# Vulnerabilities published in 2017


- [CVE-2017-6094](https://insights.sbomify.com/CVE-2017-6094/): Information disclosure in n/a (critical 9.8)
- [CVE-2017-6090](https://insights.sbomify.com/CVE-2017-6090/): File upload in n/a (high 8.8)
- [CVE-2017-6089](https://insights.sbomify.com/CVE-2017-6089/): SQL injection in n/a (critical 9.8)
- [CVE-2017-6088](https://insights.sbomify.com/CVE-2017-6088/): SQL injection in n/a (high 7.2)
- [CVE-2017-6087](https://insights.sbomify.com/CVE-2017-6087/): Command injection in n/a (high 8.8)
- [CVE-2017-6086](https://insights.sbomify.com/CVE-2017-6086/): ViMbAdmin CSRF Vulnerabilities (high 8.8)
- [CVE-2017-6081](https://insights.sbomify.com/CVE-2017-6081/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-6080](https://insights.sbomify.com/CVE-2017-6080/): Cross-site request forgery in n/a (critical 9.8)
- [CVE-2017-6079](https://insights.sbomify.com/CVE-2017-6079/): Command injection in n/a (critical 9.8)
- [CVE-2017-6078](https://insights.sbomify.com/CVE-2017-6078/): Denial of service in n/a (medium 5.5)
- [CVE-2017-6077](https://insights.sbomify.com/CVE-2017-6077/): NETGEAR DGN2200 Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-6076](https://insights.sbomify.com/CVE-2017-6076/): Information disclosure in n/a (medium 5.5)
- [CVE-2017-6074](https://insights.sbomify.com/CVE-2017-6074/): Use after free in n/a (high 7.8)
- [CVE-2017-6072](https://insights.sbomify.com/CVE-2017-6072/): Information disclosure in n/a (medium 5.3)
- [CVE-2017-6071](https://insights.sbomify.com/CVE-2017-6071/): Information disclosure in n/a (medium 5.3)
- [CVE-2017-6070](https://insights.sbomify.com/CVE-2017-6070/): Code injection in n/a (critical 9.8)
- [CVE-2017-6069](https://insights.sbomify.com/CVE-2017-6069/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-6068](https://insights.sbomify.com/CVE-2017-6068/): Subrion CMS vulnerable to CSRF in admin/blocks/add (high 8.8)
- [CVE-2017-6067](https://insights.sbomify.com/CVE-2017-6067/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6066](https://insights.sbomify.com/CVE-2017-6066/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-6065](https://insights.sbomify.com/CVE-2017-6065/): SQL injection in n/a (high 8.8)
- [CVE-2017-6062](https://insights.sbomify.com/CVE-2017-6062/): Auth bypass in n/a (high 8.6)
- [CVE-2017-6061](https://insights.sbomify.com/CVE-2017-6061/): Cross-site scripting in n/a (medium 4.7)
- [CVE-2017-6060](https://insights.sbomify.com/CVE-2017-6060/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6059](https://insights.sbomify.com/CVE-2017-6059/): Open redirect in n/a (high 7.5)
- [CVE-2017-6058](https://insights.sbomify.com/CVE-2017-6058/): Memory corruption in n/a (high 7.5)
- [CVE-2017-6056](https://insights.sbomify.com/CVE-2017-6056/): Denial of service in n/a (high 7.5)
- [CVE-2017-6055](https://insights.sbomify.com/CVE-2017-6055/): XML external entity in n/a (high 7.8)
- [CVE-2017-6054](https://insights.sbomify.com/CVE-2017-6054/): Hardcoded credentials in Hyundai Motor America Blue Link (high 7.5)
- [CVE-2017-6053](https://insights.sbomify.com/CVE-2017-6053/): Cross-site scripting in Trihedral VTScada (medium 6.1)
- [CVE-2017-6052](https://insights.sbomify.com/CVE-2017-6052/): Other in Hyundai Motor America Blue Link (low 3.7)
- [CVE-2017-6051](https://insights.sbomify.com/CVE-2017-6051/): Other in BLF-Tech LLC VisualView HMI (high 7.0)
- [CVE-2017-6050](https://insights.sbomify.com/CVE-2017-6050/): SQL injection in Ecava IntegraXor (critical 9.8)
- [CVE-2017-6049](https://insights.sbomify.com/CVE-2017-6049/): Missing authorization in Sitewatch Gateway (high 7.5)
- [CVE-2017-6048](https://insights.sbomify.com/CVE-2017-6048/): Command injection in Satel Iberia SenNet Data Logger and Electricity Meters (high 8.8)
- [CVE-2017-6047](https://insights.sbomify.com/CVE-2017-6047/): Information disclosure in Sitewatch Gateway (critical 9.8)
- [CVE-2017-6046](https://insights.sbomify.com/CVE-2017-6046/): Information disclosure in Sierra Wireless AirLink Raven XE and XT (high 7.5)
- [CVE-2017-6045](https://insights.sbomify.com/CVE-2017-6045/): Information disclosure in Trihedral VTScada (high 7.5)
- [CVE-2017-6044](https://insights.sbomify.com/CVE-2017-6044/): Missing authorization in Sierra Wireless AirLink Raven XE and XT (critical 9.8)
- [CVE-2017-6043](https://insights.sbomify.com/CVE-2017-6043/): Denial of service in Trihedral VTScada (high 7.5)
- [CVE-2017-6042](https://insights.sbomify.com/CVE-2017-6042/): Cross-site request forgery in Sierra Wireless AirLink Raven XE and XT (high 8.8)
- [CVE-2017-6041](https://insights.sbomify.com/CVE-2017-6041/): File upload in Marel Food Processing Systems (critical 9.8)
- [CVE-2017-6040](https://insights.sbomify.com/CVE-2017-6040/): Information disclosure in Belden Hirschmann GECKO (medium 5.3)
- [CVE-2017-6039](https://insights.sbomify.com/CVE-2017-6039/): Hardcoded credentials in Phoenix Broadband Technologies LLC PowerAgent SC3 Site Controller (medium 5.3)
- [CVE-2017-6038](https://insights.sbomify.com/CVE-2017-6038/): Cross-site request forgery in Belden Hirschmann GECKO (high 7.1)
- [CVE-2017-6037](https://insights.sbomify.com/CVE-2017-6037/): Memory corruption in Wecon Technologies LEVI Studio HMI Editor (high 8.8)
- [CVE-2017-6036](https://insights.sbomify.com/CVE-2017-6036/): Server-side request forgery in Belden Hirschmann GECKO (medium 6.5)
- [CVE-2017-6035](https://insights.sbomify.com/CVE-2017-6035/): Memory corruption in Wecon Technologies LEVI Studio HMI Editor (high 8.8)
- [CVE-2017-6034](https://insights.sbomify.com/CVE-2017-6034/): Schneider Electric Modicon Modbus Protocol Authentication Bypass by Capture-replay (critical 9.8)
- [CVE-2017-6033](https://insights.sbomify.com/CVE-2017-6033/): Other in Schneider Electric Interactive Graphical SCADA System Software (high 7.8)
- [CVE-2017-6032](https://insights.sbomify.com/CVE-2017-6032/): Security feature bypass in Schneider Electric Modicon Modbus Protocol (medium 5.3)
- [CVE-2017-6031](https://insights.sbomify.com/CVE-2017-6031/): Code injection in Certec EDV GmbH atvise scada (high 8.8)
- [CVE-2017-6030](https://insights.sbomify.com/CVE-2017-6030/): Schneider Electric Modicon PLCs Predictable Value Range from Previous Values (medium 6.5)
- [CVE-2017-6029](https://insights.sbomify.com/CVE-2017-6029/): A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. (medium 5.4)
- [CVE-2017-6028](https://insights.sbomify.com/CVE-2017-6028/): Hardcoded credentials in Schneider Electric Modicon PLCs (critical 9.8)
- [CVE-2017-6027](https://insights.sbomify.com/CVE-2017-6027/): File upload in 3S-Smart Software Solutions GmbH CODESYS Web Server (critical 9.8)
- [CVE-2017-6026](https://insights.sbomify.com/CVE-2017-6026/): Weak cryptography in Schneider Electric Modicon PLCs (critical 9.1)
- [CVE-2017-6025](https://insights.sbomify.com/CVE-2017-6025/): Memory corruption in 3S-Smart Software Solutions GmbH CODESYS Web Server (critical 9.8)
- [CVE-2017-6024](https://insights.sbomify.com/CVE-2017-6024/): Denial of service in Rockwell Automation ControlLogix 5580 and CompactLogix 5380 (medium 5.9)
- [CVE-2017-6023](https://insights.sbomify.com/CVE-2017-6023/): Memory corruption in Fatek Automation PLC Ethernet Module (critical 9.8)
- [CVE-2017-6022](https://insights.sbomify.com/CVE-2017-6022/): Hardcoded credentials in BD Kiestra PerformA and KLA Journal Service (critical 9.8)
- [CVE-2017-6021](https://insights.sbomify.com/CVE-2017-6021/): Denial of service in ClearSCADA (high 7.5)
- [CVE-2017-6020](https://insights.sbomify.com/CVE-2017-6020/): Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize e (medium 5.3)
- [CVE-2017-6019](https://insights.sbomify.com/CVE-2017-6019/): Denial of service in Schneider Electric Conext ComBox (high 7.5)
- [CVE-2017-6018](https://insights.sbomify.com/CVE-2017-6018/): Open redirect in B. Braun Medical SpaceCom (medium 6.1)
- [CVE-2017-6017](https://insights.sbomify.com/CVE-2017-6017/): Denial of service in Schneider Electric Modicon M340 PLC (high 7.5)
- [CVE-2017-6016](https://insights.sbomify.com/CVE-2017-6016/): Privilege escalation in LCDS Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA (high 7.3)
- [CVE-2017-6015](https://insights.sbomify.com/CVE-2017-6015/): Path traversal in FactoryTalk Activation (high 7.8)
- [CVE-2017-6014](https://insights.sbomify.com/CVE-2017-6014/): Denial of service in n/a (high 7.5)
- [CVE-2017-6013](https://insights.sbomify.com/CVE-2017-6013/): SQL injection in n/a (critical 9.8)
- [CVE-2017-6011](https://insights.sbomify.com/CVE-2017-6011/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-6010](https://insights.sbomify.com/CVE-2017-6010/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-6009](https://insights.sbomify.com/CVE-2017-6009/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-6008](https://insights.sbomify.com/CVE-2017-6008/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6007](https://insights.sbomify.com/CVE-2017-6007/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-6005](https://insights.sbomify.com/CVE-2017-6005/): Privilege escalation in n/a (high 7.0)
- [CVE-2017-6004](https://insights.sbomify.com/CVE-2017-6004/): Denial of service in n/a (high 7.5)
- [CVE-2017-6003](https://insights.sbomify.com/CVE-2017-6003/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-6002](https://insights.sbomify.com/CVE-2017-6002/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-6001](https://insights.sbomify.com/CVE-2017-6001/): Race condition in n/a (high 7.0)
- [CVE-2017-5999](https://insights.sbomify.com/CVE-2017-5999/): Weak cryptography in n/a (high 7.5)
- [CVE-2017-5998](https://insights.sbomify.com/CVE-2017-5998/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-5997](https://insights.sbomify.com/CVE-2017-5997/): Denial of service in n/a (high 7.5)
- [CVE-2017-5996](https://insights.sbomify.com/CVE-2017-5996/): Privilege escalation in n/a (high 7.8)
- [CVE-2017-5995](https://insights.sbomify.com/CVE-2017-5995/): Information disclosure in n/a (high 7.5)
- [CVE-2017-5994](https://insights.sbomify.com/CVE-2017-5994/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-5993](https://insights.sbomify.com/CVE-2017-5993/): Denial of service in n/a (medium 6.5)
- [CVE-2017-5992](https://insights.sbomify.com/CVE-2017-5992/): Improper Restriction of XML External Entity Reference in Openpyxl (high 8.2)
- [CVE-2017-5991](https://insights.sbomify.com/CVE-2017-5991/): Null dereference in n/a (high 7.5)
- [CVE-2017-5990](https://insights.sbomify.com/CVE-2017-5990/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-5988](https://insights.sbomify.com/CVE-2017-5988/): Denial of service in n/a (high 7.5)
- [CVE-2017-5987](https://insights.sbomify.com/CVE-2017-5987/): Denial of service in n/a (medium 5.5)
- [CVE-2017-5986](https://insights.sbomify.com/CVE-2017-5986/): Race condition in n/a (medium 5.5)
- [CVE-2017-5985](https://insights.sbomify.com/CVE-2017-5985/): Missing authorization in n/a (low 3.3)
- [CVE-2017-5984](https://insights.sbomify.com/CVE-2017-5984/): Memory corruption in n/a (medium 6.5)
- [CVE-2017-5983](https://insights.sbomify.com/CVE-2017-5983/): Deserialization in n/a (critical 9.8)
- [CVE-2017-5982](https://insights.sbomify.com/CVE-2017-5982/): Path traversal in n/a (high 7.5)
- [CVE-2017-5981](https://insights.sbomify.com/CVE-2017-5981/): Denial of service in n/a (medium 5.5)
- [CVE-2017-5980](https://insights.sbomify.com/CVE-2017-5980/): Null dereference in n/a (medium 5.5)
- [CVE-2017-5979](https://insights.sbomify.com/CVE-2017-5979/): Null dereference in n/a (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/35/