# Vulnerabilities published in 2017


- [CVE-2017-2311](https://insights.sbomify.com/CVE-2017-2311/): Denial of service in Junos Space (medium 5.3)
- [CVE-2017-2310](https://insights.sbomify.com/CVE-2017-2310/): Security feature bypass in Junos Space (medium 5.3)
- [CVE-2017-2309](https://insights.sbomify.com/CVE-2017-2309/): Information disclosure in Junos Space (medium 5.9)
- [CVE-2017-2308](https://insights.sbomify.com/CVE-2017-2308/): XML external entity in Junos Space (medium 6.5)
- [CVE-2017-2307](https://insights.sbomify.com/CVE-2017-2307/): Cross-site scripting in Junos Space (medium 6.1)
- [CVE-2017-2306](https://insights.sbomify.com/CVE-2017-2306/): Missing authorization in Junos Space (high 8.8)
- [CVE-2017-2305](https://insights.sbomify.com/CVE-2017-2305/): Privilege escalation in Junos Space (high 8.8)
- [CVE-2017-2304](https://insights.sbomify.com/CVE-2017-2304/): Information disclosure in Junos OS running on QFX3500, QFX3600, QFX5100, QFX5200, EX4300, EX4600 devices (high 7.5)
- [CVE-2017-2303](https://insights.sbomify.com/CVE-2017-2303/): Denial of service in Junos OS where RIP is enabled (high 7.5)
- [CVE-2017-2302](https://insights.sbomify.com/CVE-2017-2302/): Denial of service in Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options (high 7.5)
- [CVE-2017-2301](https://insights.sbomify.com/CVE-2017-2301/): Denial of service in Junos OS with DHCPv6 enabled (high 7.5)
- [CVE-2017-2300](https://insights.sbomify.com/CVE-2017-2300/): Denial of service in Junos OS on SRX Series Services Gateways chassis cluster (high 7.5)
- [CVE-2017-2299](https://insights.sbomify.com/CVE-2017-2299/): Misconfiguration in puppetlabs-apache (high 7.5)
- [CVE-2017-2298](https://insights.sbomify.com/CVE-2017-2298/): Path traversal in mcollective (medium 6.5)
- [CVE-2017-2297](https://insights.sbomify.com/CVE-2017-2297/): Auth bypass in Puppet Enterprise (high 7.5)
- [CVE-2017-2296](https://insights.sbomify.com/CVE-2017-2296/): Denial of service in Puppet Enterprise (medium 6.5)
- [CVE-2017-2295](https://insights.sbomify.com/CVE-2017-2295/): Deserialization in Puppet server (high 8.2)
- [CVE-2017-2294](https://insights.sbomify.com/CVE-2017-2294/): Information disclosure in Puppet Enterprise (high 7.5)
- [CVE-2017-2293](https://insights.sbomify.com/CVE-2017-2293/): Misconfiguration in Puppet Enterprise (medium 4.9)
- [CVE-2017-2292](https://insights.sbomify.com/CVE-2017-2292/): Deserialization in mcollective, Puppet, Puppet Enterprise (critical 9.0)
- [CVE-2017-2290](https://insights.sbomify.com/CVE-2017-2290/): Privilege escalation in mcollective-puppet-agent plugin (high 8.8)
- [CVE-2017-2289](https://insights.sbomify.com/CVE-2017-2289/): Other in Installer of Qua station connection tool for Windows (high 7.8)
- [CVE-2017-2288](https://insights.sbomify.com/CVE-2017-2288/): Other in LhaForge (high 7.8)
- [CVE-2017-2287](https://insights.sbomify.com/CVE-2017-2287/): Privilege escalation in NFC Port Software remover (high 7.8)
- [CVE-2017-2286](https://insights.sbomify.com/CVE-2017-2286/): Other in NFC Net Installer (high 7.8)
- [CVE-2017-2285](https://insights.sbomify.com/CVE-2017-2285/): Cross-site scripting in Simple Custom CSS and JS (medium 6.1)
- [CVE-2017-2284](https://insights.sbomify.com/CVE-2017-2284/): Cross-site scripting in Popup Maker (medium 6.1)
- [CVE-2017-2283](https://insights.sbomify.com/CVE-2017-2283/): Hardcoded credentials in WN-G300R3 (high 8.0)
- [CVE-2017-2282](https://insights.sbomify.com/CVE-2017-2282/): Memory corruption in WN-AX1167GR (medium 6.8)
- [CVE-2017-2281](https://insights.sbomify.com/CVE-2017-2281/): Command injection in WN-AX1167GR (high 8.8)
- [CVE-2017-2280](https://insights.sbomify.com/CVE-2017-2280/): Hardcoded credentials in WN-AX1167GR (high 8.8)
- [CVE-2017-2279](https://insights.sbomify.com/CVE-2017-2279/): Other in Tween (high 7.8)
- [CVE-2017-2278](https://insights.sbomify.com/CVE-2017-2278/): Weak cryptography in RBB SPEED TEST App for Android (medium 5.9)
- [CVE-2017-2277](https://insights.sbomify.com/CVE-2017-2277/): Auth bypass in WG-C10 (critical 9.1)
- [CVE-2017-2276](https://insights.sbomify.com/CVE-2017-2276/): Memory corruption in WG-C10 (high 7.2)
- [CVE-2017-2275](https://insights.sbomify.com/CVE-2017-2275/): Command injection in WG-C10 (high 7.2)
- [CVE-2017-2274](https://insights.sbomify.com/CVE-2017-2274/): Cross-site scripting in WMR-433 (medium 6.1)
- [CVE-2017-2273](https://insights.sbomify.com/CVE-2017-2273/): Cross-site request forgery in WMR-433 (high 8.8)
- [CVE-2017-2272](https://insights.sbomify.com/CVE-2017-2272/): Other in Self-extracting encrypted files created by AttacheCase (high 7.8)
- [CVE-2017-2271](https://insights.sbomify.com/CVE-2017-2271/): Other in Self-extracting encrypted files created by AttacheCase (high 7.8)
- [CVE-2017-2270](https://insights.sbomify.com/CVE-2017-2270/): Other in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable (high 7.8)
- [CVE-2017-2269](https://insights.sbomify.com/CVE-2017-2269/): Other in FileCapsule Deluxe Portable (high 7.8)
- [CVE-2017-2268](https://insights.sbomify.com/CVE-2017-2268/): Other in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable (high 7.8)
- [CVE-2017-2267](https://insights.sbomify.com/CVE-2017-2267/): Other in FileCapsule Deluxe Portable (high 7.8)
- [CVE-2017-2266](https://insights.sbomify.com/CVE-2017-2266/): Other in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable (high 7.8)
- [CVE-2017-2265](https://insights.sbomify.com/CVE-2017-2265/): Other in FileCapsule Deluxe Portable (high 7.8)
- [CVE-2017-2258](https://insights.sbomify.com/CVE-2017-2258/): Path traversal in Cybozu Garoon (medium 4.3)
- [CVE-2017-2257](https://insights.sbomify.com/CVE-2017-2257/): Cross-site scripting in Cybozu Garoon (medium 6.1)
- [CVE-2017-2256](https://insights.sbomify.com/CVE-2017-2256/): Cross-site scripting in Cybozu Garoon (medium 5.4)
- [CVE-2017-2255](https://insights.sbomify.com/CVE-2017-2255/): Cross-site scripting in Cybozu Garoon (medium 5.4)
- [CVE-2017-2254](https://insights.sbomify.com/CVE-2017-2254/): Denial of service in Cybozu Garoon (medium 4.9)
- [CVE-2017-2253](https://insights.sbomify.com/CVE-2017-2253/): Other in Installer of Yahoo! Toolbar (for Internet explorer) (high 7.8)
- [CVE-2017-2252](https://insights.sbomify.com/CVE-2017-2252/): Other in Self-extracting archive files created by File Compact (high 7.8)
- [CVE-2017-2249](https://insights.sbomify.com/CVE-2017-2249/): Other in Self-extracting archive files created by Lhaz+ (high 7.8)
- [CVE-2017-2248](https://insights.sbomify.com/CVE-2017-2248/): Other in Installer of Lhaz+ (high 7.8)
- [CVE-2017-2247](https://insights.sbomify.com/CVE-2017-2247/): Other in Self-extracting archive files created by Lhaz (high 7.8)
- [CVE-2017-2246](https://insights.sbomify.com/CVE-2017-2246/): Other in Installer of Lhaz (high 7.8)
- [CVE-2017-2245](https://insights.sbomify.com/CVE-2017-2245/): Path traversal in Shortcodes Ultimate (medium 5.0)
- [CVE-2017-2244](https://insights.sbomify.com/CVE-2017-2244/): Cross-site request forgery in MFC-J960DWN (high 8.8)
- [CVE-2017-2243](https://insights.sbomify.com/CVE-2017-2243/): Cross-site scripting in Responsive Lightbox (medium 6.1)
- [CVE-2017-2242](https://insights.sbomify.com/CVE-2017-2242/): Privilege escalation in Flets Setsuzoku Tool for Windows (high 7.8)
- [CVE-2017-2241](https://insights.sbomify.com/CVE-2017-2241/): SQL injection in AssetView for MacOS (medium 6.3)
- [CVE-2017-2240](https://insights.sbomify.com/CVE-2017-2240/): Path traversal in AssetView for MacOS (medium 6.5)
- [CVE-2017-2239](https://insights.sbomify.com/CVE-2017-2239/): Information disclosure in Marp (medium 5.3)
- [CVE-2017-2238](https://insights.sbomify.com/CVE-2017-2238/): Cross-site request forgery in Toshiba Home gateway HEM-GW16A (high 8.8)
- [CVE-2017-2237](https://insights.sbomify.com/CVE-2017-2237/): Command injection in Toshiba Home gateway HEM-GW16A (critical 9.8)
- [CVE-2017-2236](https://insights.sbomify.com/CVE-2017-2236/): Hardcoded credentials in Toshiba Home gateway HEM-GW16A (critical 9.8)
- [CVE-2017-2235](https://insights.sbomify.com/CVE-2017-2235/): Auth bypass in Toshiba Home gateway HEM-GW16A (critical 9.8)
- [CVE-2017-2234](https://insights.sbomify.com/CVE-2017-2234/): Auth bypass in Toshiba Home gateway HEM-GW16A (critical 9.8)
- [CVE-2017-2233](https://insights.sbomify.com/CVE-2017-2233/): Other in Installer of PDF Digital Signature Plugin (high 7.8)
- [CVE-2017-2232](https://insights.sbomify.com/CVE-2017-2232/): Other in Installer of Shinseiyo Sogo Soft (high 7.8)
- [CVE-2017-2231](https://insights.sbomify.com/CVE-2017-2231/): Other in The installer of MLIT DenshiSeikabutsuSakuseiShienKensa system (high 7.8)
- [CVE-2017-2230](https://insights.sbomify.com/CVE-2017-2230/): Other in Douro Kouji Kanseizutou Check Program (high 7.8)
- [CVE-2017-2229](https://insights.sbomify.com/CVE-2017-2229/): Other in Douroshisetu Kihon Data Sakusei System (high 7.8)
- [CVE-2017-2228](https://insights.sbomify.com/CVE-2017-2228/): Other in Teikihoukokusho Sakuseishien Tool (high 7.8)
- [CVE-2017-2227](https://insights.sbomify.com/CVE-2017-2227/): Other in The installer of Charamin OMP (high 7.8)
- [CVE-2017-2226](https://insights.sbomify.com/CVE-2017-2226/): Other in Setup file of advance preparation for e-Tax software (WEB version) (high 7.8)
- [CVE-2017-2225](https://insights.sbomify.com/CVE-2017-2225/): Privilege escalation in EbidSettingChecker.exe (critical 9.8)
- [CVE-2017-2224](https://insights.sbomify.com/CVE-2017-2224/): Cross-site scripting in Event Calendar WD (medium 6.1)
- [CVE-2017-2223](https://insights.sbomify.com/CVE-2017-2223/): Cross-site request forgery in TS-PTCAM (high 8.8)
- [CVE-2017-2222](https://insights.sbomify.com/CVE-2017-2222/): Cross-site scripting in WP-Members (medium 6.1)
- [CVE-2017-2221](https://insights.sbomify.com/CVE-2017-2221/): Other in Installer of Baidu IME (high 7.8)
- [CVE-2017-2220](https://insights.sbomify.com/CVE-2017-2220/): Other in Installer of CASL II simulator(self-extract format) (high 7.8)
- [CVE-2017-2219](https://insights.sbomify.com/CVE-2017-2219/): Privilege escalation in baidu:simeji (high 7.8)
- [CVE-2017-2218](https://insights.sbomify.com/CVE-2017-2218/): Privilege escalation in Installer of QuickTime for Windows (high 7.8)
- [CVE-2017-2217](https://insights.sbomify.com/CVE-2017-2217/): Open redirect in WordPress Download Manager (medium 6.1)
- [CVE-2017-2216](https://insights.sbomify.com/CVE-2017-2216/): Cross-site scripting in WordPress Download Manager (medium 6.1)
- [CVE-2017-2215](https://insights.sbomify.com/CVE-2017-2215/): Other in Installer of "Setup file of advance preparation" (jizen setup.exe) (high 7.8)
- [CVE-2017-2214](https://insights.sbomify.com/CVE-2017-2214/): Other in AppCheck (high 8.4)
- [CVE-2017-2213](https://insights.sbomify.com/CVE-2017-2213/): Other in SemiDynaEXE (SemiDynaEXE2008.EXE) (high 7.8)
- [CVE-2017-2212](https://insights.sbomify.com/CVE-2017-2212/): Other in TKY2JGD (TKY2JGD1379.EXE) (high 7.8)
- [CVE-2017-2211](https://insights.sbomify.com/CVE-2017-2211/): Other in PatchJGD (Hyoko) (PatchJGDh101.EXE) (high 7.8)
- [CVE-2017-2210](https://insights.sbomify.com/CVE-2017-2210/): Other in PatchJGD (PatchJGD101.EXE) (high 7.8)
- [CVE-2017-2209](https://insights.sbomify.com/CVE-2017-2209/): Other in Installer of Houkokusyo Sakusei Shien Tool (high 7.8)
- [CVE-2017-2208](https://insights.sbomify.com/CVE-2017-2208/): Other in Installer of electronic tendering and bid opening system (high 7.8)
- [CVE-2017-2207](https://insights.sbomify.com/CVE-2017-2207/): Other in The installer of SaAT Personal (high 8.8)
- [CVE-2017-2206](https://insights.sbomify.com/CVE-2017-2206/): Other in The installer of SaAT Netizen (high 8.8)
- [CVE-2017-2195](https://insights.sbomify.com/CVE-2017-2195/): SQL injection in Multi Feed Reader (high 8.8)
- [CVE-2017-2194](https://insights.sbomify.com/CVE-2017-2194/): Cross-site scripting in Source code security studying tool iCodeChecker (medium 6.1)
- [CVE-2017-2193](https://insights.sbomify.com/CVE-2017-2193/): Other in The installer of Tera Term (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/59/