# Vulnerabilities published in 2017 - [CVE-2017-13037](https://insights.sbomify.com/CVE-2017-13037/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13036](https://insights.sbomify.com/CVE-2017-13036/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13035](https://insights.sbomify.com/CVE-2017-13035/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13034](https://insights.sbomify.com/CVE-2017-13034/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13033](https://insights.sbomify.com/CVE-2017-13033/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13032](https://insights.sbomify.com/CVE-2017-13032/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13031](https://insights.sbomify.com/CVE-2017-13031/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13030](https://insights.sbomify.com/CVE-2017-13030/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-1303](https://insights.sbomify.com/CVE-2017-1303/): Cross-site scripting in WebSphere Portal (medium 6.1) - [CVE-2017-13029](https://insights.sbomify.com/CVE-2017-13029/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13028](https://insights.sbomify.com/CVE-2017-13028/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2017-13027](https://insights.sbomify.com/CVE-2017-13027/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13026](https://insights.sbomify.com/CVE-2017-13026/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13025](https://insights.sbomify.com/CVE-2017-13025/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13024](https://insights.sbomify.com/CVE-2017-13024/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2017-13023](https://insights.sbomify.com/CVE-2017-13023/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13022](https://insights.sbomify.com/CVE-2017-13022/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13021](https://insights.sbomify.com/CVE-2017-13021/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13020](https://insights.sbomify.com/CVE-2017-13020/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2017-1302](https://insights.sbomify.com/CVE-2017-1302/): Information disclosure in Sterling B2B Integrator (medium 5.5) - [CVE-2017-13019](https://insights.sbomify.com/CVE-2017-13019/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13018](https://insights.sbomify.com/CVE-2017-13018/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13017](https://insights.sbomify.com/CVE-2017-13017/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13016](https://insights.sbomify.com/CVE-2017-13016/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13015](https://insights.sbomify.com/CVE-2017-13015/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13014](https://insights.sbomify.com/CVE-2017-13014/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13013](https://insights.sbomify.com/CVE-2017-13013/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13012](https://insights.sbomify.com/CVE-2017-13012/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13011](https://insights.sbomify.com/CVE-2017-13011/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13010](https://insights.sbomify.com/CVE-2017-13010/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-1301](https://insights.sbomify.com/CVE-2017-1301/): Other in Spectrum Protect (medium 5.5) - [CVE-2017-13009](https://insights.sbomify.com/CVE-2017-13009/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13008](https://insights.sbomify.com/CVE-2017-13008/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13007](https://insights.sbomify.com/CVE-2017-13007/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13006](https://insights.sbomify.com/CVE-2017-13006/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13005](https://insights.sbomify.com/CVE-2017-13005/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13004](https://insights.sbomify.com/CVE-2017-13004/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2017-13003](https://insights.sbomify.com/CVE-2017-13003/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13002](https://insights.sbomify.com/CVE-2017-13002/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13001](https://insights.sbomify.com/CVE-2017-13001/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-13000](https://insights.sbomify.com/CVE-2017-13000/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-1300](https://insights.sbomify.com/CVE-2017-1300/): Cross-site request forgery in OpenPages GRC Platform (high 8.8) - [CVE-2017-12999](https://insights.sbomify.com/CVE-2017-12999/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12998](https://insights.sbomify.com/CVE-2017-12998/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12997](https://insights.sbomify.com/CVE-2017-12997/): Denial of service in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12996](https://insights.sbomify.com/CVE-2017-12996/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12995](https://insights.sbomify.com/CVE-2017-12995/): Denial of service in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12994](https://insights.sbomify.com/CVE-2017-12994/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12993](https://insights.sbomify.com/CVE-2017-12993/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12992](https://insights.sbomify.com/CVE-2017-12992/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12991](https://insights.sbomify.com/CVE-2017-12991/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12990](https://insights.sbomify.com/CVE-2017-12990/): Denial of service in tcpdump:tcpdump (critical 9.8) - [CVE-2017-1299](https://insights.sbomify.com/CVE-2017-1299/): Cross-site scripting in ibm:rational collaborative lifecycle management (medium 5.4) - [CVE-2017-12989](https://insights.sbomify.com/CVE-2017-12989/): Denial of service in tcpdump:tcpdump (high 7.5) - [CVE-2017-12988](https://insights.sbomify.com/CVE-2017-12988/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12987](https://insights.sbomify.com/CVE-2017-12987/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2017-12986](https://insights.sbomify.com/CVE-2017-12986/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12985](https://insights.sbomify.com/CVE-2017-12985/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12984](https://insights.sbomify.com/CVE-2017-12984/): Cross-site scripting in phpmywind:phpmywind (medium 6.1) - [CVE-2017-12983](https://insights.sbomify.com/CVE-2017-12983/): Memory corruption in imagemagick:imagemagick (high 8.8) - [CVE-2017-12982](https://insights.sbomify.com/CVE-2017-12982/): Denial of service in uclouvain:openjpeg (medium 5.5) - [CVE-2017-12981](https://insights.sbomify.com/CVE-2017-12981/): SQL injection in nexusphp:nexusphp (critical 9.8) - [CVE-2017-12980](https://insights.sbomify.com/CVE-2017-12980/): Cross-site scripting in dokuwiki:dokuwiki (medium 6.1) - [CVE-2017-12979](https://insights.sbomify.com/CVE-2017-12979/): Cross-site scripting in dokuwiki:dokuwiki (medium 6.1) - [CVE-2017-12978](https://insights.sbomify.com/CVE-2017-12978/): Cross-site scripting in cacti:cacti (medium 5.4) - [CVE-2017-12977](https://insights.sbomify.com/CVE-2017-12977/): SQL injection in 10web:photo gallery (high 7.2) - [CVE-2017-12976](https://insights.sbomify.com/CVE-2017-12976/): Command injection in git-annex project:git-annex (high 8.8) - [CVE-2017-12974](https://insights.sbomify.com/CVE-2017-12974/): Improper Verification of Cryptographic Signature in Nimbus JOSE+JWT (high 7.5) - [CVE-2017-12973](https://insights.sbomify.com/CVE-2017-12973/): Nimbus JOSE+JWT vulnerable to padding oracle attack (low 3.1) - [CVE-2017-12972](https://insights.sbomify.com/CVE-2017-12972/): Nimbus JOSE+JWT missing overflow check (high 7.5) - [CVE-2017-12971](https://insights.sbomify.com/CVE-2017-12971/): Cross-site scripting in apache2triad:apache2triad (medium 6.1) - [CVE-2017-12970](https://insights.sbomify.com/CVE-2017-12970/): Cross-site request forgery in apache2triad:apache2triad (high 8.8) - [CVE-2017-1297](https://insights.sbomify.com/CVE-2017-1297/): Memory corruption in DB2 for Linux, UNIX and Windows (high 7.3) - [CVE-2017-12969](https://insights.sbomify.com/CVE-2017-12969/): Memory corruption in avaya:ip office contact center (high 8.8) - [CVE-2017-12967](https://insights.sbomify.com/CVE-2017-12967/): Memory corruption in gnu:binutils (medium 6.5) - [CVE-2017-12966](https://insights.sbomify.com/CVE-2017-12966/): Memory corruption in asn1c project:asn1c (medium 6.5) - [CVE-2017-12965](https://insights.sbomify.com/CVE-2017-12965/): Auth bypass in apache2triad:apache2triad (critical 9.8) - [CVE-2017-12964](https://insights.sbomify.com/CVE-2017-12964/): Denial of service in libsass:libsass (high 7.5) - [CVE-2017-12963](https://insights.sbomify.com/CVE-2017-12963/): Memory corruption in libsass:libsass (high 7.5) - [CVE-2017-12962](https://insights.sbomify.com/CVE-2017-12962/): Denial of service in libsass:libsass (high 7.5) - [CVE-2017-12961](https://insights.sbomify.com/CVE-2017-12961/): Denial of service in gnu:pspp (high 7.5) - [CVE-2017-12960](https://insights.sbomify.com/CVE-2017-12960/): Denial of service in gnu:pspp (high 7.5) - [CVE-2017-12959](https://insights.sbomify.com/CVE-2017-12959/): Denial of service in gnu:pspp (high 7.5) - [CVE-2017-12958](https://insights.sbomify.com/CVE-2017-12958/): Memory corruption in gnu:pspp (high 7.5) - [CVE-2017-12957](https://insights.sbomify.com/CVE-2017-12957/): Memory corruption in exiv2:exiv2 (medium 6.5) - [CVE-2017-12956](https://insights.sbomify.com/CVE-2017-12956/): Memory corruption in exiv2:exiv2 (medium 6.5) - [CVE-2017-12955](https://insights.sbomify.com/CVE-2017-12955/): Memory corruption in exiv2:exiv2 (high 8.8) - [CVE-2017-12954](https://insights.sbomify.com/CVE-2017-12954/): Memory corruption in libgig0:libgig (medium 6.5) - [CVE-2017-12953](https://insights.sbomify.com/CVE-2017-12953/): Memory corruption in libgig0:libgig (medium 6.5) - [CVE-2017-12952](https://insights.sbomify.com/CVE-2017-12952/): Null dereference in libgig0:libgig (medium 6.5) - [CVE-2017-12951](https://insights.sbomify.com/CVE-2017-12951/): Memory corruption in libgig0:libgig (medium 6.5) - [CVE-2017-12950](https://insights.sbomify.com/CVE-2017-12950/): Null dereference in linuxsampler:libgig (medium 6.5) - [CVE-2017-1295](https://insights.sbomify.com/CVE-2017-1295/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3) - [CVE-2017-12949](https://insights.sbomify.com/CVE-2017-12949/): SQL injection in podlove:podlove podcast publisher (high 8.8) - [CVE-2017-12948](https://insights.sbomify.com/CVE-2017-12948/): Cross-site scripting in pressforward:pressforward (medium 6.1) - [CVE-2017-12947](https://insights.sbomify.com/CVE-2017-12947/): SQL injection in easymodal project:easy modal (high 7.2) - [CVE-2017-12946](https://insights.sbomify.com/CVE-2017-12946/): SQL injection in easymodal project:easy modal (high 7.2) - [CVE-2017-12945](https://insights.sbomify.com/CVE-2017-12945/): Command injection in mersive:solstice firmware (high 8.8) - [CVE-2017-12944](https://insights.sbomify.com/CVE-2017-12944/): Denial of service in libtiff:libtiff (high 7.5) - [CVE-2017-12943](https://insights.sbomify.com/CVE-2017-12943/): Path traversal in dlink:dir-600 b1 firmware (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/111/