# Vulnerabilities published in 2017


- [CVE-2017-6258](https://insights.sbomify.com/CVE-2017-6258/): Memory corruption in Android (high 7.8)
- [CVE-2017-6257](https://insights.sbomify.com/CVE-2017-6257/): Null dereference in NVIDIA GPU Display Driver (high 8.8)
- [CVE-2017-6256](https://insights.sbomify.com/CVE-2017-6256/): Integer overflow in NVIDIA Windows GPU Display Driver (high 7.8)
- [CVE-2017-6255](https://insights.sbomify.com/CVE-2017-6255/): Privilege escalation in NVIDIA Windows GPU Display Driver (high 7.8)
- [CVE-2017-6254](https://insights.sbomify.com/CVE-2017-6254/): Null dereference in NVIDIA Windows GPU Display Driver (high 7.8)
- [CVE-2017-6253](https://insights.sbomify.com/CVE-2017-6253/): Integer overflow in n/a (high 7.8)
- [CVE-2017-6252](https://insights.sbomify.com/CVE-2017-6252/): Null dereference in NVIDIA Windows GPU Display Driver (high 7.8)
- [CVE-2017-6251](https://insights.sbomify.com/CVE-2017-6251/): Missing authorization in NVIDIA Windows GPU Display Driver (high 7.8)
- [CVE-2017-6250](https://insights.sbomify.com/CVE-2017-6250/): Code injection in GeForce Experience (high 8.8)
- [CVE-2017-6249](https://insights.sbomify.com/CVE-2017-6249/): Privilege escalation in Android (high 7.0)
- [CVE-2017-6248](https://insights.sbomify.com/CVE-2017-6248/): Privilege escalation in n/a (high 7.0)
- [CVE-2017-6247](https://insights.sbomify.com/CVE-2017-6247/): Privilege escalation in Android (high 7.8)
- [CVE-2017-6230](https://insights.sbomify.com/CVE-2017-6230/): Command injection in Ruckus Networks Solo APs and SZ managed APs (high 8.8)
- [CVE-2017-6229](https://insights.sbomify.com/CVE-2017-6229/): Command injection in Ruckus Networks Unleashed APs and Zone Director (high 8.8)
- [CVE-2017-6227](https://insights.sbomify.com/CVE-2017-6227/): Denial of service in Brocade FABRIC OS (medium 6.5)
- [CVE-2017-6225](https://insights.sbomify.com/CVE-2017-6225/): Cross-site scripting in Brocade FABRIC OS (medium 6.1)
- [CVE-2017-6224](https://insights.sbomify.com/CVE-2017-6224/): Command injection in Zone Director Controller and Unleashed AP Firmware (high 8.8)
- [CVE-2017-6223](https://insights.sbomify.com/CVE-2017-6223/): Command injection in Zone Director Controller Firmware (high 8.8)
- [CVE-2017-6217](https://insights.sbomify.com/CVE-2017-6217/): paypal/adaptivepayments-sdk-php vulnerable to a reflected XSS (medium 6.1)
- [CVE-2017-6216](https://insights.sbomify.com/CVE-2017-6216/): infusionsoft-php-sdk reflected Cross-site Scripting (medium 6.1)
- [CVE-2017-6215](https://insights.sbomify.com/CVE-2017-6215/): paypal/permissions-sdk-php reflected Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2017-6214](https://insights.sbomify.com/CVE-2017-6214/): Denial of service in n/a (high 7.5)
- [CVE-2017-6213](https://insights.sbomify.com/CVE-2017-6213/): paypal/invoice-sdk-php reflected XSS (medium 5.4)
- [CVE-2017-6211](https://insights.sbomify.com/CVE-2017-6211/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-6210](https://insights.sbomify.com/CVE-2017-6210/): Null dereference in n/a (medium 6.5)
- [CVE-2017-6209](https://insights.sbomify.com/CVE-2017-6209/): Memory corruption in n/a (medium 6.5)
- [CVE-2017-6206](https://insights.sbomify.com/CVE-2017-6206/): Information disclosure in n/a (high 7.5)
- [CVE-2017-6205](https://insights.sbomify.com/CVE-2017-6205/): Command injection in n/a (critical 9.8)
- [CVE-2017-6201](https://insights.sbomify.com/CVE-2017-6201/): Server-side request forgery in n/a (high 8.1)
- [CVE-2017-6200](https://insights.sbomify.com/CVE-2017-6200/): Path traversal in n/a (medium 6.5)
- [CVE-2017-6199](https://insights.sbomify.com/CVE-2017-6199/): Auth bypass in n/a (critical 9.8)
- [CVE-2017-6198](https://insights.sbomify.com/CVE-2017-6198/): Denial of service in n/a (medium 6.5)
- [CVE-2017-6197](https://insights.sbomify.com/CVE-2017-6197/): Null dereference in n/a (medium 5.5)
- [CVE-2017-6196](https://insights.sbomify.com/CVE-2017-6196/): Use after free in n/a (high 7.8)
- [CVE-2017-6195](https://insights.sbomify.com/CVE-2017-6195/): SQL injection in n/a (critical 9.8)
- [CVE-2017-6194](https://insights.sbomify.com/CVE-2017-6194/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6193](https://insights.sbomify.com/CVE-2017-6193/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-6192](https://insights.sbomify.com/CVE-2017-6192/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-6191](https://insights.sbomify.com/CVE-2017-6191/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6190](https://insights.sbomify.com/CVE-2017-6190/): Path traversal in n/a (high 7.5)
- [CVE-2017-6189](https://insights.sbomify.com/CVE-2017-6189/): Other in n/a (high 7.3)
- [CVE-2017-6188](https://insights.sbomify.com/CVE-2017-6188/): Path traversal in n/a (medium 5.5)
- [CVE-2017-6187](https://insights.sbomify.com/CVE-2017-6187/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-6186](https://insights.sbomify.com/CVE-2017-6186/): Code injection in n/a (medium 6.7)
- [CVE-2017-6184](https://insights.sbomify.com/CVE-2017-6184/): Command injection in n/a (medium 4.7)
- [CVE-2017-6183](https://insights.sbomify.com/CVE-2017-6183/): Command injection in n/a (high 7.2)
- [CVE-2017-6182](https://insights.sbomify.com/CVE-2017-6182/): Command injection in n/a (critical 9.8)
- [CVE-2017-6181](https://insights.sbomify.com/CVE-2017-6181/): Denial of service in n/a (high 7.5)
- [CVE-2017-6180](https://insights.sbomify.com/CVE-2017-6180/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-6178](https://insights.sbomify.com/CVE-2017-6178/): Null dereference in n/a (high 7.8)
- [CVE-2017-6169](https://insights.sbomify.com/CVE-2017-6169/): Denial of service in BIG-IP PEM (medium 6.8)
- [CVE-2017-6168](https://insights.sbomify.com/CVE-2017-6168/): Weak cryptography in n/a (high 7.4)
- [CVE-2017-6167](https://insights.sbomify.com/CVE-2017-6167/): Race condition in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe (high 7.5)
- [CVE-2017-6166](https://insights.sbomify.com/CVE-2017-6166/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe (medium 5.9)
- [CVE-2017-6165](https://insights.sbomify.com/CVE-2017-6165/): Information disclosure in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, WebSafe (critical 9.8)
- [CVE-2017-6164](https://insights.sbomify.com/CVE-2017-6164/): In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 1 (high 8.1)
- [CVE-2017-6163](https://insights.sbomify.com/CVE-2017-6163/): Denial of service in BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM (medium 5.9)
- [CVE-2017-6162](https://insights.sbomify.com/CVE-2017-6162/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe (medium 5.9)
- [CVE-2017-6161](https://insights.sbomify.com/CVE-2017-6161/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator (medium 5.3)
- [CVE-2017-6160](https://insights.sbomify.com/CVE-2017-6160/): Denial of service in BIG-IP AAM, PEM (medium 5.9)
- [CVE-2017-6159](https://insights.sbomify.com/CVE-2017-6159/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe (medium 5.9)
- [CVE-2017-6158](https://insights.sbomify.com/CVE-2017-6158/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (medium 6.5)
- [CVE-2017-6157](https://insights.sbomify.com/CVE-2017-6157/): Other in BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, Websafe (high 8.1)
- [CVE-2017-6156](https://insights.sbomify.com/CVE-2017-6156/): Security feature bypass in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (medium 6.4)
- [CVE-2017-6155](https://insights.sbomify.com/CVE-2017-6155/): Denial of service in BIG-IP (LTM, AAM, AFM, APM, ASM, Edge Gateway, Link Controller, PEM, PSM, WebAccelerator, WebSafe) (high 7.5)
- [CVE-2017-6154](https://insights.sbomify.com/CVE-2017-6154/): Denial of service in BIG-IP ASM (high 7.5)
- [CVE-2017-6153](https://insights.sbomify.com/CVE-2017-6153/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 5.3)
- [CVE-2017-6152](https://insights.sbomify.com/CVE-2017-6152/): Privilege escalation in BIG-IQ Centralized Management (medium 6.7)
- [CVE-2017-6151](https://insights.sbomify.com/CVE-2017-6151/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe (high 7.5)
- [CVE-2017-6150](https://insights.sbomify.com/CVE-2017-6150/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe (high 7.5)
- [CVE-2017-6148](https://insights.sbomify.com/CVE-2017-6148/): Denial of service in BIG-IP (LTM, AAM, AFM, APM, ASM, Link Controller, PEM, WebSafe) (high 7.5)
- [CVE-2017-6147](https://insights.sbomify.com/CVE-2017-6147/): Denial of service in F5 BIG-IP (medium 5.9)
- [CVE-2017-6145](https://insights.sbomify.com/CVE-2017-6145/): Auth bypass in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe (high 7.3)
- [CVE-2017-6144](https://insights.sbomify.com/CVE-2017-6144/): Security feature bypass in F5 BIG-IP PEM (high 7.4)
- [CVE-2017-6143](https://insights.sbomify.com/CVE-2017-6143/): Security feature bypass in BIG-IP (AFM, ASM) (medium 5.4)
- [CVE-2017-6142](https://insights.sbomify.com/CVE-2017-6142/): Security feature bypass in BIG-IP AFM (medium 4.8)
- [CVE-2017-6141](https://insights.sbomify.com/CVE-2017-6141/): Denial of service in F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, WebSafe (medium 5.9)
- [CVE-2017-6140](https://insights.sbomify.com/CVE-2017-6140/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, ASM, DNS, GTM, PEM (high 7.5)
- [CVE-2017-6139](https://insights.sbomify.com/CVE-2017-6139/): Information disclosure in BIG-IP APM (medium 5.9)
- [CVE-2017-6138](https://insights.sbomify.com/CVE-2017-6138/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, WebSafe (high 7.5)
- [CVE-2017-6137](https://insights.sbomify.com/CVE-2017-6137/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WebSafe (medium 5.9)
- [CVE-2017-6136](https://insights.sbomify.com/CVE-2017-6136/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, WebSafe (medium 5.9)
- [CVE-2017-6135](https://insights.sbomify.com/CVE-2017-6135/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, WebSafe (high 7.5)
- [CVE-2017-6134](https://insights.sbomify.com/CVE-2017-6134/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, WebSafe (medium 6.5)
- [CVE-2017-6133](https://insights.sbomify.com/CVE-2017-6133/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe (high 7.5)
- [CVE-2017-6132](https://insights.sbomify.com/CVE-2017-6132/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe (high 7.5)
- [CVE-2017-6131](https://insights.sbomify.com/CVE-2017-6131/): Hardcoded credentials in BIG-IP Azure cloud instance (critical 9.8)
- [CVE-2017-6130](https://insights.sbomify.com/CVE-2017-6130/): Server-side request forgery in SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 (high 7.4)
- [CVE-2017-6129](https://insights.sbomify.com/CVE-2017-6129/): Denial of service in BIG-IP APM (high 7.5)
- [CVE-2017-6128](https://insights.sbomify.com/CVE-2017-6128/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WebSafe (high 7.5)
- [CVE-2017-6127](https://insights.sbomify.com/CVE-2017-6127/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-6104](https://insights.sbomify.com/CVE-2017-6104/): File upload in Wordpress Plugin Mobile App Native 3.0 (high 7.5)
- [CVE-2017-6103](https://insights.sbomify.com/CVE-2017-6103/): Cross-site scripting in Wordpress plugin AnyVar (medium 6.1)
- [CVE-2017-6102](https://insights.sbomify.com/CVE-2017-6102/): Cross-site scripting in wordpress plugin rockhoist-badges (medium 6.1)
- [CVE-2017-6100](https://insights.sbomify.com/CVE-2017-6100/): Server-side request forgery in n/a (high 7.5)
- [CVE-2017-6099](https://insights.sbomify.com/CVE-2017-6099/): PayPal PHP Merchant SDK Cross-site scripting (XSS) vulnerability (medium 6.1)
- [CVE-2017-6098](https://insights.sbomify.com/CVE-2017-6098/): SQL injection in n/a (high 7.2)
- [CVE-2017-6097](https://insights.sbomify.com/CVE-2017-6097/): SQL injection in n/a (high 7.2)
- [CVE-2017-6096](https://insights.sbomify.com/CVE-2017-6096/): SQL injection in n/a (high 7.2)
- [CVE-2017-6095](https://insights.sbomify.com/CVE-2017-6095/): SQL injection in n/a (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/34/