# Vulnerabilities published in 2017


- [CVE-2017-6984](https://insights.sbomify.com/CVE-2017-6984/): Memory corruption in n/a (high 8.8)
- [CVE-2017-6983](https://insights.sbomify.com/CVE-2017-6983/): Memory corruption in n/a (high 8.8)
- [CVE-2017-6982](https://insights.sbomify.com/CVE-2017-6982/): Denial of service in n/a (medium 5.5)
- [CVE-2017-6981](https://insights.sbomify.com/CVE-2017-6981/): Path traversal in n/a (high 7.8)
- [CVE-2017-6980](https://insights.sbomify.com/CVE-2017-6980/): Memory corruption in n/a (high 8.8)
- [CVE-2017-6979](https://insights.sbomify.com/CVE-2017-6979/): Race condition in n/a (high 7.0)
- [CVE-2017-6978](https://insights.sbomify.com/CVE-2017-6978/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6977](https://insights.sbomify.com/CVE-2017-6977/): Memory corruption in n/a (high 8.6)
- [CVE-2017-6976](https://insights.sbomify.com/CVE-2017-6976/): Auth bypass in n/a (medium 5.5)
- [CVE-2017-6975](https://insights.sbomify.com/CVE-2017-6975/): Memory corruption in n/a (medium 6.8)
- [CVE-2017-6974](https://insights.sbomify.com/CVE-2017-6974/): Security feature bypass in n/a (medium 5.5)
- [CVE-2017-6973](https://insights.sbomify.com/CVE-2017-6973/): MantisBT XSS via adm_config_report.php's action parameter (medium 4.8)
- [CVE-2017-6972](https://insights.sbomify.com/CVE-2017-6972/): Privilege escalation in n/a (critical 9.8)
- [CVE-2017-6971](https://insights.sbomify.com/CVE-2017-6971/): Command injection in n/a (high 8.8)
- [CVE-2017-6970](https://insights.sbomify.com/CVE-2017-6970/): Command injection in n/a (high 8.4)
- [CVE-2017-6969](https://insights.sbomify.com/CVE-2017-6969/): Information disclosure in n/a (critical 9.1)
- [CVE-2017-6968](https://insights.sbomify.com/CVE-2017-6968/): GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03. (high 8.8)
- [CVE-2017-6967](https://insights.sbomify.com/CVE-2017-6967/): Privilege escalation in n/a (high 7.3)
- [CVE-2017-6966](https://insights.sbomify.com/CVE-2017-6966/): Use after free in n/a (medium 5.5)
- [CVE-2017-6965](https://insights.sbomify.com/CVE-2017-6965/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-6964](https://insights.sbomify.com/CVE-2017-6964/): Privilege escalation in n/a (high 7.8)
- [CVE-2017-6962](https://insights.sbomify.com/CVE-2017-6962/): Integer overflow in n/a (high 7.5)
- [CVE-2017-6961](https://insights.sbomify.com/CVE-2017-6961/): Denial of service in n/a (medium 5.5)
- [CVE-2017-6960](https://insights.sbomify.com/CVE-2017-6960/): Integer overflow in n/a (high 7.5)
- [CVE-2017-6958](https://insights.sbomify.com/CVE-2017-6958/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6957](https://insights.sbomify.com/CVE-2017-6957/): Memory corruption in n/a (high 8.1)
- [CVE-2017-6956](https://insights.sbomify.com/CVE-2017-6956/): Memory corruption in n/a (high 8.8)
- [CVE-2017-6955](https://insights.sbomify.com/CVE-2017-6955/): Business logic in n/a (medium 5.3)
- [CVE-2017-6954](https://insights.sbomify.com/CVE-2017-6954/): BuddyPress Docs plugin Improper Privilege Management (medium 4.3)
- [CVE-2017-6953](https://insights.sbomify.com/CVE-2017-6953/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6952](https://insights.sbomify.com/CVE-2017-6952/): Capstone Integer overflow (high 8.8)
- [CVE-2017-6951](https://insights.sbomify.com/CVE-2017-6951/): Null dereference in n/a (medium 5.5)
- [CVE-2017-6950](https://insights.sbomify.com/CVE-2017-6950/): Code injection in n/a (critical 9.8)
- [CVE-2017-6949](https://insights.sbomify.com/CVE-2017-6949/): Integer overflow in n/a (high 8.1)
- [CVE-2017-6932](https://insights.sbomify.com/CVE-2017-6932/): Drupal external link injection vulnerability (medium 4.7)
- [CVE-2017-6931](https://insights.sbomify.com/CVE-2017-6931/): Drupal Settings Tray access bypass (medium 6.5)
- [CVE-2017-6930](https://insights.sbomify.com/CVE-2017-6930/): Drupal access bypass vulnerability (high 8.1)
- [CVE-2017-6929](https://insights.sbomify.com/CVE-2017-6929/): Drupal cross site scripting vulnerability (medium 6.1)
- [CVE-2017-6928](https://insights.sbomify.com/CVE-2017-6928/): Drupal access bypass vulnerability (medium 5.3)
- [CVE-2017-6927](https://insights.sbomify.com/CVE-2017-6927/): Drupal cross-site scripting vulnerability (medium 6.1)
- [CVE-2017-6926](https://insights.sbomify.com/CVE-2017-6926/): Drupal Comment reply form allows access to restricted content (high 8.1)
- [CVE-2017-6925](https://insights.sbomify.com/CVE-2017-6925/): Drupal Entity access bypass for entities that do not have UUIDs or have protected revisions (critical 9.8)
- [CVE-2017-6924](https://insights.sbomify.com/CVE-2017-6924/): REST API can bypass comment approval - Access Bypass - Moderately Critical (high 7.4)
- [CVE-2017-6923](https://insights.sbomify.com/CVE-2017-6923/): Access bypass in Drupal 8 views (medium 6.5)
- [CVE-2017-6922](https://insights.sbomify.com/CVE-2017-6922/): Files uploaded by anonymous users into a private file system can be accessed by other anonymous users (medium 6.5)
- [CVE-2017-6921](https://insights.sbomify.com/CVE-2017-6921/): File REST resource does not properly validate (medium 5.9)
- [CVE-2017-6920](https://insights.sbomify.com/CVE-2017-6920/): Drupal PECL YAML parser unsafe object handling (critical 9.8)
- [CVE-2017-6919](https://insights.sbomify.com/CVE-2017-6919/): Drupal access control bypass vulnerability (high 7.5)
- [CVE-2017-6918](https://insights.sbomify.com/CVE-2017-6918/): Cross-site request forgery in n/a (medium 4.3)
- [CVE-2017-6917](https://insights.sbomify.com/CVE-2017-6917/): Cross-site request forgery in n/a (medium 4.3)
- [CVE-2017-6916](https://insights.sbomify.com/CVE-2017-6916/): Cross-site request forgery in n/a (medium 4.3)
- [CVE-2017-6915](https://insights.sbomify.com/CVE-2017-6915/): Cross-site request forgery in n/a (medium 4.3)
- [CVE-2017-6914](https://insights.sbomify.com/CVE-2017-6914/): Cross-site request forgery in n/a (high 7.1)
- [CVE-2017-6913](https://insights.sbomify.com/CVE-2017-6913/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6912](https://insights.sbomify.com/CVE-2017-6912/): Missing authorization in n/a (high 8.8)
- [CVE-2017-6911](https://insights.sbomify.com/CVE-2017-6911/): Information disclosure in n/a (medium 6.6)
- [CVE-2017-6910](https://insights.sbomify.com/CVE-2017-6910/): Information disclosure in n/a (high 7.5)
- [CVE-2017-6909](https://insights.sbomify.com/CVE-2017-6909/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6908](https://insights.sbomify.com/CVE-2017-6908/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6907](https://insights.sbomify.com/CVE-2017-6907/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6906](https://insights.sbomify.com/CVE-2017-6906/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6905](https://insights.sbomify.com/CVE-2017-6905/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6903](https://insights.sbomify.com/CVE-2017-6903/): Code injection in n/a (high 7.8)
- [CVE-2017-6900](https://insights.sbomify.com/CVE-2017-6900/): Command injection in n/a (critical 9.8)
- [CVE-2017-6899](https://insights.sbomify.com/CVE-2017-6899/): Null dereference in n/a (medium 6.2)
- [CVE-2017-6896](https://insights.sbomify.com/CVE-2017-6896/): Privilege escalation in n/a (high 8.8)
- [CVE-2017-6895](https://insights.sbomify.com/CVE-2017-6895/): XML external entity in n/a (critical 9.8)
- [CVE-2017-6894](https://insights.sbomify.com/CVE-2017-6894/): Privilege escalation in n/a (high 7.8)
- [CVE-2017-6892](https://insights.sbomify.com/CVE-2017-6892/): Memory corruption in libsndfile (high 8.8)
- [CVE-2017-6891](https://insights.sbomify.com/CVE-2017-6891/): Memory corruption in GnuTLS libtasn1 (high 8.8)
- [CVE-2017-6890](https://insights.sbomify.com/CVE-2017-6890/): Memory corruption in LibRaw-demosaic-pack-GPL2 (critical 9.8)
- [CVE-2017-6889](https://insights.sbomify.com/CVE-2017-6889/): Integer overflow in LibRaw-demosaic-pack-GPL2 (critical 9.8)
- [CVE-2017-6888](https://insights.sbomify.com/CVE-2017-6888/): Memory corruption in FLAC (medium 5.5)
- [CVE-2017-6887](https://insights.sbomify.com/CVE-2017-6887/): Memory corruption in LibRaw (high 7.8)
- [CVE-2017-6886](https://insights.sbomify.com/CVE-2017-6886/): Memory corruption in LibRaw (critical 9.8)
- [CVE-2017-6885](https://insights.sbomify.com/CVE-2017-6885/): Privilege escalation in FlexNet Manager Suite (critical 9.8)
- [CVE-2017-6884](https://insights.sbomify.com/CVE-2017-6884/): Zyxel EMG2926 Routers Command Injection (high 8.8, exploited in the wild)
- [CVE-2017-6883](https://insights.sbomify.com/CVE-2017-6883/): Memory corruption in n/a (medium 4.7)
- [CVE-2017-6880](https://insights.sbomify.com/CVE-2017-6880/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-6878](https://insights.sbomify.com/CVE-2017-6878/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-6877](https://insights.sbomify.com/CVE-2017-6877/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6874](https://insights.sbomify.com/CVE-2017-6874/): Race condition in n/a (high 7.0)
- [CVE-2017-6873](https://insights.sbomify.com/CVE-2017-6873/): Security feature bypass in OZW672, OZW772 (high 7.4)
- [CVE-2017-6872](https://insights.sbomify.com/CVE-2017-6872/): Missing authorization in OZW672, OZW772 (medium 6.5)
- [CVE-2017-6871](https://insights.sbomify.com/CVE-2017-6871/): Auth bypass in SIMATIC WinCC Sm@rtClient for Android, SIMATIC WinCC Sm@rtClient Lite for Android (medium 5.4)
- [CVE-2017-6870](https://insights.sbomify.com/CVE-2017-6870/): Weak cryptography in SIMATIC WinCC Sm@rtClient for Android (high 7.4)
- [CVE-2017-6869](https://insights.sbomify.com/CVE-2017-6869/): File upload in ViewPort for Web Office Portal before revision number 1453 (critical 9.8)
- [CVE-2017-6868](https://insights.sbomify.com/CVE-2017-6868/): Auth bypass in Siemens SIMATIC CP 44x-1 Redundant Network Access Modules (high 8.1)
- [CVE-2017-6867](https://insights.sbomify.com/CVE-2017-6867/): Denial of service in Siemens SIMATIC WinCC (medium 4.9)
- [CVE-2017-6866](https://insights.sbomify.com/CVE-2017-6866/): Missing authorization in XHQ 4 (All versions before V4.7.1.3), XHQ 5 (All versions before V5.0.0.2) (medium 6.5)
- [CVE-2017-6865](https://insights.sbomify.com/CVE-2017-6865/): Denial of service in Primary Setup Tool (PST) (medium 6.5)
- [CVE-2017-6864](https://insights.sbomify.com/CVE-2017-6864/): Cross-site scripting in RUGGEDCOM ROX I All versions (medium 5.4)
- [CVE-2017-6862](https://insights.sbomify.com/CVE-2017-6862/): NETGEAR Multiple Devices Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2017-6852](https://insights.sbomify.com/CVE-2017-6852/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6851](https://insights.sbomify.com/CVE-2017-6851/): Denial of service in n/a (medium 5.5)
- [CVE-2017-6850](https://insights.sbomify.com/CVE-2017-6850/): Null dereference in n/a (medium 5.5)
- [CVE-2017-6849](https://insights.sbomify.com/CVE-2017-6849/): Null dereference in n/a (medium 5.5)
- [CVE-2017-6848](https://insights.sbomify.com/CVE-2017-6848/): Null dereference in n/a (medium 5.5)
- [CVE-2017-6847](https://insights.sbomify.com/CVE-2017-6847/): Null dereference in n/a (medium 5.5)
- [CVE-2017-6846](https://insights.sbomify.com/CVE-2017-6846/): Null dereference in n/a (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/28/