# Vulnerabilities published in 2017


- [CVE-2017-11179](https://insights.sbomify.com/CVE-2017-11179/): Cross-site scripting in finecms project:finecms (medium 6.1)
- [CVE-2017-11178](https://insights.sbomify.com/CVE-2017-11178/): File upload in finecms project:finecms (high 7.5)
- [CVE-2017-11177](https://insights.sbomify.com/CVE-2017-11177/): Missing authorization in websense:triton ap email (high 7.5)
- [CVE-2017-11176](https://insights.sbomify.com/CVE-2017-11176/): Use after free in debian:debian linux (high 7.8)
- [CVE-2017-11175](https://insights.sbomify.com/CVE-2017-11175/): Cross-site scripting in siemens:fin stack (medium 6.1)
- [CVE-2017-11174](https://insights.sbomify.com/CVE-2017-11174/): SQL injection in xoops:xoops (critical 9.8)
- [CVE-2017-11173](https://insights.sbomify.com/CVE-2017-11173/): Missing Regex anchor in Rack-Cors allows malicious third party site to perform CORS request (high 8.8)
- [CVE-2017-11171](https://insights.sbomify.com/CVE-2017-11171/): Denial of service in gnome:gnome-session (medium 5.5)
- [CVE-2017-11170](https://insights.sbomify.com/CVE-2017-11170/): Denial of service in imagemagick:imagemagick (high 8.8)
- [CVE-2017-1117](https://insights.sbomify.com/CVE-2017-1117/): Denial of service in MQ (medium 5.3)
- [CVE-2017-11169](https://insights.sbomify.com/CVE-2017-11169/): Privilege escalation in iball:ib-wra300n3gt firmware (high 8.8)
- [CVE-2017-11167](https://insights.sbomify.com/CVE-2017-11167/): Code injection in finecms project:finecms (critical 9.8)
- [CVE-2017-11166](https://insights.sbomify.com/CVE-2017-11166/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11165](https://insights.sbomify.com/CVE-2017-11165/): Information disclosure in thermofisher:dt80 dex firmware (critical 9.8)
- [CVE-2017-11164](https://insights.sbomify.com/CVE-2017-11164/): Denial of service in pcre:pcre (high 7.5)
- [CVE-2017-11163](https://insights.sbomify.com/CVE-2017-11163/): Cross-site scripting in cacti:cacti (medium 5.4)
- [CVE-2017-11162](https://insights.sbomify.com/CVE-2017-11162/): Path traversal in Synology Photo Station (medium 6.5)
- [CVE-2017-11161](https://insights.sbomify.com/CVE-2017-11161/): SQL injection in Synology Photo Station (critical 9.8)
- [CVE-2017-11160](https://insights.sbomify.com/CVE-2017-11160/): Other in synology:assistant (high 7.8)
- [CVE-2017-1116](https://insights.sbomify.com/CVE-2017-1116/): Information disclosure in Campaign (medium 4.3)
- [CVE-2017-11159](https://insights.sbomify.com/CVE-2017-11159/): Other in Photo Station Uploader (high 7.8)
- [CVE-2017-11158](https://insights.sbomify.com/CVE-2017-11158/): Other in Cloud Station Drive (high 7.8)
- [CVE-2017-11157](https://insights.sbomify.com/CVE-2017-11157/): Other in synology:cloud station backup (high 7.8)
- [CVE-2017-11156](https://insights.sbomify.com/CVE-2017-11156/): Misconfiguration in Synology Download Station (high 7.8)
- [CVE-2017-11155](https://insights.sbomify.com/CVE-2017-11155/): Information disclosure in Synology Photo Station (high 7.5)
- [CVE-2017-11154](https://insights.sbomify.com/CVE-2017-11154/): File upload in Synology Photo Station (high 7.2)
- [CVE-2017-11153](https://insights.sbomify.com/CVE-2017-11153/): Deserialization in Synology Photo Station (critical 9.8)
- [CVE-2017-11152](https://insights.sbomify.com/CVE-2017-11152/): Path traversal in Synology Photo Station (high 7.5)
- [CVE-2017-11151](https://insights.sbomify.com/CVE-2017-11151/): File upload in Synology Photo Station (critical 9.8)
- [CVE-2017-11150](https://insights.sbomify.com/CVE-2017-11150/): Command injection in synology:office (high 7.8)
- [CVE-2017-1115](https://insights.sbomify.com/CVE-2017-1115/): Cross-site scripting in Campaign (medium 5.4)
- [CVE-2017-11149](https://insights.sbomify.com/CVE-2017-11149/): Server-side request forgery in Synology Download Station (medium 6.5)
- [CVE-2017-11148](https://insights.sbomify.com/CVE-2017-11148/): Server-side request forgery in Synology Chat (medium 6.5)
- [CVE-2017-11147](https://insights.sbomify.com/CVE-2017-11147/): Memory corruption in netapp:clustered data ontap (critical 9.1)
- [CVE-2017-11145](https://insights.sbomify.com/CVE-2017-11145/): Information disclosure in php:php (high 7.5)
- [CVE-2017-11144](https://insights.sbomify.com/CVE-2017-11144/): Denial of service in php:php (high 7.5)
- [CVE-2017-11143](https://insights.sbomify.com/CVE-2017-11143/): Deserialization in php:php (high 7.5)
- [CVE-2017-11142](https://insights.sbomify.com/CVE-2017-11142/): Denial of service in php:php (high 7.5)
- [CVE-2017-11141](https://insights.sbomify.com/CVE-2017-11141/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11140](https://insights.sbomify.com/CVE-2017-11140/): Denial of service in graphicsmagick:graphicsmagick (medium 5.5)
- [CVE-2017-1114](https://insights.sbomify.com/CVE-2017-1114/): Cross-site scripting in Campaign (medium 5.4)
- [CVE-2017-11139](https://insights.sbomify.com/CVE-2017-11139/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2017-11136](https://insights.sbomify.com/CVE-2017-11136/): Weak cryptography in stashcat:heinekingmedia (medium 6.5)
- [CVE-2017-11135](https://insights.sbomify.com/CVE-2017-11135/): Missing authorization in stashcat:heinekingmedia (high 7.5)
- [CVE-2017-11134](https://insights.sbomify.com/CVE-2017-11134/): Information disclosure in stashcat:heinekingmedia (medium 6.5)
- [CVE-2017-11133](https://insights.sbomify.com/CVE-2017-11133/): Weak cryptography in stashcat:heinekingmedia (high 7.5)
- [CVE-2017-11132](https://insights.sbomify.com/CVE-2017-11132/): Security feature bypass in heinekingmedia:stashcat (high 7.5)
- [CVE-2017-11131](https://insights.sbomify.com/CVE-2017-11131/): Weak cryptography in stashcat:heinekingmedia (medium 5.9)
- [CVE-2017-11130](https://insights.sbomify.com/CVE-2017-11130/): Security feature bypass in stashcat:heinekingmedia (high 8.1)
- [CVE-2017-1113](https://insights.sbomify.com/CVE-2017-1113/): Cross-site scripting in Rational Team Concert (medium 5.4)
- [CVE-2017-11129](https://insights.sbomify.com/CVE-2017-11129/): Hardcoded credentials in stashcat:heinekingmedia (critical 9.8)
- [CVE-2017-11128](https://insights.sbomify.com/CVE-2017-11128/): Bolt stored Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2017-11127](https://insights.sbomify.com/CVE-2017-11127/): Bolt CMS Stored XSS (medium 5.4)
- [CVE-2017-11126](https://insights.sbomify.com/CVE-2017-11126/): Memory corruption in mpg123:mpg123 (medium 5.5)
- [CVE-2017-11125](https://insights.sbomify.com/CVE-2017-11125/): Null dereference in xar project:xar (critical 9.8)
- [CVE-2017-11124](https://insights.sbomify.com/CVE-2017-11124/): Null dereference in xar project:xar (critical 9.8)
- [CVE-2017-11122](https://insights.sbomify.com/CVE-2017-11122/): Information disclosure in apple:iphone os (high 7.5)
- [CVE-2017-11121](https://insights.sbomify.com/CVE-2017-11121/): Memory corruption in apple:iphone os (critical 9.8)
- [CVE-2017-11120](https://insights.sbomify.com/CVE-2017-11120/): Memory corruption in apple:iphone os (critical 9.8)
- [CVE-2017-11119](https://insights.sbomify.com/CVE-2017-11119/): Memory corruption in nosefart project:nosefart (medium 5.5)
- [CVE-2017-11118](https://insights.sbomify.com/CVE-2017-11118/): Denial of service in openexif project:openexif (medium 5.5)
- [CVE-2017-11117](https://insights.sbomify.com/CVE-2017-11117/): Memory corruption in openexif project:openexif (medium 5.5)
- [CVE-2017-11116](https://insights.sbomify.com/CVE-2017-11116/): Memory corruption in openexif project:openexif (high 7.8)
- [CVE-2017-11115](https://insights.sbomify.com/CVE-2017-11115/): Memory corruption in openexif project:openexif (medium 5.5)
- [CVE-2017-11114](https://insights.sbomify.com/CVE-2017-11114/): Memory corruption in twibright:links (medium 5.5)
- [CVE-2017-11113](https://insights.sbomify.com/CVE-2017-11113/): Null dereference in invisible-island:ncurses (high 7.5)
- [CVE-2017-11112](https://insights.sbomify.com/CVE-2017-11112/): Memory corruption in invisible-island:ncurses (high 7.5)
- [CVE-2017-11111](https://insights.sbomify.com/CVE-2017-11111/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2017-11110](https://insights.sbomify.com/CVE-2017-11110/): Memory corruption in fossies:catdoc (high 7.8)
- [CVE-2017-11109](https://insights.sbomify.com/CVE-2017-11109/): Use after free in vim:vim (high 7.8)
- [CVE-2017-11108](https://insights.sbomify.com/CVE-2017-11108/): Memory corruption in tcpdump:tcpdump (high 7.5)
- [CVE-2017-11107](https://insights.sbomify.com/CVE-2017-11107/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2017-11105](https://insights.sbomify.com/CVE-2017-11105/): Security feature bypass in oneplus:primary bootloader (critical 9.8)
- [CVE-2017-11104](https://insights.sbomify.com/CVE-2017-11104/): Auth bypass in debian:debian linux (medium 5.9)
- [CVE-2017-11103](https://insights.sbomify.com/CVE-2017-11103/): Security feature bypass in apple:iphone os (high 8.1)
- [CVE-2017-11102](https://insights.sbomify.com/CVE-2017-11102/): Denial of service in graphicsmagick:graphicsmagick (high 7.5)
- [CVE-2017-11101](https://insights.sbomify.com/CVE-2017-11101/): Null dereference in swftools:swftools (high 8.8)
- [CVE-2017-11100](https://insights.sbomify.com/CVE-2017-11100/): Null dereference in swftools:swftools (high 8.8)
- [CVE-2017-1110](https://insights.sbomify.com/CVE-2017-1110/): Information disclosure in Cram Social Program Management (medium 6.5)
- [CVE-2017-11099](https://insights.sbomify.com/CVE-2017-11099/): Memory corruption in swftools:swftools (high 8.8)
- [CVE-2017-11098](https://insights.sbomify.com/CVE-2017-11098/): Memory corruption in swftools:swftools (high 8.8)
- [CVE-2017-11097](https://insights.sbomify.com/CVE-2017-11097/): Null dereference in swftools:swftools (high 8.8)
- [CVE-2017-11096](https://insights.sbomify.com/CVE-2017-11096/): Null dereference in swftools:swftools (high 8.8)
- [CVE-2017-11093](https://insights.sbomify.com/CVE-2017-11093/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.5)
- [CVE-2017-11092](https://insights.sbomify.com/CVE-2017-11092/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-11091](https://insights.sbomify.com/CVE-2017-11091/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-11090](https://insights.sbomify.com/CVE-2017-11090/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.5)
- [CVE-2017-11089](https://insights.sbomify.com/CVE-2017-11089/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.5)
- [CVE-2017-11088](https://insights.sbomify.com/CVE-2017-11088/): SQL injection in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-11087](https://insights.sbomify.com/CVE-2017-11087/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (high 7.5)
- [CVE-2017-11085](https://insights.sbomify.com/CVE-2017-11085/): Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-11082](https://insights.sbomify.com/CVE-2017-11082/): Race condition in google:android (high 7.0)
- [CVE-2017-11081](https://insights.sbomify.com/CVE-2017-11081/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-11080](https://insights.sbomify.com/CVE-2017-11080/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-11079](https://insights.sbomify.com/CVE-2017-11079/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-11078](https://insights.sbomify.com/CVE-2017-11078/): Memory corruption in google:android (high 7.8)
- [CVE-2017-11076](https://insights.sbomify.com/CVE-2017-11076/): Use of Out-of-range Pointer Offset in Video (high 8.8)
- [CVE-2017-11075](https://insights.sbomify.com/CVE-2017-11075/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-11074](https://insights.sbomify.com/CVE-2017-11074/): Other in google:android (high 7.8)
- [CVE-2017-11073](https://insights.sbomify.com/CVE-2017-11073/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/127/