# Vulnerabilities published in 2017


- [CVE-2017-10754](https://insights.sbomify.com/CVE-2017-10754/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10753](https://insights.sbomify.com/CVE-2017-10753/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10752](https://insights.sbomify.com/CVE-2017-10752/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10751](https://insights.sbomify.com/CVE-2017-10751/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10750](https://insights.sbomify.com/CVE-2017-10750/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10749](https://insights.sbomify.com/CVE-2017-10749/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10748](https://insights.sbomify.com/CVE-2017-10748/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10747](https://insights.sbomify.com/CVE-2017-10747/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10746](https://insights.sbomify.com/CVE-2017-10746/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10745](https://insights.sbomify.com/CVE-2017-10745/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10744](https://insights.sbomify.com/CVE-2017-10744/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10743](https://insights.sbomify.com/CVE-2017-10743/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10742](https://insights.sbomify.com/CVE-2017-10742/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10741](https://insights.sbomify.com/CVE-2017-10741/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10740](https://insights.sbomify.com/CVE-2017-10740/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10739](https://insights.sbomify.com/CVE-2017-10739/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10738](https://insights.sbomify.com/CVE-2017-10738/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10737](https://insights.sbomify.com/CVE-2017-10737/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10736](https://insights.sbomify.com/CVE-2017-10736/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-10735](https://insights.sbomify.com/CVE-2017-10735/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-10734](https://insights.sbomify.com/CVE-2017-10734/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-10733](https://insights.sbomify.com/CVE-2017-10733/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-10732](https://insights.sbomify.com/CVE-2017-10732/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-10731](https://insights.sbomify.com/CVE-2017-10731/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-10730](https://insights.sbomify.com/CVE-2017-10730/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-10729](https://insights.sbomify.com/CVE-2017-10729/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-10728](https://insights.sbomify.com/CVE-2017-10728/): Memory corruption in winamp:winamp (high 7.8)
- [CVE-2017-10727](https://insights.sbomify.com/CVE-2017-10727/): Memory corruption in winamp:winamp (high 7.8)
- [CVE-2017-10726](https://insights.sbomify.com/CVE-2017-10726/): Memory corruption in winamp:winamp (high 7.8)
- [CVE-2017-10725](https://insights.sbomify.com/CVE-2017-10725/): Memory corruption in winamp:winamp (high 7.3)
- [CVE-2017-10724](https://insights.sbomify.com/CVE-2017-10724/): Memory corruption in ishekar:endoscope camera firmware (high 8.8)
- [CVE-2017-10723](https://insights.sbomify.com/CVE-2017-10723/): Memory corruption in ishekar:endoscope camera firmware (high 8.8)
- [CVE-2017-10722](https://insights.sbomify.com/CVE-2017-10722/): Memory corruption in ishekar:endoscope camera firmware (high 7.8)
- [CVE-2017-10721](https://insights.sbomify.com/CVE-2017-10721/): Misconfiguration in ishekar:endoscope camera firmware (medium 6.5)
- [CVE-2017-10720](https://insights.sbomify.com/CVE-2017-10720/): Memory corruption in ishekar:endoscope camera firmware (high 7.8)
- [CVE-2017-10719](https://insights.sbomify.com/CVE-2017-10719/): Hardcoded credentials in ishekar:endoscope camera firmware (medium 6.5)
- [CVE-2017-10718](https://insights.sbomify.com/CVE-2017-10718/): Missing authorization in ishekar:endoscope camera firmware (medium 6.5)
- [CVE-2017-10711](https://insights.sbomify.com/CVE-2017-10711/): Cross-site scripting in simplerisk:simplerisk (medium 6.1)
- [CVE-2017-10709](https://insights.sbomify.com/CVE-2017-10709/): Auth bypass in google:android (medium 6.8)
- [CVE-2017-10708](https://insights.sbomify.com/CVE-2017-10708/): Path traversal in apport project:apport (high 7.8)
- [CVE-2017-10706](https://insights.sbomify.com/CVE-2017-10706/): Memory corruption in antiy:antivirus engine (medium 6.2)
- [CVE-2017-10701](https://insights.sbomify.com/CVE-2017-10701/): Cross-site scripting in sap:enterprise portal (medium 6.1)
- [CVE-2017-10700](https://insights.sbomify.com/CVE-2017-10700/): Command injection in qnap:qts (critical 9.8)
- [CVE-2017-10699](https://insights.sbomify.com/CVE-2017-10699/): Memory corruption in videolan:vlc media player (critical 9.8)
- [CVE-2017-10690](https://insights.sbomify.com/CVE-2017-10690/): Information disclosure in Puppet Agent (medium 6.5)
- [CVE-2017-10689](https://insights.sbomify.com/CVE-2017-10689/): Tarball permission preservation in puppet (medium 5.5)
- [CVE-2017-10688](https://insights.sbomify.com/CVE-2017-10688/): Denial of service in libtiff:libtiff (high 7.5)
- [CVE-2017-10687](https://insights.sbomify.com/CVE-2017-10687/): Memory corruption in libsass:libsass (high 7.5)
- [CVE-2017-10686](https://insights.sbomify.com/CVE-2017-10686/): Use after free in canonical:ubuntu linux (high 7.8)
- [CVE-2017-10685](https://insights.sbomify.com/CVE-2017-10685/): Memory corruption in invisible-island:ncurses (critical 9.8)
- [CVE-2017-10684](https://insights.sbomify.com/CVE-2017-10684/): Memory corruption in invisible-island:ncurses (critical 9.8)
- [CVE-2017-10683](https://insights.sbomify.com/CVE-2017-10683/): Memory corruption in mpg123:mpg123 (high 7.5)
- [CVE-2017-10682](https://insights.sbomify.com/CVE-2017-10682/): SQL injection in piwigo:piwigo (critical 9.8)
- [CVE-2017-10681](https://insights.sbomify.com/CVE-2017-10681/): Cross-site request forgery in piwigo:piwigo (high 8.8)
- [CVE-2017-10680](https://insights.sbomify.com/CVE-2017-10680/): Cross-site request forgery in piwigo:piwigo (high 8.8)
- [CVE-2017-10679](https://insights.sbomify.com/CVE-2017-10679/): Information disclosure in piwigo:piwigo (high 7.5)
- [CVE-2017-10678](https://insights.sbomify.com/CVE-2017-10678/): Cross-site request forgery in piwigo:piwigo (high 8.8)
- [CVE-2017-10677](https://insights.sbomify.com/CVE-2017-10677/): Cross-site request forgery in linksys:ea4500 firmware (high 8.8)
- [CVE-2017-10676](https://insights.sbomify.com/CVE-2017-10676/): Cross-site scripting in d-link:dir-600m firmware (medium 6.1)
- [CVE-2017-10674](https://insights.sbomify.com/CVE-2017-10674/): Denial of service in antiy:antivirus engine (medium 5.5)
- [CVE-2017-10673](https://insights.sbomify.com/CVE-2017-10673/): Cross-site scripting in get-simple:getsimple cms (medium 6.1)
- [CVE-2017-10672](https://insights.sbomify.com/CVE-2017-10672/): Use after free in debian:debian linux (critical 9.8)
- [CVE-2017-10671](https://insights.sbomify.com/CVE-2017-10671/): Memory corruption in sthttpd project:sthttpd (high 7.8)
- [CVE-2017-10670](https://insights.sbomify.com/CVE-2017-10670/): XML external entity in xoev:osci transport library (critical 9.8)
- [CVE-2017-10669](https://insights.sbomify.com/CVE-2017-10669/): Security feature bypass in xoev:osci transport library (medium 6.5)
- [CVE-2017-10668](https://insights.sbomify.com/CVE-2017-10668/): Weak cryptography in xoev:osci transport library (medium 5.9)
- [CVE-2017-10667](https://insights.sbomify.com/CVE-2017-10667/): Cross-site scripting in zen-cart:zen cart (medium 6.1)
- [CVE-2017-10665](https://insights.sbomify.com/CVE-2017-10665/): Path traversal in phpgrid:phpgrid (high 7.8)
- [CVE-2017-10664](https://insights.sbomify.com/CVE-2017-10664/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2017-10663](https://insights.sbomify.com/CVE-2017-10663/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2017-10662](https://insights.sbomify.com/CVE-2017-10662/): Privilege escalation in linux:linux kernel (high 7.8)
- [CVE-2017-10661](https://insights.sbomify.com/CVE-2017-10661/): Race condition in debian:debian linux (high 7.0)
- [CVE-2017-10624](https://insights.sbomify.com/CVE-2017-10624/): Junos Space: Insufficient verification of node certificates. (high 7.5)
- [CVE-2017-10623](https://insights.sbomify.com/CVE-2017-10623/): Junos Space: Insufficient verification of cluster messages (high 7.1)
- [CVE-2017-10622](https://insights.sbomify.com/CVE-2017-10622/): Junos Space: Authentication bypass vulnerability (critical 9.8)
- [CVE-2017-10621](https://insights.sbomify.com/CVE-2017-10621/): Junos OS: Denial of service vulnerability in telnetd (medium 5.3)
- [CVE-2017-10620](https://insights.sbomify.com/CVE-2017-10620/): SRX Series: Antivirus updates are downloaded without verification (high 7.4)
- [CVE-2017-10619](https://insights.sbomify.com/CVE-2017-10619/): Junos: SRX cluster denial of service vulnerability in flowd due to multicast packets (high 7.5)
- [CVE-2017-10618](https://insights.sbomify.com/CVE-2017-10618/): Junos: RPD core due to BGP UPDATE with malformed optional transitive attributes (medium 5.9)
- [CVE-2017-10617](https://insights.sbomify.com/CVE-2017-10617/): Contrail: XML External Entity (XXE) vulnerability (medium 5.0)
- [CVE-2017-10616](https://insights.sbomify.com/CVE-2017-10616/): Contrail: hard coded credentials (medium 5.3)
- [CVE-2017-10615](https://insights.sbomify.com/CVE-2017-10615/): Junos: Potential remote code execution vulnerability in PAM (critical 9.8)
- [CVE-2017-10614](https://insights.sbomify.com/CVE-2017-10614/): Junos OS: A remote unauthenticated attacker can consume large amounts of CPU and/or memory through telnetd (medium 5.3)
- [CVE-2017-10613](https://insights.sbomify.com/CVE-2017-10613/): Junos OS: A kernel hang may occur due to a specific loopback filter action command (medium 5.5)
- [CVE-2017-10612](https://insights.sbomify.com/CVE-2017-10612/): Junos Space: Persistent Cross site scripting in Junos Space (high 8.0)
- [CVE-2017-10611](https://insights.sbomify.com/CVE-2017-10611/): Junos: EX Series PFE and MX MPC7E/8E/9E PFE crash when fetching interface stats with 'extended-statistics' enabled (medium 6.5)
- [CVE-2017-10610](https://insights.sbomify.com/CVE-2017-10610/): SRX Series: Embedded ICMP may cause the flowd process to crash (high 7.5)
- [CVE-2017-10608](https://insights.sbomify.com/CVE-2017-10608/): SRX series: Junos OS: SRX series using IPv6 Sun/MS-RPC ALGs may experience flowd crash on processing packets. (high 7.5)
- [CVE-2017-10607](https://insights.sbomify.com/CVE-2017-10607/): Junos: rpd core due to receipt of specially crafted BGP packet (high 7.5)
- [CVE-2017-10606](https://insights.sbomify.com/CVE-2017-10606/): SRX Series: Cryptographic weakness in SRX300 Series TPM Firmware (medium 4.4)
- [CVE-2017-10605](https://insights.sbomify.com/CVE-2017-10605/): Junos: SRX Series denial of service vulnerability in flowd due to crafted DHCP packet (high 8.6)
- [CVE-2017-10604](https://insights.sbomify.com/CVE-2017-10604/): Junos OS: SRX Series: Cluster configuration sync failures occur if the root user account is locked out (medium 5.3)
- [CVE-2017-10603](https://insights.sbomify.com/CVE-2017-10603/): Junos OS: Local XML Injection through CLI command can lead to privilege escalation (high 7.0)
- [CVE-2017-10602](https://insights.sbomify.com/CVE-2017-10602/): Junos OS: buffer overflow vulnerability in Junos CLI (high 7.0)
- [CVE-2017-10601](https://insights.sbomify.com/CVE-2017-10601/): Junos OS: Insufficient authentication for user login when a specific system configuration error occurs. (critical 9.8)
- [CVE-2017-10600](https://insights.sbomify.com/CVE-2017-10600/): Misconfiguration in canonical:ubuntu-image (medium 5.9)
- [CVE-2017-10428](https://insights.sbomify.com/CVE-2017-10428/): Other in VM VirtualBox (medium 5.0)
- [CVE-2017-10427](https://insights.sbomify.com/CVE-2017-10427/): Other in Retail Xstore Point of Service (medium 6.5)
- [CVE-2017-10426](https://insights.sbomify.com/CVE-2017-10426/): Information disclosure in PeopleSoft Enterprise FIN Staffing Front Office (low 2.7)
- [CVE-2017-10425](https://insights.sbomify.com/CVE-2017-10425/): Other in Hospitality Simphony (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/131/