# Vulnerabilities published in 2017 - [CVE-2017-12942](https://insights.sbomify.com/CVE-2017-12942/): Memory corruption in rarlab:unrar (critical 9.8) - [CVE-2017-12941](https://insights.sbomify.com/CVE-2017-12941/): Memory corruption in rarlab:unrar (critical 9.8) - [CVE-2017-12940](https://insights.sbomify.com/CVE-2017-12940/): Memory corruption in rarlab:unrar (critical 9.8) - [CVE-2017-1294](https://insights.sbomify.com/CVE-2017-1294/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2017-12939](https://insights.sbomify.com/CVE-2017-12939/): Code injection in unity3d:unity editor (critical 9.8) - [CVE-2017-12938](https://insights.sbomify.com/CVE-2017-12938/): Path traversal in rarlab:unrar (high 7.5) - [CVE-2017-12937](https://insights.sbomify.com/CVE-2017-12937/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2017-12936](https://insights.sbomify.com/CVE-2017-12936/): Use after free in debian:debian linux (high 8.8) - [CVE-2017-12935](https://insights.sbomify.com/CVE-2017-12935/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2017-12934](https://insights.sbomify.com/CVE-2017-12934/): Use after free in php:php (high 7.5) - [CVE-2017-12933](https://insights.sbomify.com/CVE-2017-12933/): Memory corruption in php:php (critical 9.8) - [CVE-2017-12932](https://insights.sbomify.com/CVE-2017-12932/): Use after free in php:php (critical 9.8) - [CVE-2017-12930](https://insights.sbomify.com/CVE-2017-12930/): SQL injection in tecnovision:dlx spot player4 (critical 9.8) - [CVE-2017-1293](https://insights.sbomify.com/CVE-2017-1293/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4) - [CVE-2017-12929](https://insights.sbomify.com/CVE-2017-12929/): File upload in tecnovision:dlx spot player4 (high 8.8) - [CVE-2017-12928](https://insights.sbomify.com/CVE-2017-12928/): Hardcoded credentials in tecnovision:dlx spot player4 (critical 9.8) - [CVE-2017-12927](https://insights.sbomify.com/CVE-2017-12927/): Cross-site scripting in cacti:cacti (medium 6.1) - [CVE-2017-12925](https://insights.sbomify.com/CVE-2017-12925/): Memory corruption in libfpx project:libfpx (medium 6.5) - [CVE-2017-12924](https://insights.sbomify.com/CVE-2017-12924/): Denial of service in libfpx project:libfpx (medium 6.5) - [CVE-2017-12923](https://insights.sbomify.com/CVE-2017-12923/): Null dereference in libfpx project:libfpx (medium 6.5) - [CVE-2017-12922](https://insights.sbomify.com/CVE-2017-12922/): Null dereference in libfpx project:libfpx (medium 6.5) - [CVE-2017-12921](https://insights.sbomify.com/CVE-2017-12921/): Null dereference in libfpx project:libfpx (medium 6.5) - [CVE-2017-12920](https://insights.sbomify.com/CVE-2017-12920/): Null dereference in libfpx project:libfpx (medium 6.5) - [CVE-2017-1292](https://insights.sbomify.com/CVE-2017-1292/): Information disclosure in Maximo Asset Management (medium 5.3) - [CVE-2017-12919](https://insights.sbomify.com/CVE-2017-12919/): Memory corruption in libfpx project:libfpx (medium 6.5) - [CVE-2017-12912](https://insights.sbomify.com/CVE-2017-12912/): Memory corruption in mp3gain:mp3gain (medium 5.5) - [CVE-2017-12911](https://insights.sbomify.com/CVE-2017-12911/): Memory corruption in mp3gain:mp3gain (medium 5.5) - [CVE-2017-12910](https://insights.sbomify.com/CVE-2017-12910/): SQL injection in nexusphp project:nexusphp (critical 9.8) - [CVE-2017-1291](https://insights.sbomify.com/CVE-2017-1291/): Cross-site scripting in Maximo Asset Management (medium 5.4) - [CVE-2017-12909](https://insights.sbomify.com/CVE-2017-12909/): SQL injection in nexusphp project:nexusphp (critical 9.8) - [CVE-2017-12908](https://insights.sbomify.com/CVE-2017-12908/): SQL injection in nexusphp project:nexusphp (critical 9.8) - [CVE-2017-12907](https://insights.sbomify.com/CVE-2017-12907/): Cross-site scripting in nexusphp project:nexusphp (medium 6.1) - [CVE-2017-12906](https://insights.sbomify.com/CVE-2017-12906/): Cross-site scripting in nexusphp project:nexusphp (medium 6.1) - [CVE-2017-12905](https://insights.sbomify.com/CVE-2017-12905/): Server-side request forgery in vebto:pixie - image editor (critical 10.0) - [CVE-2017-12904](https://insights.sbomify.com/CVE-2017-12904/): Command injection in debian:debian linux (high 8.8) - [CVE-2017-12902](https://insights.sbomify.com/CVE-2017-12902/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2017-12901](https://insights.sbomify.com/CVE-2017-12901/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12900](https://insights.sbomify.com/CVE-2017-12900/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-1290](https://insights.sbomify.com/CVE-2017-1290/): Cross-site scripting in OpenPages GRC Platform (medium 5.4) - [CVE-2017-12899](https://insights.sbomify.com/CVE-2017-12899/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2017-12898](https://insights.sbomify.com/CVE-2017-12898/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12897](https://insights.sbomify.com/CVE-2017-12897/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12896](https://insights.sbomify.com/CVE-2017-12896/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2017-12895](https://insights.sbomify.com/CVE-2017-12895/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12894](https://insights.sbomify.com/CVE-2017-12894/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12893](https://insights.sbomify.com/CVE-2017-12893/): Memory corruption in tcpdump:tcpdump (critical 9.8) - [CVE-2017-12892](https://insights.sbomify.com/CVE-2017-12892/): Other in foxitsoftware:pdf compressor (high 7.8) - [CVE-2017-1289](https://insights.sbomify.com/CVE-2017-1289/): XML external entity in Runtimes for Java Technology (high 8.2) - [CVE-2017-12885](https://insights.sbomify.com/CVE-2017-12885/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1) - [CVE-2017-12884](https://insights.sbomify.com/CVE-2017-12884/): Information disclosure in open-xchange:open-xchange appsuite (high 7.5) - [CVE-2017-12883](https://insights.sbomify.com/CVE-2017-12883/): Memory corruption in perl:perl (critical 9.1) - [CVE-2017-12882](https://insights.sbomify.com/CVE-2017-12882/): Spring Batch Admin vulnerable to Stored Cross-site scripting (XSS) in the file upload functionality (medium 5.4) - [CVE-2017-12881](https://insights.sbomify.com/CVE-2017-12881/): Spring Batch Admin vulnerable to Cross-site request forgery (CSRF) in the file upload functionality (high 8.8) - [CVE-2017-12879](https://insights.sbomify.com/CVE-2017-12879/): Cross-site scripting in paessler:prtg network monitor (medium 5.4) - [CVE-2017-12877](https://insights.sbomify.com/CVE-2017-12877/): Use after free in canonical:ubuntu linux (medium 6.5) - [CVE-2017-12876](https://insights.sbomify.com/CVE-2017-12876/): Memory corruption in imagemagick:imagemagick (medium 6.5) - [CVE-2017-12875](https://insights.sbomify.com/CVE-2017-12875/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-12874](https://insights.sbomify.com/CVE-2017-12874/): SimpleSAMLphp InfoCard module Incorrect signature verification (high 7.5) - [CVE-2017-12873](https://insights.sbomify.com/CVE-2017-12873/): Incorrect persistent NameID generation in SimpleSAMLphp (critical 9.8) - [CVE-2017-12872](https://insights.sbomify.com/CVE-2017-12872/): SimpleSAMLphp allows timing side-channel attacks (medium 5.9) - [CVE-2017-12871](https://insights.sbomify.com/CVE-2017-12871/): SimpleSAMLphp Incorrect IV generation for encryption (medium 5.9) - [CVE-2017-12870](https://insights.sbomify.com/CVE-2017-12870/): SimpleSAMLphp Unauthenticated encryption in CBC mode (medium 5.9) - [CVE-2017-1287](https://insights.sbomify.com/CVE-2017-1287/): Open redirect in Rational Rhapsody Design Manager (medium 5.4) - [CVE-2017-12869](https://insights.sbomify.com/CVE-2017-12869/): SimpleSAMLphp Authentication context bypass in the multiauth module (high 7.5) - [CVE-2017-12868](https://insights.sbomify.com/CVE-2017-12868/): SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module (critical 9.8) - [CVE-2017-12867](https://insights.sbomify.com/CVE-2017-12867/): SimpleSAMLphp Invalid token creation and validation (medium 5.9) - [CVE-2017-12865](https://insights.sbomify.com/CVE-2017-12865/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2017-12864](https://insights.sbomify.com/CVE-2017-12864/): Integer Overflow or Wraparound in OpenCV (high 8.8) - [CVE-2017-12863](https://insights.sbomify.com/CVE-2017-12863/): Integer Overflow or Wraparound in OpenCV (high 8.8) - [CVE-2017-12862](https://insights.sbomify.com/CVE-2017-12862/): Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV (high 8.8) - [CVE-2017-12861](https://insights.sbomify.com/CVE-2017-12861/): Auth bypass in epson:easymp (critical 9.8) - [CVE-2017-12860](https://insights.sbomify.com/CVE-2017-12860/): Hardcoded credentials in epson:easymp (critical 9.8) - [CVE-2017-1286](https://insights.sbomify.com/CVE-2017-1286/): Information disclosure in ibm:urbancode deploy (medium 6.5) - [CVE-2017-12859](https://insights.sbomify.com/CVE-2017-12859/): Denial of service in netapp:data ontap (medium 5.9) - [CVE-2017-12858](https://insights.sbomify.com/CVE-2017-12858/): Memory corruption in libzip:libzip (critical 9.8) - [CVE-2017-12857](https://insights.sbomify.com/CVE-2017-12857/): Information disclosure in polycom:unified communications software (high 8.8) - [CVE-2017-12856](https://insights.sbomify.com/CVE-2017-12856/): Cross-site scripting in c.p.sub project:c.p.sub (medium 6.1) - [CVE-2017-12855](https://insights.sbomify.com/CVE-2017-12855/): Information disclosure in xen:xen (medium 6.5) - [CVE-2017-12853](https://insights.sbomify.com/CVE-2017-12853/): Cross-site request forgery in rtsindia:rwr-3g-100 firmware (high 8.8) - [CVE-2017-12852](https://insights.sbomify.com/CVE-2017-12852/): Numpy missing input validation (high 7.5) - [CVE-2017-12851](https://insights.sbomify.com/CVE-2017-12851/): Privilege escalation in kanboard:kanboard (high 8.8) - [CVE-2017-12850](https://insights.sbomify.com/CVE-2017-12850/): Business logic in kanboard:kanboard (high 8.8) - [CVE-2017-1285](https://insights.sbomify.com/CVE-2017-1285/): Denial of service in MQ (medium 6.5) - [CVE-2017-12849](https://insights.sbomify.com/CVE-2017-12849/): Silverstripe CMS User Enumeration (medium 5.3) - [CVE-2017-12847](https://insights.sbomify.com/CVE-2017-12847/): Privilege escalation in nagios:nagios (medium 6.3) - [CVE-2017-12844](https://insights.sbomify.com/CVE-2017-12844/): Cross-site scripting in icewarp:mail server (medium 4.8) - [CVE-2017-12843](https://insights.sbomify.com/CVE-2017-12843/): Path traversal in cyrusimap:cyrus imap (medium 6.5) - [CVE-2017-12842](https://insights.sbomify.com/CVE-2017-12842/): Weak cryptography in bitcoin:bitcoin core (high 7.5) - [CVE-2017-12840](https://insights.sbomify.com/CVE-2017-12840/): Memory corruption in deslock:deslock\+ (high 7.8) - [CVE-2017-1284](https://insights.sbomify.com/CVE-2017-1284/): Information disclosure in MQ (medium 4.7) - [CVE-2017-12839](https://insights.sbomify.com/CVE-2017-12839/): Memory corruption in mpg123:mpg123 (high 8.3) - [CVE-2017-12838](https://insights.sbomify.com/CVE-2017-12838/): Cross-site request forgery in nexusphp project:nexusphp (high 8.8) - [CVE-2017-12837](https://insights.sbomify.com/CVE-2017-12837/): Memory corruption in perl:perl (high 7.5) - [CVE-2017-12836](https://insights.sbomify.com/CVE-2017-12836/): Command injection in canonical:ubuntu linux (high 7.5) - [CVE-2017-1283](https://insights.sbomify.com/CVE-2017-1283/): Denial of service in MQ (medium 4.3) - [CVE-2017-12824](https://insights.sbomify.com/CVE-2017-12824/): Memory corruption in InPage reader (high 7.8) - [CVE-2017-12823](https://insights.sbomify.com/CVE-2017-12823/): Memory corruption in Kaspersky Embedded Systems Security (high 7.8) - [CVE-2017-12822](https://insights.sbomify.com/CVE-2017-12822/): Auth bypass in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE (critical 9.9) - [CVE-2017-12821](https://insights.sbomify.com/CVE-2017-12821/): Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE (critical 9.8) - [CVE-2017-12820](https://insights.sbomify.com/CVE-2017-12820/): Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/112/