# Vulnerabilities published in 2017


- [CVE-2017-5070](https://insights.sbomify.com/CVE-2017-5070/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2017-5069](https://insights.sbomify.com/CVE-2017-5069/): Security feature bypass in Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android (medium 6.1)
- [CVE-2017-5068](https://insights.sbomify.com/CVE-2017-5068/): Race condition in Google Chrome prior to 58.0.3029.96 for Mac, Windows and Linux (high 7.5)
- [CVE-2017-5067](https://insights.sbomify.com/CVE-2017-5067/): Security feature bypass in Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac (medium 6.5)
- [CVE-2017-5066](https://insights.sbomify.com/CVE-2017-5066/): Security feature bypass in Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android (medium 6.5)
- [CVE-2017-5065](https://insights.sbomify.com/CVE-2017-5065/): Security feature bypass in Google Chrome prior to 58.0.3029.81 for Windows and Mac (medium 4.7)
- [CVE-2017-5064](https://insights.sbomify.com/CVE-2017-5064/): Memory corruption in Google Chrome prior to 58.0.3029.81 for Windows (high 8.8)
- [CVE-2017-5063](https://insights.sbomify.com/CVE-2017-5063/): Integer overflow in Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android (high 8.8)
- [CVE-2017-5062](https://insights.sbomify.com/CVE-2017-5062/): Use after free in Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android (high 8.8)
- [CVE-2017-5061](https://insights.sbomify.com/CVE-2017-5061/): Race condition in Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac (medium 5.3)
- [CVE-2017-5060](https://insights.sbomify.com/CVE-2017-5060/): Security feature bypass in Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android (medium 6.5)
- [CVE-2017-5059](https://insights.sbomify.com/CVE-2017-5059/): Memory corruption in Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android (high 8.8)
- [CVE-2017-5058](https://insights.sbomify.com/CVE-2017-5058/): Use after free in Google Chrome prior to 58.0.3029.81 for Windows (high 8.8)
- [CVE-2017-5057](https://insights.sbomify.com/CVE-2017-5057/): Memory corruption in Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android (high 8.8)
- [CVE-2017-5056](https://insights.sbomify.com/CVE-2017-5056/): Use after free in Google Chrome prior to 57.0.2987.133 for Linux, Windows and Mac, and 57.0.2987.132 for Android (high 8.8)
- [CVE-2017-5055](https://insights.sbomify.com/CVE-2017-5055/): Use after free in Google Chrome prior to 57.0.2987.133 for Linux and Windows (high 8.8)
- [CVE-2017-5054](https://insights.sbomify.com/CVE-2017-5054/): Memory corruption in Google Chrome prior to 57.0.2987.133 for Linux, Windows and Mac, and 57.0.2987.132 for Android (high 8.8)
- [CVE-2017-5053](https://insights.sbomify.com/CVE-2017-5053/): Memory corruption in Google Chrome prior to 57.0.2987.133 for Linux, Windows and Mac, and 57.0.2987.132 for Android (critical 9.6)
- [CVE-2017-5052](https://insights.sbomify.com/CVE-2017-5052/): Memory corruption in Google Chrome prior to 57.0.2987.133 for Mac, Windows and Linux, and 57.0.2987.132 for Android (high 8.8)
- [CVE-2017-5051](https://insights.sbomify.com/CVE-2017-5051/): Integer overflow in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (high 8.8)
- [CVE-2017-5050](https://insights.sbomify.com/CVE-2017-5050/): Integer overflow in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (high 8.8)
- [CVE-2017-5049](https://insights.sbomify.com/CVE-2017-5049/): Integer overflow in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (high 8.8)
- [CVE-2017-5048](https://insights.sbomify.com/CVE-2017-5048/): Integer overflow in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (high 8.8)
- [CVE-2017-5047](https://insights.sbomify.com/CVE-2017-5047/): Integer overflow in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (high 8.8)
- [CVE-2017-5046](https://insights.sbomify.com/CVE-2017-5046/): Security feature bypass in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (medium 4.3)
- [CVE-2017-5045](https://insights.sbomify.com/CVE-2017-5045/): Cross-site scripting in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (medium 6.1)
- [CVE-2017-5044](https://insights.sbomify.com/CVE-2017-5044/): Memory corruption in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (medium 6.3)
- [CVE-2017-5043](https://insights.sbomify.com/CVE-2017-5043/): Use after free in Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac (high 8.8)
- [CVE-2017-5042](https://insights.sbomify.com/CVE-2017-5042/): Information disclosure in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (medium 5.7)
- [CVE-2017-5041](https://insights.sbomify.com/CVE-2017-5041/): Other in Google Chrome prior to 57.0.2987.100 (medium 4.3)
- [CVE-2017-5040](https://insights.sbomify.com/CVE-2017-5040/): Information disclosure in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (medium 4.3)
- [CVE-2017-5039](https://insights.sbomify.com/CVE-2017-5039/): Use after free in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (high 7.8)
- [CVE-2017-5038](https://insights.sbomify.com/CVE-2017-5038/): Use after free in Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac (medium 6.3)
- [CVE-2017-5037](https://insights.sbomify.com/CVE-2017-5037/): Integer overflow in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (high 7.8)
- [CVE-2017-5036](https://insights.sbomify.com/CVE-2017-5036/): Use after free in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (high 7.8)
- [CVE-2017-5035](https://insights.sbomify.com/CVE-2017-5035/): Race condition in Google Chrome prior to 57.0.2987.98 for Windows and Mac (high 8.1)
- [CVE-2017-5034](https://insights.sbomify.com/CVE-2017-5034/): Use after free in Google Chrome prior to 57.0.2987.98 for Linux and Windows (high 8.8)
- [CVE-2017-5033](https://insights.sbomify.com/CVE-2017-5033/): Security feature bypass in Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android (medium 4.3)
- [CVE-2017-5032](https://insights.sbomify.com/CVE-2017-5032/): Memory corruption in Google Chrome prior to 57.0.2987.98 for Windows (high 8.8)
- [CVE-2017-5031](https://insights.sbomify.com/CVE-2017-5031/): Use after free in Firefox (high 8.8)
- [CVE-2017-5030](https://insights.sbomify.com/CVE-2017-5030/): Google Chromium V8 Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2017-5029](https://insights.sbomify.com/CVE-2017-5029/): Nokogiri implementation of libxslt lacks integer overflow checks (high 8.8)
- [CVE-2017-5028](https://insights.sbomify.com/CVE-2017-5028/): Information disclosure in Chrome (medium 6.5)
- [CVE-2017-5027](https://insights.sbomify.com/CVE-2017-5027/): Security feature bypass in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 4.3)
- [CVE-2017-5026](https://insights.sbomify.com/CVE-2017-5026/): Security feature bypass in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac (medium 4.3)
- [CVE-2017-5025](https://insights.sbomify.com/CVE-2017-5025/): Memory corruption in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac (medium 5.5)
- [CVE-2017-5024](https://insights.sbomify.com/CVE-2017-5024/): Memory corruption in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac (medium 5.5)
- [CVE-2017-5023](https://insights.sbomify.com/CVE-2017-5023/): Null dereference in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 4.3)
- [CVE-2017-5022](https://insights.sbomify.com/CVE-2017-5022/): Security feature bypass in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 4.3)
- [CVE-2017-5021](https://insights.sbomify.com/CVE-2017-5021/): Use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 4.3)
- [CVE-2017-5020](https://insights.sbomify.com/CVE-2017-5020/): Security feature bypass in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 6.1)
- [CVE-2017-5019](https://insights.sbomify.com/CVE-2017-5019/): Use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 6.3)
- [CVE-2017-5018](https://insights.sbomify.com/CVE-2017-5018/): Cross-site scripting in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 6.1)
- [CVE-2017-5017](https://insights.sbomify.com/CVE-2017-5017/): Information disclosure in Google Chrome prior to 56.0.2924.76 for Mac (medium 4.3)
- [CVE-2017-5016](https://insights.sbomify.com/CVE-2017-5016/): Other in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 6.5)
- [CVE-2017-5015](https://insights.sbomify.com/CVE-2017-5015/): Security feature bypass in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 6.5)
- [CVE-2017-5014](https://insights.sbomify.com/CVE-2017-5014/): Memory corruption in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 6.3)
- [CVE-2017-5013](https://insights.sbomify.com/CVE-2017-5013/): Security feature bypass in Google Chrome prior to 56.0.2924.76 for Linux (medium 6.5)
- [CVE-2017-5012](https://insights.sbomify.com/CVE-2017-5012/): Memory corruption in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (high 8.8)
- [CVE-2017-5011](https://insights.sbomify.com/CVE-2017-5011/): Information disclosure in Google Chrome prior to 56.0.2924.76 for Windows (medium 6.5)
- [CVE-2017-5010](https://insights.sbomify.com/CVE-2017-5010/): Cross-site scripting in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 6.1)
- [CVE-2017-5009](https://insights.sbomify.com/CVE-2017-5009/): Memory corruption in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (high 8.8)
- [CVE-2017-5008](https://insights.sbomify.com/CVE-2017-5008/): Cross-site scripting in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 6.1)
- [CVE-2017-5007](https://insights.sbomify.com/CVE-2017-5007/): Cross-site scripting in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 6.1)
- [CVE-2017-5006](https://insights.sbomify.com/CVE-2017-5006/): Cross-site scripting in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android (medium 6.1)
- [CVE-2017-5005](https://insights.sbomify.com/CVE-2017-5005/): Memory corruption in quickheal:antivirus pro (critical 9.8)
- [CVE-2017-5004](https://insights.sbomify.com/CVE-2017-5004/): Cross-site scripting in RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels, RSA Via Lifecycle and Governance version 7.0, all patch levels, RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels (medium 5.4)
- [CVE-2017-5003](https://insights.sbomify.com/CVE-2017-5003/): Cross-site scripting in RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels, RSA Via Lifecycle and Governance version 7.0, all patch levels, RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels (medium 6.1)
- [CVE-2017-5002](https://insights.sbomify.com/CVE-2017-5002/): Open redirect in RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 (medium 6.1)
- [CVE-2017-5001](https://insights.sbomify.com/CVE-2017-5001/): Information disclosure in RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 (medium 4.3)
- [CVE-2017-5000](https://insights.sbomify.com/CVE-2017-5000/): Information disclosure in RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 (medium 4.3)
- [CVE-2017-4999](https://insights.sbomify.com/CVE-2017-4999/): Missing authorization in RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 (medium 6.5)
- [CVE-2017-4998](https://insights.sbomify.com/CVE-2017-4998/): Cross-site request forgery in RSA Archer version 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 (high 8.8)
- [CVE-2017-4997](https://insights.sbomify.com/CVE-2017-4997/): Code injection in VASA Provider Virtual Appliance versions 8.3.x and prior (critical 9.8)
- [CVE-2017-4995](https://insights.sbomify.com/CVE-2017-4995/): Deserialization of Untrusted Data in Spring Security (high 8.1)
- [CVE-2017-4994](https://insights.sbomify.com/CVE-2017-4994/): Other in Cloud Foundry (high 7.5)
- [CVE-2017-4992](https://insights.sbomify.com/CVE-2017-4992/): Cloud Foundry UAA privilege escalation with user invitations (critical 9.8)
- [CVE-2017-4991](https://insights.sbomify.com/CVE-2017-4991/): Cloud Foundry UAA password reset vulnerability (high 7.2)
- [CVE-2017-4990](https://insights.sbomify.com/CVE-2017-4990/): File upload in EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226 (critical 9.8)
- [CVE-2017-4989](https://insights.sbomify.com/CVE-2017-4989/): Auth bypass in EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401 (critical 9.8)
- [CVE-2017-4988](https://insights.sbomify.com/CVE-2017-4988/): Privilege escalation in EMC Isilon OneFS 8.0.1.0, 8.0.0 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x (high 7.2)
- [CVE-2017-4987](https://insights.sbomify.com/CVE-2017-4987/): Other in EMC VNX2 versions prior to OE for File 8.1.9.211, EMC VNX1 versions prior to OE for File 7.1.80.8 (high 7.3)
- [CVE-2017-4986](https://insights.sbomify.com/CVE-2017-4986/): Auth bypass in EMC ESRS Virtual Edition EMC ESRS VE 3.18 or earlier (medium 5.3)
- [CVE-2017-4985](https://insights.sbomify.com/CVE-2017-4985/): Privilege escalation in EMC VNX2 versions prior to OE for File 8.1.9.211, EMC VNX1 versions prior to OE for File 7.1.80.8 (high 7.8)
- [CVE-2017-4984](https://insights.sbomify.com/CVE-2017-4984/): Command injection in EMC VNX2 versions prior to OE for File 8.1.9.211, EMC VNX1 versions prior to OE for File 7.1.80.8 (critical 9.8)
- [CVE-2017-4983](https://insights.sbomify.com/CVE-2017-4983/): Privilege escalation in EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 (medium 6.7)
- [CVE-2017-4982](https://insights.sbomify.com/CVE-2017-4982/): Privilege escalation in EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0 and 8.1.0 (critical 9.8)
- [CVE-2017-4981](https://insights.sbomify.com/CVE-2017-4981/): Security feature bypass in RSA BSAFE Cert-C RSA BSAFE Cert-C version 2.9.0.5 (high 7.5)
- [CVE-2017-4980](https://insights.sbomify.com/CVE-2017-4980/): Path traversal in EMC Isilon OneFS EMC Isilon OneFS 8.0.0 8.0.0.1, EMC Isilon OneFS 7.2.0 - 7.2.1.3, EMC Isilon OneFS 7.1.0 - 7.1.1.10 (high 7.5)
- [CVE-2017-4979](https://insights.sbomify.com/CVE-2017-4979/): Misconfiguration in EMC Isilon OneFS OneFS 8.0.1.0, OneFS 8.0.0.0 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, OneFS 7.2.0.x (high 7.1)
- [CVE-2017-4978](https://insights.sbomify.com/CVE-2017-4978/): Cross-site scripting in EMC RSA Adaptive Authentication (On-Premise) RSA Adaptive Authentication (On-Premise) versions prior to 7.3 P2 (exclusive) (medium 5.4)
- [CVE-2017-4977](https://insights.sbomify.com/CVE-2017-4977/): Information disclosure in RSA Archer Security Operations Management with RSA Unified Collector Framework versions prior to 1.3.1.52 (high 7.0)
- [CVE-2017-4976](https://insights.sbomify.com/CVE-2017-4976/): Hardcoded credentials in EMC ESRS Policy Manager prior to 6.8 (critical 9.8)
- [CVE-2017-4975](https://insights.sbomify.com/CVE-2017-4975/): Misconfiguration in PCF Tile Generator (high 7.5)
- [CVE-2017-4974](https://insights.sbomify.com/CVE-2017-4974/): Blind SQL Injection with privileged Cloud Foundry UAA endpoints (medium 6.5)
- [CVE-2017-4973](https://insights.sbomify.com/CVE-2017-4973/): Cloud Foundry UAA Privilege Escalation (high 8.8)
- [CVE-2017-4972](https://insights.sbomify.com/CVE-2017-4972/): SQL injection in Cloud Foundry UAA (high 7.5)
- [CVE-2017-4971](https://insights.sbomify.com/CVE-2017-4971/): Insecure Default Initialization of Resource in Pivotal Spring Web Flow (medium 5.9)
- [CVE-2017-4970](https://insights.sbomify.com/CVE-2017-4970/): Misconfiguration in Cloud Foundry (medium 5.9)
- [CVE-2017-4969](https://insights.sbomify.com/CVE-2017-4969/): Denial of service in Cloud Foundry Cloud Controller cf-release versions prior to v255 (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/43/