https://insights.sbomify.com/CVE-2017-13145/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2017-13144](https://insights.sbomify.com/CVE-2017-13144/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-13143](https://insights.sbomify.com/CVE-2017-13143/): Information disclosure in imagemagick:imagemagick (high 7.5) - [CVE-2017-13142](https://insights.sbomify.com/CVE-2017-13142/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-13141](https://insights.sbomify.com/CVE-2017-13141/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-13140](https://insights.sbomify.com/CVE-2017-13140/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-1314](https://insights.sbomify.com/CVE-2017-1314/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2017-13139](https://insights.sbomify.com/CVE-2017-13139/): Memory corruption in canonical:ubuntu linux (critical 9.8) - [CVE-2017-13138](https://insights.sbomify.com/CVE-2017-13138/): Cross-site scripting in qodeinteractive:bridge (medium 6.1) - [CVE-2017-13137](https://insights.sbomify.com/CVE-2017-13137/): SQL injection in formcrafts:formcraft (critical 9.8) - [CVE-2017-13136](https://insights.sbomify.com/CVE-2017-13136/): Integer overflow in libbpg project:libbpg (high 8.8) - [CVE-2017-13135](https://insights.sbomify.com/CVE-2017-13135/): Null dereference in libbpg project:libbpg (high 7.8) - [CVE-2017-13134](https://insights.sbomify.com/CVE-2017-13134/): Memory corruption in imagemagick:imagemagick (medium 6.5) - [CVE-2017-13133](https://insights.sbomify.com/CVE-2017-13133/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-13132](https://insights.sbomify.com/CVE-2017-13132/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-13131](https://insights.sbomify.com/CVE-2017-13131/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-13130](https://insights.sbomify.com/CVE-2017-13130/): Privilege escalation in bmc:patrol (high 7.8) - [CVE-2017-1313](https://insights.sbomify.com/CVE-2017-1313/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2017-13129](https://insights.sbomify.com/CVE-2017-13129/): Cross-site request forgery in zkteco:zktime web (high 8.0) - [CVE-2017-13127](https://insights.sbomify.com/CVE-2017-13127/): Information disclosure in vip:vip (high 8.1) - [CVE-2017-1312](https://insights.sbomify.com/CVE-2017-1312/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2017-1311](https://insights.sbomify.com/CVE-2017-1311/): SQL injection in Insights Foundation for Energy (high 8.8) - [CVE-2017-13108](https://insights.sbomify.com/CVE-2017-13108/): Hardcoded credentials in Security Antivirus, Anti-hacking & Cleaner (high 7.5) - [CVE-2017-13107](https://insights.sbomify.com/CVE-2017-13107/): Live.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption (high 7.5) - [CVE-2017-13106](https://insights.sbomify.com/CVE-2017-13106/): Hardcoded credentials in CM Launcher 3D - Theme, wallpaper, Secure, Efficient (high 7.5) - [CVE-2017-13105](https://insights.sbomify.com/CVE-2017-13105/): Weak cryptography in Virus Cleaner - Antivirus, Booster (medium 5.9) - [CVE-2017-13104](https://insights.sbomify.com/CVE-2017-13104/): Hardcoded credentials in UberEATS: Uber for Food Delivery (high 7.5) - [CVE-2017-13102](https://insights.sbomify.com/CVE-2017-13102/): Gameloft Asphalt Xtreme: Offroad Rally Racing, 1.6.0, 2017-08-13, iOS application uses a hard-coded key for encryption (high 7.5) - [CVE-2017-13101](https://insights.sbomify.com/CVE-2017-13101/): Hardcoded credentials in musical.ly (high 7.5) - [CVE-2017-13100](https://insights.sbomify.com/CVE-2017-13100/): DistinctDev, Inc., The Moron Test, 6.3.1, 2017-05-04, iOS application uses a hard-coded key for encryption (high 7.5) - [CVE-2017-1310](https://insights.sbomify.com/CVE-2017-1310/): Denial of service in Informix Servers (medium 6.5) - [CVE-2017-13099](https://insights.sbomify.com/CVE-2017-13099/): wolfSSL Bleichenbacher/ROBOT (high 7.5) - [CVE-2017-13098](https://insights.sbomify.com/CVE-2017-13098/): BouncyCastle JCE TLS Bleichenbacher/ROBOT (high 7.5) - [CVE-2017-13097](https://insights.sbomify.com/CVE-2017-13097/): Weak cryptography in Standard (high 7.8) - [CVE-2017-13096](https://insights.sbomify.com/CVE-2017-13096/): Weak cryptography in Standard (high 7.8) - [CVE-2017-13095](https://insights.sbomify.com/CVE-2017-13095/): Weak cryptography in Standard (high 7.8) - [CVE-2017-13094](https://insights.sbomify.com/CVE-2017-13094/): Weak cryptography in Standard (high 7.8) - [CVE-2017-13093](https://insights.sbomify.com/CVE-2017-13093/): Weak cryptography in Standard (high 7.8) - [CVE-2017-13092](https://insights.sbomify.com/CVE-2017-13092/): Weak cryptography in Standard (high 7.8) - [CVE-2017-13091](https://insights.sbomify.com/CVE-2017-13091/): Weak cryptography in Standard (high 7.8) - [CVE-2017-13090](https://insights.sbomify.com/CVE-2017-13090/): GNU Wget: heap overflow in HTTP protocol handling (high 8.8) - [CVE-2017-1309](https://insights.sbomify.com/CVE-2017-1309/): Information disclosure in InfoSphere Master Data Management (high 7.8) - [CVE-2017-13089](https://insights.sbomify.com/CVE-2017-13089/): GNU Wget: stack overflow in HTTP protocol handling (high 8.8) - [CVE-2017-13088](https://insights.sbomify.com/CVE-2017-13088/): Weak cryptography in Wi-Fi Protected Access (WPA and WPA2) (medium 5.3) - [CVE-2017-13087](https://insights.sbomify.com/CVE-2017-13087/): Weak cryptography in canonical:ubuntu linux (medium 5.3) - [CVE-2017-13086](https://insights.sbomify.com/CVE-2017-13086/): Weak cryptography in Wi-Fi Protected Access (WPA and WPA2) (medium 6.8) - [CVE-2017-13084](https://insights.sbomify.com/CVE-2017-13084/): Weak cryptography in Wi-Fi Protected Access (WPA and WPA2) (medium 6.8) - [CVE-2017-13083](https://insights.sbomify.com/CVE-2017-13083/): Security feature bypass in Rufus (medium 5.3) - [CVE-2017-13082](https://insights.sbomify.com/CVE-2017-13082/): Weak cryptography in Wi-Fi Protected Access (WPA and WPA2) (high 8.1) - [CVE-2017-13081](https://insights.sbomify.com/CVE-2017-13081/): Weak cryptography in Wi-Fi Protected Access (WPA and WPA2) (medium 5.3) - [CVE-2017-13080](https://insights.sbomify.com/CVE-2017-13080/): Weak cryptography in Wi-Fi Protected Access (WPA and WPA2) (medium 5.3) - [CVE-2017-1308](https://insights.sbomify.com/CVE-2017-1308/): Missing authorization in Daeja ViewONE (medium 6.5) - [CVE-2017-13079](https://insights.sbomify.com/CVE-2017-13079/): Weak cryptography in Wi-Fi Protected Access (WPA and WPA2) (medium 5.3) - [CVE-2017-13078](https://insights.sbomify.com/CVE-2017-13078/): Weak cryptography in Wi-Fi Protected Access (WPA and WPA2) (medium 5.3) - [CVE-2017-13077](https://insights.sbomify.com/CVE-2017-13077/): Weak cryptography in Wi-Fi Protected Access (WPA and WPA2) (medium 6.8) - [CVE-2017-13073](https://insights.sbomify.com/CVE-2017-13073/): Cross-site scripting in Photo Station (medium 6.1) - [CVE-2017-13072](https://insights.sbomify.com/CVE-2017-13072/): Cross-site scripting in App Center in QTS (medium 6.1) - [CVE-2017-13071](https://insights.sbomify.com/CVE-2017-13071/): Command injection in Video Station (critical 9.8) - [CVE-2017-13070](https://insights.sbomify.com/CVE-2017-13070/): Other in Qsync for Windows (exe) (high 7.8) - [CVE-2017-13069](https://insights.sbomify.com/CVE-2017-13069/): Command injection in qnap:music station (critical 9.8) - [CVE-2017-13068](https://insights.sbomify.com/CVE-2017-13068/): SQL injection in QNAP Helpdesk APP (high 7.5) - [CVE-2017-13067](https://insights.sbomify.com/CVE-2017-13067/): Command injection in QTS Media Libary PRODUCT (critical 9.8) - [CVE-2017-13066](https://insights.sbomify.com/CVE-2017-13066/): Denial of service in graphicsmagick:graphicsmagick (medium 6.5) - [CVE-2017-13065](https://insights.sbomify.com/CVE-2017-13065/): Null dereference in debian:debian linux (medium 6.5) - [CVE-2017-13064](https://insights.sbomify.com/CVE-2017-13064/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2017-13063](https://insights.sbomify.com/CVE-2017-13063/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2017-13062](https://insights.sbomify.com/CVE-2017-13062/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-13061](https://insights.sbomify.com/CVE-2017-13061/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-13060](https://insights.sbomify.com/CVE-2017-13060/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-1306](https://insights.sbomify.com/CVE-2017-1306/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2017-13059](https://insights.sbomify.com/CVE-2017-13059/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-13058](https://insights.sbomify.com/CVE-2017-13058/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-13056](https://insights.sbomify.com/CVE-2017-13056/): Code injection in tracker-software:pdf-xchange viewer (high 7.8) - [CVE-2017-13055](https://insights.sbomify.com/CVE-2017-13055/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13054](https://insights.sbomify.com/CVE-2017-13054/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13053](https://insights.sbomify.com/CVE-2017-13053/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13052](https://insights.sbomify.com/CVE-2017-13052/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13051](https://insights.sbomify.com/CVE-2017-13051/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13050](https://insights.sbomify.com/CVE-2017-13050/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-1305](https://insights.sbomify.com/CVE-2017-1305/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4) - [CVE-2017-13049](https://insights.sbomify.com/CVE-2017-13049/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13048](https://insights.sbomify.com/CVE-2017-13048/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13047](https://insights.sbomify.com/CVE-2017-13047/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13046](https://insights.sbomify.com/CVE-2017-13046/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13045](https://insights.sbomify.com/CVE-2017-13045/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13044](https://insights.sbomify.com/CVE-2017-13044/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13043](https://insights.sbomify.com/CVE-2017-13043/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13042](https://insights.sbomify.com/CVE-2017-13042/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13041](https://insights.sbomify.com/CVE-2017-13041/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13040](https://insights.sbomify.com/CVE-2017-13040/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-1304](https://insights.sbomify.com/CVE-2017-1304/): Memory corruption in Elastic Storage Server (medium 6.2) - [CVE-2017-13039](https://insights.sbomify.com/CVE-2017-13039/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13038](https://insights.sbomify.com/CVE-2017-13038/): Memory corruption in tcpdump:tcpdump (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/110/