# Vulnerabilities published in 2017


- [CVE-2017-10967](https://insights.sbomify.com/CVE-2017-10967/): Cross-site scripting in finecms project:finecms (medium 6.1)
- [CVE-2017-10966](https://insights.sbomify.com/CVE-2017-10966/): Use after free in irssi:irssi (critical 9.8)
- [CVE-2017-10965](https://insights.sbomify.com/CVE-2017-10965/): Null dereference in irssi:irssi (critical 9.8)
- [CVE-2017-10963](https://insights.sbomify.com/CVE-2017-10963/): Security feature bypass in samsung:knox enterprise mobility management (medium 5.9)
- [CVE-2017-10962](https://insights.sbomify.com/CVE-2017-10962/): Cross-site scripting in vanderbilt:redcap (medium 6.1)
- [CVE-2017-10961](https://insights.sbomify.com/CVE-2017-10961/): Cross-site request forgery in vanderbilt:redcap (high 8.8)
- [CVE-2017-1096](https://insights.sbomify.com/CVE-2017-1096/): Cross-site scripting in Jazz Reporting Service (medium 5.4)
- [CVE-2017-10959](https://insights.sbomify.com/CVE-2017-10959/): Use after free in Foxit Reader (high 8.8)
- [CVE-2017-10958](https://insights.sbomify.com/CVE-2017-10958/): Use after free in Foxit Reader (high 8.8)
- [CVE-2017-10957](https://insights.sbomify.com/CVE-2017-10957/): Use after free in Foxit Reader (high 8.8)
- [CVE-2017-10956](https://insights.sbomify.com/CVE-2017-10956/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2017-10955](https://insights.sbomify.com/CVE-2017-10955/): Command injection in Dell EMC Data Protection Advisor (high 8.8)
- [CVE-2017-10954](https://insights.sbomify.com/CVE-2017-10954/): Integer overflow in Bitdefender Internet Security (high 8.8)
- [CVE-2017-10953](https://insights.sbomify.com/CVE-2017-10953/): Command injection in Foxit Reader (high 8.8)
- [CVE-2017-10952](https://insights.sbomify.com/CVE-2017-10952/): Code injection in Foxit Reader (high 8.8)
- [CVE-2017-10951](https://insights.sbomify.com/CVE-2017-10951/): Command injection in Foxit Reader (high 8.8)
- [CVE-2017-10950](https://insights.sbomify.com/CVE-2017-10950/): Use after free in Bitdefender Total Security (high 7.0)
- [CVE-2017-10949](https://insights.sbomify.com/CVE-2017-10949/): Path traversal in Dell Storage Manager (high 7.5)
- [CVE-2017-10948](https://insights.sbomify.com/CVE-2017-10948/): Use after free in Foxit Reader (high 8.8)
- [CVE-2017-10947](https://insights.sbomify.com/CVE-2017-10947/): Use after free in Foxit Reader (high 8.8)
- [CVE-2017-10946](https://insights.sbomify.com/CVE-2017-10946/): Use after free in Foxit Reader (high 8.8)
- [CVE-2017-10945](https://insights.sbomify.com/CVE-2017-10945/): Use after free in Foxit Reader (high 8.8)
- [CVE-2017-10944](https://insights.sbomify.com/CVE-2017-10944/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2017-10943](https://insights.sbomify.com/CVE-2017-10943/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2017-10942](https://insights.sbomify.com/CVE-2017-10942/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2017-10941](https://insights.sbomify.com/CVE-2017-10941/): Use after free in Foxit Reader (high 8.8)
- [CVE-2017-10940](https://insights.sbomify.com/CVE-2017-10940/): File upload in Joyent Smart Data Center (high 8.8)
- [CVE-2017-10937](https://insights.sbomify.com/CVE-2017-10937/): SQL injection in ZXIPTV-UCM (high 7.5)
- [CVE-2017-10936](https://insights.sbomify.com/CVE-2017-10936/): SQL injection in ZXCDN-SNS (high 7.5)
- [CVE-2017-10935](https://insights.sbomify.com/CVE-2017-10935/): Auth bypass in ZXR10 1800-2S (high 7.2)
- [CVE-2017-10934](https://insights.sbomify.com/CVE-2017-10934/): Deserialization in ZXIPTV-EPG (critical 9.8)
- [CVE-2017-10933](https://insights.sbomify.com/CVE-2017-10933/): Path traversal in ZXDT22 SF01 (high 7.5)
- [CVE-2017-10932](https://insights.sbomify.com/CVE-2017-10932/): Deserialization in NR8000 Series (critical 9.8)
- [CVE-2017-10931](https://insights.sbomify.com/CVE-2017-10931/): Path traversal in ZX10 1800-2S (high 7.5)
- [CVE-2017-10930](https://insights.sbomify.com/CVE-2017-10930/): Missing authorization in ZX10 1800-2S (critical 9.8)
- [CVE-2017-1093](https://insights.sbomify.com/CVE-2017-1093/): Privilege escalation in AIX (high 7.8)
- [CVE-2017-10929](https://insights.sbomify.com/CVE-2017-10929/): Memory corruption in radare:radare2 (high 7.8)
- [CVE-2017-10928](https://insights.sbomify.com/CVE-2017-10928/): Memory corruption in imagemagick:imagemagick (high 8.8)
- [CVE-2017-10926](https://insights.sbomify.com/CVE-2017-10926/): Memory corruption in irfanview:fpx (high 7.8)
- [CVE-2017-10925](https://insights.sbomify.com/CVE-2017-10925/): Memory corruption in irfanview:fpx (high 7.8)
- [CVE-2017-10924](https://insights.sbomify.com/CVE-2017-10924/): Memory corruption in irfanview:fpx (high 7.8)
- [CVE-2017-10923](https://insights.sbomify.com/CVE-2017-10923/): Denial of service in xen:xen (medium 6.5)
- [CVE-2017-10922](https://insights.sbomify.com/CVE-2017-10922/): Denial of service in xen:xen (high 7.5)
- [CVE-2017-10921](https://insights.sbomify.com/CVE-2017-10921/): Memory corruption in xen:xen (critical 10.0)
- [CVE-2017-10920](https://insights.sbomify.com/CVE-2017-10920/): Memory corruption in xen:xen (critical 10.0)
- [CVE-2017-1092](https://insights.sbomify.com/CVE-2017-1092/): Privilege escalation in Informix Servers (critical 9.8)
- [CVE-2017-10919](https://insights.sbomify.com/CVE-2017-10919/): Denial of service in xen:xen (medium 6.5)
- [CVE-2017-10918](https://insights.sbomify.com/CVE-2017-10918/): Privilege escalation in xen:xen (critical 10.0)
- [CVE-2017-10917](https://insights.sbomify.com/CVE-2017-10917/): Null dereference in xen:xen (critical 9.1)
- [CVE-2017-10916](https://insights.sbomify.com/CVE-2017-10916/): Security feature bypass in xen:xen (high 7.5)
- [CVE-2017-10915](https://insights.sbomify.com/CVE-2017-10915/): Race condition in xen:xen (critical 9.0)
- [CVE-2017-10914](https://insights.sbomify.com/CVE-2017-10914/): Race condition in xen:xen (high 8.1)
- [CVE-2017-10913](https://insights.sbomify.com/CVE-2017-10913/): Race condition in xen:xen (critical 9.8)
- [CVE-2017-10912](https://insights.sbomify.com/CVE-2017-10912/): Privilege escalation in xen:xen (critical 10.0)
- [CVE-2017-10911](https://insights.sbomify.com/CVE-2017-10911/): Information disclosure in linux:linux kernel (medium 6.5)
- [CVE-2017-10910](https://insights.sbomify.com/CVE-2017-10910/): Denial of Service in mqtt (medium 6.5)
- [CVE-2017-10909](https://insights.sbomify.com/CVE-2017-10909/): Other in Music Center for PC (high 7.8)
- [CVE-2017-10908](https://insights.sbomify.com/CVE-2017-10908/): Denial of service in H2O (high 7.5)
- [CVE-2017-10907](https://insights.sbomify.com/CVE-2017-10907/): Path traversal in OneThird CMS (medium 4.3)
- [CVE-2017-10906](https://insights.sbomify.com/CVE-2017-10906/): Fluentd Escape Sequence Injection Vulnerability (critical 9.8)
- [CVE-2017-10905](https://insights.sbomify.com/CVE-2017-10905/): Other in Qt for Android (medium 5.3)
- [CVE-2017-10904](https://insights.sbomify.com/CVE-2017-10904/): Command injection in Qt for Android (critical 9.8)
- [CVE-2017-10903](https://insights.sbomify.com/CVE-2017-10903/): Auth bypass in PTW-WMS1 (critical 9.8)
- [CVE-2017-10902](https://insights.sbomify.com/CVE-2017-10902/): Command injection in PTW-WMS1 (critical 9.8)
- [CVE-2017-10901](https://insights.sbomify.com/CVE-2017-10901/): Memory corruption in PTW-WMS1 (high 7.5)
- [CVE-2017-10900](https://insights.sbomify.com/CVE-2017-10900/): Auth bypass in PTW-WMS1 (critical 9.8)
- [CVE-2017-10899](https://insights.sbomify.com/CVE-2017-10899/): SQL injection in A-Reserve (critical 9.8)
- [CVE-2017-10898](https://insights.sbomify.com/CVE-2017-10898/): SQL injection in A-Member (critical 9.8)
- [CVE-2017-10897](https://insights.sbomify.com/CVE-2017-10897/): Denial of service in BBR-4HG (medium 4.5)
- [CVE-2017-10896](https://insights.sbomify.com/CVE-2017-10896/): Cross-site scripting in BBR-4HG (medium 6.1)
- [CVE-2017-10895](https://insights.sbomify.com/CVE-2017-10895/): Denial of service in sDNSProxy.exe (high 7.5)
- [CVE-2017-10894](https://insights.sbomify.com/CVE-2017-10894/): Denial of service in StreamRelay.NET.exe (high 7.5)
- [CVE-2017-10893](https://insights.sbomify.com/CVE-2017-10893/): Privilege escalation in The Public Certification Service for Individuals "The JPKI user's software" (high 7.8)
- [CVE-2017-10892](https://insights.sbomify.com/CVE-2017-10892/): Other in Music Center for PC (high 7.8)
- [CVE-2017-10891](https://insights.sbomify.com/CVE-2017-10891/): Other in Media Go (high 7.8)
- [CVE-2017-10890](https://insights.sbomify.com/CVE-2017-10890/): Auth bypass in RX-CLV1-P firmware (medium 4.6)
- [CVE-2017-10889](https://insights.sbomify.com/CVE-2017-10889/): XML external entity in TablePress (medium 4.3)
- [CVE-2017-10888](https://insights.sbomify.com/CVE-2017-10888/): Information disclosure in BOOK WALKER for Mac (medium 5.5)
- [CVE-2017-10887](https://insights.sbomify.com/CVE-2017-10887/): Other in BOOK WALKER for Windows (high 7.8)
- [CVE-2017-10886](https://insights.sbomify.com/CVE-2017-10886/): Cross-site scripting in CS-Cart Japanese Edition (medium 5.4)
- [CVE-2017-10885](https://insights.sbomify.com/CVE-2017-10885/): Privilege escalation in HYPER SBI (high 7.8)
- [CVE-2017-1088](https://insights.sbomify.com/CVE-2017-1088/): Information disclosure in FreeBSD (low 3.3)
- [CVE-2017-10875](https://insights.sbomify.com/CVE-2017-10875/): Memory corruption in LAN DISK Connect (high 7.5)
- [CVE-2017-10874](https://insights.sbomify.com/CVE-2017-10874/): Weak cryptography in PWR-Q200 (high 7.5)
- [CVE-2017-10873](https://insights.sbomify.com/CVE-2017-10873/): Auth bypass in OpenAM (high 8.1)
- [CVE-2017-10872](https://insights.sbomify.com/CVE-2017-10872/): Memory corruption in H2O (medium 6.5)
- [CVE-2017-10871](https://insights.sbomify.com/CVE-2017-10871/): Memory corruption in Wi-Fi STATION L-02F Software (critical 9.8)
- [CVE-2017-10870](https://insights.sbomify.com/CVE-2017-10870/): Memory corruption in Rakuraku Hagaki (high 7.8)
- [CVE-2017-1087](https://insights.sbomify.com/CVE-2017-1087/): Privilege escalation in FreeBSD (high 7.8)
- [CVE-2017-10869](https://insights.sbomify.com/CVE-2017-10869/): Memory corruption in H2O (high 7.5)
- [CVE-2017-10868](https://insights.sbomify.com/CVE-2017-10868/): Denial of service in H2O (high 7.5)
- [CVE-2017-10865](https://insights.sbomify.com/CVE-2017-10865/): Other in HIBUN Confidential File Decryption program (high 7.8)
- [CVE-2017-10864](https://insights.sbomify.com/CVE-2017-10864/): Privilege escalation in Installer of HIBUN Confidential File Viewer (high 7.8)
- [CVE-2017-10863](https://insights.sbomify.com/CVE-2017-10863/): Other in HIBUN Confidential File Decryption program (high 7.8)
- [CVE-2017-10862](https://insights.sbomify.com/CVE-2017-10862/): Insufficient Data Verification in io.really:jwt-scala (medium 5.3)
- [CVE-2017-10861](https://insights.sbomify.com/CVE-2017-10861/): Path traversal in QND Advance/Standard (critical 9.1)
- [CVE-2017-10860](https://insights.sbomify.com/CVE-2017-10860/): Other in "i-filter 6.0 installer" (high 7.8)
- [CVE-2017-1086](https://insights.sbomify.com/CVE-2017-1086/): Information disclosure in FreeBSD (low 3.3)
- [CVE-2017-10859](https://insights.sbomify.com/CVE-2017-10859/): Other in "i-filter 6.0 installer" (high 7.8)
- [CVE-2017-10858](https://insights.sbomify.com/CVE-2017-10858/): Privilege escalation in "i-filter 6.0 install program" (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/129/