# Vulnerabilities published in 2017


- [CVE-2017-12702](https://insights.sbomify.com/CVE-2017-12702/): Memory corruption in Advantech WebAccess (high 8.8)
- [CVE-2017-12701](https://insights.sbomify.com/CVE-2017-12701/): Denial of service in Luna CPAP Machine (medium 6.5)
- [CVE-2017-1270](https://insights.sbomify.com/CVE-2017-1270/): Auth bypass in Security Guardium (low 3.3)
- [CVE-2017-12699](https://insights.sbomify.com/CVE-2017-12699/): Misconfiguration in AzeoTech DAQFactory (high 7.1)
- [CVE-2017-12698](https://insights.sbomify.com/CVE-2017-12698/): Auth bypass in Advantech WebAccess (critical 9.8)
- [CVE-2017-12697](https://insights.sbomify.com/CVE-2017-12697/): Information disclosure in General Motors and Shanghai OnStar (SOS) iOS Client (medium 5.9)
- [CVE-2017-12695](https://insights.sbomify.com/CVE-2017-12695/): Auth bypass in General Motors and Shanghai OnStar (SOS) iOS Client (high 8.8)
- [CVE-2017-12694](https://insights.sbomify.com/CVE-2017-12694/): Path traversal in SpiderControl SCADA Web Server (high 7.5)
- [CVE-2017-12693](https://insights.sbomify.com/CVE-2017-12693/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-12692](https://insights.sbomify.com/CVE-2017-12692/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-12691](https://insights.sbomify.com/CVE-2017-12691/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-1269](https://insights.sbomify.com/CVE-2017-1269/): SQL injection in Security Guardium (critical 9.8)
- [CVE-2017-12680](https://insights.sbomify.com/CVE-2017-12680/): Cross-site scripting in nexusphp project:nexusphp (medium 6.1)
- [CVE-2017-1268](https://insights.sbomify.com/CVE-2017-1268/): Weak cryptography in Security Guardium (medium 5.9)
- [CVE-2017-12679](https://insights.sbomify.com/CVE-2017-12679/): SQL injection in nexusphp:nexusphp (critical 9.8)
- [CVE-2017-12678](https://insights.sbomify.com/CVE-2017-12678/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2017-12677](https://insights.sbomify.com/CVE-2017-12677/): Cross-site scripting in identityserver:identityserver3 (medium 6.1)
- [CVE-2017-12676](https://insights.sbomify.com/CVE-2017-12676/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-12675](https://insights.sbomify.com/CVE-2017-12675/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-12674](https://insights.sbomify.com/CVE-2017-12674/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-12673](https://insights.sbomify.com/CVE-2017-12673/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-12672](https://insights.sbomify.com/CVE-2017-12672/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-12671](https://insights.sbomify.com/CVE-2017-12671/): Null dereference in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-12670](https://insights.sbomify.com/CVE-2017-12670/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-1267](https://insights.sbomify.com/CVE-2017-1267/): Security feature bypass in Security Guardium (high 7.5)
- [CVE-2017-12669](https://insights.sbomify.com/CVE-2017-12669/): Denial of service in imagemagick:imagemagick (high 8.8)
- [CVE-2017-12668](https://insights.sbomify.com/CVE-2017-12668/): Denial of service in imagemagick:imagemagick (high 8.8)
- [CVE-2017-12667](https://insights.sbomify.com/CVE-2017-12667/): Denial of service in imagemagick:imagemagick (high 8.8)
- [CVE-2017-12666](https://insights.sbomify.com/CVE-2017-12666/): Denial of service in imagemagick:imagemagick (high 8.8)
- [CVE-2017-12665](https://insights.sbomify.com/CVE-2017-12665/): Denial of service in imagemagick:imagemagick (high 8.8)
- [CVE-2017-12664](https://insights.sbomify.com/CVE-2017-12664/): Denial of service in imagemagick:imagemagick (high 8.8)
- [CVE-2017-12663](https://insights.sbomify.com/CVE-2017-12663/): Denial of service in imagemagick:imagemagick (high 8.8)
- [CVE-2017-12662](https://insights.sbomify.com/CVE-2017-12662/): Denial of service in imagemagick:imagemagick (high 8.8)
- [CVE-2017-1266](https://insights.sbomify.com/CVE-2017-1266/): Misconfiguration in Security Guardium (medium 5.4)
- [CVE-2017-12655](https://insights.sbomify.com/CVE-2017-12655/): Cross-site scripting in nexusphp project:nexusphp (medium 6.1)
- [CVE-2017-12654](https://insights.sbomify.com/CVE-2017-12654/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-12653](https://insights.sbomify.com/CVE-2017-12653/): Privilege escalation in 360totalsecurity:360 total security (high 7.8)
- [CVE-2017-12652](https://insights.sbomify.com/CVE-2017-12652/): Memory corruption in libpng:libpng (critical 9.8)
- [CVE-2017-12651](https://insights.sbomify.com/CVE-2017-12651/): Cross-site request forgery in loginizer:loginizer (high 8.8)
- [CVE-2017-12650](https://insights.sbomify.com/CVE-2017-12650/): SQL injection in loginizer:loginizer (critical 9.8)
- [CVE-2017-1265](https://insights.sbomify.com/CVE-2017-1265/): Security feature bypass in Security Guardium (low 3.7)
- [CVE-2017-12649](https://insights.sbomify.com/CVE-2017-12649/): Liferay Portal Vulnerable to XSS via Mishandled Title or Summary in the Web Content Display (medium 6.1)
- [CVE-2017-12648](https://insights.sbomify.com/CVE-2017-12648/): Liferay Portal XSS Vulnerability (medium 6.1)
- [CVE-2017-12647](https://insights.sbomify.com/CVE-2017-12647/): Liferay Portal Vulnerable to XSS via a Knowledge Base Article Title (medium 6.1)
- [CVE-2017-12646](https://insights.sbomify.com/CVE-2017-12646/): Liferay Portal XSS Vulnerability (medium 6.1)
- [CVE-2017-12645](https://insights.sbomify.com/CVE-2017-12645/): Liferay Portal Vulnerable to XSS via an Invalid portletId (medium 6.1)
- [CVE-2017-12644](https://insights.sbomify.com/CVE-2017-12644/): Denial of service in imagemagick:imagemagick (high 8.8)
- [CVE-2017-12643](https://insights.sbomify.com/CVE-2017-12643/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2017-12642](https://insights.sbomify.com/CVE-2017-12642/): Denial of service in imagemagick:imagemagick (high 8.8)
- [CVE-2017-12641](https://insights.sbomify.com/CVE-2017-12641/): Denial of service in imagemagick:imagemagick (high 8.8)
- [CVE-2017-12640](https://insights.sbomify.com/CVE-2017-12640/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2017-1264](https://insights.sbomify.com/CVE-2017-1264/): Auth bypass in Security Guardium (high 7.5)
- [CVE-2017-12639](https://insights.sbomify.com/CVE-2017-12639/): Memory corruption in ipswitch:imail server (critical 9.8)
- [CVE-2017-12638](https://insights.sbomify.com/CVE-2017-12638/): Memory corruption in ipswitch:imail server (critical 9.8)
- [CVE-2017-12637](https://insights.sbomify.com/CVE-2017-12637/): SAP NetWeaver Directory Traversal (high 7.5, exploited in the wild)
- [CVE-2017-12636](https://insights.sbomify.com/CVE-2017-12636/): Command injection in Apache CouchDB (high 7.2)
- [CVE-2017-12635](https://insights.sbomify.com/CVE-2017-12635/): Privilege escalation in Apache CouchDB (critical 9.8)
- [CVE-2017-12634](https://insights.sbomify.com/CVE-2017-12634/): Camel-castor component in Apache Camel is vulnerable to Java object de-serialisation (critical 9.8)
- [CVE-2017-12633](https://insights.sbomify.com/CVE-2017-12633/): Apache Camel camel-hessian component vulnerable to Java object deserialization (critical 9.8)
- [CVE-2017-12632](https://insights.sbomify.com/CVE-2017-12632/): Apache NiFi host header poisoning issue (high 7.5)
- [CVE-2017-12631](https://insights.sbomify.com/CVE-2017-12631/): Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3 (high 8.8)
- [CVE-2017-12630](https://insights.sbomify.com/CVE-2017-12630/): Apache Drill vulnerable to Cross-site Scripting (medium 5.4)
- [CVE-2017-12629](https://insights.sbomify.com/CVE-2017-12629/): Remote code execution occurs in Apache Solr (critical 9.8)
- [CVE-2017-12628](https://insights.sbomify.com/CVE-2017-12628/): Apache James Privilege Escalation (high 7.8)
- [CVE-2017-12627](https://insights.sbomify.com/CVE-2017-12627/): Null dereference in Apache Xerces C++ (critical 9.8)
- [CVE-2017-12626](https://insights.sbomify.com/CVE-2017-12626/): Denial of Service in Apache POI (high 7.5)
- [CVE-2017-12625](https://insights.sbomify.com/CVE-2017-12625/): Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service (medium 4.3)
- [CVE-2017-12624](https://insights.sbomify.com/CVE-2017-12624/): Improper Input Validation in Apache CXF (medium 5.5)
- [CVE-2017-12623](https://insights.sbomify.com/CVE-2017-12623/): XML External Entity Reference in Apache NiFi (medium 6.5)
- [CVE-2017-12622](https://insights.sbomify.com/CVE-2017-12622/): Apache Geode gfsh authorization vulnerability (high 7.1)
- [CVE-2017-12621](https://insights.sbomify.com/CVE-2017-12621/): Improper Restriction of XML External Entity Reference in Jelly (critical 9.8)
- [CVE-2017-12620](https://insights.sbomify.com/CVE-2017-12620/): Improper Restriction of XML External Entity Reference in Apache OpenNLP (critical 9.8)
- [CVE-2017-1262](https://insights.sbomify.com/CVE-2017-1262/): Other in Security Guardium (medium 6.1)
- [CVE-2017-12619](https://insights.sbomify.com/CVE-2017-12619/): Session Fixation in Apache Zeppelin (high 8.1)
- [CVE-2017-12618](https://insights.sbomify.com/CVE-2017-12618/): Memory corruption in Apache Portable Runtime (medium 4.7)
- [CVE-2017-12617](https://insights.sbomify.com/CVE-2017-12617/): Apache Tomcat Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2017-12616](https://insights.sbomify.com/CVE-2017-12616/): Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat (high 7.5)
- [CVE-2017-12615](https://insights.sbomify.com/CVE-2017-12615/): Apache Tomcat on Windows Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2017-12614](https://insights.sbomify.com/CVE-2017-12614/): Apache Airflow Reflected Cross-site Scripting vulnerability in 404 Endpoint (medium 6.1)
- [CVE-2017-12613](https://insights.sbomify.com/CVE-2017-12613/): Memory corruption in Apache Portable Runtime (high 7.1)
- [CVE-2017-12612](https://insights.sbomify.com/CVE-2017-12612/): Apache Spark Deserialization of Untrusted Data vulnerability (high 7.8)
- [CVE-2017-12611](https://insights.sbomify.com/CVE-2017-12611/): Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal (critical 9.8)
- [CVE-2017-12610](https://insights.sbomify.com/CVE-2017-12610/): Improper Authentication in Apache Kafka (medium 6.8)
- [CVE-2017-1261](https://insights.sbomify.com/CVE-2017-1261/): Information disclosure in Security Guardium (low 3.3)
- [CVE-2017-12608](https://insights.sbomify.com/CVE-2017-12608/): Memory corruption in Apache OpenOffice (high 7.8)
- [CVE-2017-12607](https://insights.sbomify.com/CVE-2017-12607/): Memory corruption in Apache OpenOffice (high 7.8)
- [CVE-2017-12606](https://insights.sbomify.com/CVE-2017-12606/): Out-of-bounds Write in OpenCV (high 8.8)
- [CVE-2017-12605](https://insights.sbomify.com/CVE-2017-12605/): Out-of-bounds Write in OpenCV (high 8.8)
- [CVE-2017-12604](https://insights.sbomify.com/CVE-2017-12604/): Out-of-bounds Write in OpenCV (high 8.8)
- [CVE-2017-12603](https://insights.sbomify.com/CVE-2017-12603/): Out-of-bounds Write in OpenCV (high 8.8)
- [CVE-2017-12602](https://insights.sbomify.com/CVE-2017-12602/): Denial of Service in OpenCV (high 7.5)
- [CVE-2017-12601](https://insights.sbomify.com/CVE-2017-12601/): Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV (high 8.8)
- [CVE-2017-12600](https://insights.sbomify.com/CVE-2017-12600/): Denial of Service in OpenCV (high 7.5)
- [CVE-2017-12599](https://insights.sbomify.com/CVE-2017-12599/): Out-of-bounds Read in OpenCV (high 8.8)
- [CVE-2017-12598](https://insights.sbomify.com/CVE-2017-12598/): Out-of-bounds Read in OpenCV (high 8.8)
- [CVE-2017-12597](https://insights.sbomify.com/CVE-2017-12597/): Out-of-bounds Write in OpenCV (high 8.8)
- [CVE-2017-12596](https://insights.sbomify.com/CVE-2017-12596/): Memory corruption in openexr:openexr (high 7.8)
- [CVE-2017-12595](https://insights.sbomify.com/CVE-2017-12595/): Denial of service in qpdf project:qpdf (high 7.8)
- [CVE-2017-12593](https://insights.sbomify.com/CVE-2017-12593/): Cross-site request forgery in asus:dsl-n10s firmware (high 8.8)
- [CVE-2017-12592](https://insights.sbomify.com/CVE-2017-12592/): Privilege escalation in asus:dsl-n10s firmware (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/114/