# Vulnerabilities published in 2017


- [CVE-2017-12166](https://insights.sbomify.com/CVE-2017-12166/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2017-12165](https://insights.sbomify.com/CVE-2017-12165/): Undertow Request Smuggling vulnerability (low 2.6)
- [CVE-2017-12164](https://insights.sbomify.com/CVE-2017-12164/): Auth bypass in gdm (medium 4.1)
- [CVE-2017-12163](https://insights.sbomify.com/CVE-2017-12163/): Information disclosure in Samba (medium 4.1)
- [CVE-2017-12161](https://insights.sbomify.com/CVE-2017-12161/): Moderate severity vulnerability that affects org.keycloak:keycloak-core (high 8.8)
- [CVE-2017-12160](https://insights.sbomify.com/CVE-2017-12160/): Keycloak Oauth Implementation Error (high 7.2)
- [CVE-2017-12159](https://insights.sbomify.com/CVE-2017-12159/): Keycloak CSRF Vulnerability (high 7.5)
- [CVE-2017-12158](https://insights.sbomify.com/CVE-2017-12158/): Keycloak Reflected XSS (medium 5.4)
- [CVE-2017-12157](https://insights.sbomify.com/CVE-2017-12157/): Moodle sensitive information disclosure (medium 4.3)
- [CVE-2017-12156](https://insights.sbomify.com/CVE-2017-12156/): Moodle XSS Vulnerability (medium 6.1)
- [CVE-2017-12155](https://insights.sbomify.com/CVE-2017-12155/): Openstack tripleo-heat-templates unauthenticated file access (medium 6.3)
- [CVE-2017-12154](https://insights.sbomify.com/CVE-2017-12154/): Privilege escalation in Linux kernel through 4.13.3 (high 7.1)
- [CVE-2017-12153](https://insights.sbomify.com/CVE-2017-12153/): Null dereference in kernel since v3.1-rc1 through v4.13 (medium 4.4)
- [CVE-2017-12151](https://insights.sbomify.com/CVE-2017-12151/): Weak cryptography in samba (high 7.4)
- [CVE-2017-12150](https://insights.sbomify.com/CVE-2017-12150/): Security feature bypass in samba (high 7.4)
- [CVE-2017-12149](https://insights.sbomify.com/CVE-2017-12149/): Red Hat JBoss Application Server Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-12148](https://insights.sbomify.com/CVE-2017-12148/): Code injection in Ansible Tower (high 8.4)
- [CVE-2017-12146](https://insights.sbomify.com/CVE-2017-12146/): Race condition in linux:linux kernel (high 7.0)
- [CVE-2017-12145](https://insights.sbomify.com/CVE-2017-12145/): Denial of service in libquicktime:libquicktime (medium 6.5)
- [CVE-2017-12144](https://insights.sbomify.com/CVE-2017-12144/): Denial of service in ytnef project:ytnef (medium 5.5)
- [CVE-2017-12143](https://insights.sbomify.com/CVE-2017-12143/): Denial of service in libquicktime:libquicktime (medium 6.5)
- [CVE-2017-12142](https://insights.sbomify.com/CVE-2017-12142/): Memory corruption in ytnef project:ytnef (medium 5.5)
- [CVE-2017-12141](https://insights.sbomify.com/CVE-2017-12141/): Memory corruption in ytnef project:ytnef (medium 5.5)
- [CVE-2017-12140](https://insights.sbomify.com/CVE-2017-12140/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-1214](https://insights.sbomify.com/CVE-2017-1214/): Information disclosure in iNotes (medium 5.7)
- [CVE-2017-12139](https://insights.sbomify.com/CVE-2017-12139/): Cross-site scripting in xoops:xoops (medium 6.1)
- [CVE-2017-12138](https://insights.sbomify.com/CVE-2017-12138/): Open redirect in xoops:xoops (medium 6.1)
- [CVE-2017-12137](https://insights.sbomify.com/CVE-2017-12137/): Memory corruption in citrix:xenserver (high 8.8)
- [CVE-2017-12136](https://insights.sbomify.com/CVE-2017-12136/): Race condition in citrix:xenserver (high 7.8)
- [CVE-2017-12135](https://insights.sbomify.com/CVE-2017-12135/): Memory corruption in citrix:xenserver (high 8.8)
- [CVE-2017-12134](https://insights.sbomify.com/CVE-2017-12134/): Memory corruption in citrix:xenserver (high 8.8)
- [CVE-2017-12133](https://insights.sbomify.com/CVE-2017-12133/): Use after free in gnu:glibc (medium 5.9)
- [CVE-2017-12132](https://insights.sbomify.com/CVE-2017-12132/): Denial of service in gnu:glibc (medium 5.9)
- [CVE-2017-12131](https://insights.sbomify.com/CVE-2017-12131/): Cross-site scripting in goldplugins:easy testimonials (medium 6.1)
- [CVE-2017-12130](https://insights.sbomify.com/CVE-2017-12130/): Null dereference in Tinysvcmdns (high 7.5)
- [CVE-2017-12129](https://insights.sbomify.com/CVE-2017-12129/): Weak cryptography in Moxa (low 3.5)
- [CVE-2017-12128](https://insights.sbomify.com/CVE-2017-12128/): Information disclosure in Moxa (medium 5.3)
- [CVE-2017-12127](https://insights.sbomify.com/CVE-2017-12127/): Information disclosure in Moxa (medium 4.4)
- [CVE-2017-12126](https://insights.sbomify.com/CVE-2017-12126/): Cross-site request forgery in Moxa (high 8.8)
- [CVE-2017-12125](https://insights.sbomify.com/CVE-2017-12125/): Command injection in Moxa (high 8.8)
- [CVE-2017-12124](https://insights.sbomify.com/CVE-2017-12124/): Null dereference in Moxa (high 7.5)
- [CVE-2017-12123](https://insights.sbomify.com/CVE-2017-12123/): Information disclosure in Moxa (medium 5.7)
- [CVE-2017-12122](https://insights.sbomify.com/CVE-2017-12122/): Memory corruption in Simple DirectMedia Layer (high 8.8)
- [CVE-2017-12121](https://insights.sbomify.com/CVE-2017-12121/): Command injection in Moxa (high 8.8)
- [CVE-2017-12120](https://insights.sbomify.com/CVE-2017-12120/): Command injection in Moxa (high 8.8)
- [CVE-2017-1212](https://insights.sbomify.com/CVE-2017-1212/): Denial of service in Daeja ViewONE (medium 6.5)
- [CVE-2017-12119](https://insights.sbomify.com/CVE-2017-12119/): Denial of service in CPP-Ethereum (high 7.5)
- [CVE-2017-12118](https://insights.sbomify.com/CVE-2017-12118/): Missing authorization in CPP-Ethereum (medium 4.0)
- [CVE-2017-12117](https://insights.sbomify.com/CVE-2017-12117/): Missing authorization in CPP-Ethereum (medium 4.0)
- [CVE-2017-12116](https://insights.sbomify.com/CVE-2017-12116/): Missing authorization in CPP-Ethereum (medium 6.8)
- [CVE-2017-12115](https://insights.sbomify.com/CVE-2017-12115/): Missing authorization in CPP-Ethereum (medium 6.8)
- [CVE-2017-12114](https://insights.sbomify.com/CVE-2017-12114/): Missing authorization in CPP-Ethereum (medium 4.0)
- [CVE-2017-12113](https://insights.sbomify.com/CVE-2017-12113/): Missing authorization in CPP-Ethereum (medium 4.0)
- [CVE-2017-12112](https://insights.sbomify.com/CVE-2017-12112/): Missing authorization in CPP-Ethereum (medium 4.0)
- [CVE-2017-12111](https://insights.sbomify.com/CVE-2017-12111/): Memory corruption in libxls (high 8.8)
- [CVE-2017-12110](https://insights.sbomify.com/CVE-2017-12110/): Integer overflow in libxls (high 8.8)
- [CVE-2017-1211](https://insights.sbomify.com/CVE-2017-1211/): Information disclosure in Daeja ViewONE (low 2.5)
- [CVE-2017-12109](https://insights.sbomify.com/CVE-2017-12109/): Integer overflow in libxls (high 8.8)
- [CVE-2017-12108](https://insights.sbomify.com/CVE-2017-12108/): Integer overflow in libxls (high 8.8)
- [CVE-2017-12107](https://insights.sbomify.com/CVE-2017-12107/): Memory corruption in Photoline (high 8.8)
- [CVE-2017-12106](https://insights.sbomify.com/CVE-2017-12106/): Memory corruption in Computerinsel Photoline (high 8.8)
- [CVE-2017-12105](https://insights.sbomify.com/CVE-2017-12105/): Integer overflow in Blender (high 8.8)
- [CVE-2017-12104](https://insights.sbomify.com/CVE-2017-12104/): Integer overflow in Blender (high 8.8)
- [CVE-2017-12103](https://insights.sbomify.com/CVE-2017-12103/): Integer overflow in Blender (high 8.8)
- [CVE-2017-12102](https://insights.sbomify.com/CVE-2017-12102/): Integer overflow in Blender (high 8.8)
- [CVE-2017-12101](https://insights.sbomify.com/CVE-2017-12101/): Integer overflow in Blender (high 8.8)
- [CVE-2017-12100](https://insights.sbomify.com/CVE-2017-12100/): Integer overflow in Blender (high 8.8)
- [CVE-2017-1210](https://insights.sbomify.com/CVE-2017-1210/): Other in Daeja ViewONE (high 7.5)
- [CVE-2017-12099](https://insights.sbomify.com/CVE-2017-12099/): Integer overflow in Blender (high 8.8)
- [CVE-2017-12098](https://insights.sbomify.com/CVE-2017-12098/): rails_admin ruby gem XSS (medium 6.1)
- [CVE-2017-12097](https://insights.sbomify.com/CVE-2017-12097/): delayed_job_web Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2017-12096](https://insights.sbomify.com/CVE-2017-12096/): Auth bypass in Circle (medium 6.5)
- [CVE-2017-12095](https://insights.sbomify.com/CVE-2017-12095/): Auth bypass in Circle (medium 6.5)
- [CVE-2017-12094](https://insights.sbomify.com/CVE-2017-12094/): Command injection in Circle (high 7.4)
- [CVE-2017-12093](https://insights.sbomify.com/CVE-2017-12093/): Denial of service in Allen Bradley (medium 5.3)
- [CVE-2017-12092](https://insights.sbomify.com/CVE-2017-12092/): Missing authorization in Allen Bradley (low 3.7)
- [CVE-2017-12090](https://insights.sbomify.com/CVE-2017-12090/): Denial of service in Allen Bradley (high 7.7)
- [CVE-2017-1209](https://insights.sbomify.com/CVE-2017-1209/): Cross-site scripting in Daeja ViewONE (medium 5.4)
- [CVE-2017-12089](https://insights.sbomify.com/CVE-2017-12089/): Denial of service in Allen Bradley (high 8.6)
- [CVE-2017-12088](https://insights.sbomify.com/CVE-2017-12088/): Denial of service in Allen Bradley (high 8.6)
- [CVE-2017-12087](https://insights.sbomify.com/CVE-2017-12087/): Memory corruption in Tinysvcmdns (critical 10.0)
- [CVE-2017-12086](https://insights.sbomify.com/CVE-2017-12086/): Integer overflow in Blender (high 8.8)
- [CVE-2017-12085](https://insights.sbomify.com/CVE-2017-12085/): Other in Circle (critical 9.0)
- [CVE-2017-12084](https://insights.sbomify.com/CVE-2017-12084/): Missing authorization in Circle (high 8.0)
- [CVE-2017-12083](https://insights.sbomify.com/CVE-2017-12083/): Information disclosure in Circle (medium 5.8)
- [CVE-2017-12082](https://insights.sbomify.com/CVE-2017-12082/): Integer overflow in Blender (high 8.8)
- [CVE-2017-12081](https://insights.sbomify.com/CVE-2017-12081/): Integer overflow in Blender (high 8.8)
- [CVE-2017-12080](https://insights.sbomify.com/CVE-2017-12080/): Information disclosure in Photo Station (medium 5.3)
- [CVE-2017-1208](https://insights.sbomify.com/CVE-2017-1208/): Cross-site scripting in Maximo Asset Management (medium 5.4)
- [CVE-2017-12079](https://insights.sbomify.com/CVE-2017-12079/): Path traversal in Photo Station (high 7.5)
- [CVE-2017-12078](https://insights.sbomify.com/CVE-2017-12078/): Command injection in Synology Router Manager (SRM) (high 7.2)
- [CVE-2017-12077](https://insights.sbomify.com/CVE-2017-12077/): Denial of service in synology:router manager (medium 4.9)
- [CVE-2017-12076](https://insights.sbomify.com/CVE-2017-12076/): Denial of service in synology:diskstation manager (medium 4.9)
- [CVE-2017-12075](https://insights.sbomify.com/CVE-2017-12075/): Command injection in DiskStation Manager (DSM) (high 7.2)
- [CVE-2017-12074](https://insights.sbomify.com/CVE-2017-12074/): Path traversal in Synology DNS Server (medium 6.5)
- [CVE-2017-12072](https://insights.sbomify.com/CVE-2017-12072/): Cross-site scripting in Photo Station (medium 5.4)
- [CVE-2017-12071](https://insights.sbomify.com/CVE-2017-12071/): Server-side request forgery in Synology Photo Station (medium 6.5)
- [CVE-2017-12070](https://insights.sbomify.com/CVE-2017-12070/): Supply chain in opcfoundation:ua-.net-legacy (high 8.8)
- [CVE-2017-1207](https://insights.sbomify.com/CVE-2017-1207/): Information disclosure in Integration Bus (medium 5.5)
- [CVE-2017-12069](https://insights.sbomify.com/CVE-2017-12069/): XML external entity in ocpfoundation:local discovery server (high 8.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/119/