# Vulnerabilities published in 2017


- [CVE-2017-2192](https://insights.sbomify.com/CVE-2017-2192/): Privilege escalation in RW-5100 tool to verify execution environment for Windows 7 (high 7.8)
- [CVE-2017-2191](https://insights.sbomify.com/CVE-2017-2191/): Privilege escalation in RW-5100 driver installer for Windows 7 (high 7.8)
- [CVE-2017-2190](https://insights.sbomify.com/CVE-2017-2190/): Privilege escalation in RW-4040 tool to verify execution environment for Windows 7 (high 7.8)
- [CVE-2017-2189](https://insights.sbomify.com/CVE-2017-2189/): Privilege escalation in RW-4040 driver installer for Windows 7 (high 7.8)
- [CVE-2017-2188](https://insights.sbomify.com/CVE-2017-2188/): Privilege escalation in Installer of Denshinouhin Check System (for Ministry of Agriculture, Forestry and Fisheries Nouson Seibi Jigyou) 2014 March Edition (high 7.8)
- [CVE-2017-2187](https://insights.sbomify.com/CVE-2017-2187/): Cross-site scripting in WP Live Chat Support (medium 6.1)
- [CVE-2017-2186](https://insights.sbomify.com/CVE-2017-2186/): Auth bypass in HOME SPOT CUBE2 (high 8.8)
- [CVE-2017-2185](https://insights.sbomify.com/CVE-2017-2185/): Command injection in HOME SPOT CUBE2 (high 8.8)
- [CVE-2017-2184](https://insights.sbomify.com/CVE-2017-2184/): Memory corruption in HOME SPOT CUBE2 (high 8.8)
- [CVE-2017-2183](https://insights.sbomify.com/CVE-2017-2183/): Command injection in HOME SPOT CUBE2 (high 8.0)
- [CVE-2017-2182](https://insights.sbomify.com/CVE-2017-2182/): Information disclosure in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application (high 8.8)
- [CVE-2017-2181](https://insights.sbomify.com/CVE-2017-2181/): Information disclosure in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application (high 8.8)
- [CVE-2017-2180](https://insights.sbomify.com/CVE-2017-2180/): Information disclosure in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application (medium 4.3)
- [CVE-2017-2179](https://insights.sbomify.com/CVE-2017-2179/): Code injection in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application (high 8.8)
- [CVE-2017-2178](https://insights.sbomify.com/CVE-2017-2178/): Other in Installer of electronic tendering and bid opening system (high 8.8)
- [CVE-2017-2177](https://insights.sbomify.com/CVE-2017-2177/): Other in Installer of Shogyo Touki Denshi Ninsho Software (high 8.8)
- [CVE-2017-2176](https://insights.sbomify.com/CVE-2017-2176/): Other in clock 01 setup.exe (high 7.8)
- [CVE-2017-2175](https://insights.sbomify.com/CVE-2017-2175/): Other in Empirical Project Monitor - eXtended (high 7.8)
- [CVE-2017-2174](https://insights.sbomify.com/CVE-2017-2174/): Cross-site scripting in Empirical Project Monitor - eXtended (medium 6.1)
- [CVE-2017-2173](https://insights.sbomify.com/CVE-2017-2173/): Cross-site scripting in Empirical Project Monitor - eXtended (medium 5.4)
- [CVE-2017-2172](https://insights.sbomify.com/CVE-2017-2172/): Cross-site scripting in Cybozu KUNAI for Android (medium 6.1)
- [CVE-2017-2171](https://insights.sbomify.com/CVE-2017-2171/): Cross-site scripting in Captcha (medium 6.1)
- [CVE-2017-2169](https://insights.sbomify.com/CVE-2017-2169/): Cross-site scripting in MaxButtons (medium 6.1)
- [CVE-2017-2168](https://insights.sbomify.com/CVE-2017-2168/): Cross-site scripting in WP Booking System Free version (medium 6.1)
- [CVE-2017-2167](https://insights.sbomify.com/CVE-2017-2167/): Other in Installer for PrimeDrive Desktop Application (high 7.8)
- [CVE-2017-2166](https://insights.sbomify.com/CVE-2017-2166/): Open redirect in GroupSession (medium 6.1)
- [CVE-2017-2165](https://insights.sbomify.com/CVE-2017-2165/): Information disclosure in GroupSession (medium 6.5)
- [CVE-2017-2164](https://insights.sbomify.com/CVE-2017-2164/): Cross-site scripting in SOY CMS with installer (medium 6.1)
- [CVE-2017-2163](https://insights.sbomify.com/CVE-2017-2163/): Path traversal in SOY CMS (high 7.5)
- [CVE-2017-2162](https://insights.sbomify.com/CVE-2017-2162/): Hardcoded credentials in FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) (medium 4.3)
- [CVE-2017-2161](https://insights.sbomify.com/CVE-2017-2161/): Missing authorization in FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) (low 3.5)
- [CVE-2017-2158](https://insights.sbomify.com/CVE-2017-2158/): Other in Lhaplus (low 3.3)
- [CVE-2017-2157](https://insights.sbomify.com/CVE-2017-2157/): Other in Installer for The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" (high 7.3)
- [CVE-2017-2156](https://insights.sbomify.com/CVE-2017-2156/): Other in Vivaldi installer for Windows (high 7.8)
- [CVE-2017-2155](https://insights.sbomify.com/CVE-2017-2155/): Memory corruption in Hoozin Viewer (high 8.8)
- [CVE-2017-2154](https://insights.sbomify.com/CVE-2017-2154/): Other in justsystems:hanako (high 7.8)
- [CVE-2017-2153](https://insights.sbomify.com/CVE-2017-2153/): Denial of service in SEIL/B1 (high 7.5)
- [CVE-2017-2152](https://insights.sbomify.com/CVE-2017-2152/): Command injection in WNC01WH (medium 6.8)
- [CVE-2017-2151](https://insights.sbomify.com/CVE-2017-2151/): Cross-site scripting in Booking Calendar (medium 6.1)
- [CVE-2017-2150](https://insights.sbomify.com/CVE-2017-2150/): Path traversal in Booking Calendar (medium 5.3)
- [CVE-2017-2149](https://insights.sbomify.com/CVE-2017-2149/): Other in Installer for SDHC Memory Card with embedded TransferJetTM functionality Configuration Software (high 8.8)
- [CVE-2017-2148](https://insights.sbomify.com/CVE-2017-2148/): Cross-site scripting in WN-AC1167GR (medium 5.4)
- [CVE-2017-2147](https://insights.sbomify.com/CVE-2017-2147/): Cross-site scripting in WP Statistics (medium 6.1)
- [CVE-2017-2146](https://insights.sbomify.com/CVE-2017-2146/): Cross-site scripting in Cybozu Garoon (medium 4.8)
- [CVE-2017-2145](https://insights.sbomify.com/CVE-2017-2145/): Auth bypass in Cybozu Garoon (medium 5.4)
- [CVE-2017-2144](https://insights.sbomify.com/CVE-2017-2144/): Other in Cybozu Garoon (medium 5.4)
- [CVE-2017-2143](https://insights.sbomify.com/CVE-2017-2143/): Missing authorization in CS-Cart Japanese Edition (medium 5.3)
- [CVE-2017-2142](https://insights.sbomify.com/CVE-2017-2142/): Memory corruption in WN-G300R3 (critical 9.8)
- [CVE-2017-2141](https://insights.sbomify.com/CVE-2017-2141/): Command injection in WN-G300R3 (high 7.2)
- [CVE-2017-2140](https://insights.sbomify.com/CVE-2017-2140/): Code injection in Tablacus Explorer (high 8.8)
- [CVE-2017-2139](https://insights.sbomify.com/CVE-2017-2139/): Missing authorization in CS-Cart Japanese Edition (medium 5.3)
- [CVE-2017-2138](https://insights.sbomify.com/CVE-2017-2138/): Cross-site request forgery in CS-Cart Japanese Edition (high 8.8)
- [CVE-2017-2137](https://insights.sbomify.com/CVE-2017-2137/): Auth bypass in netgear:prosafe plus configuration utility (low 3.7)
- [CVE-2017-2136](https://insights.sbomify.com/CVE-2017-2136/): Cross-site scripting in WP Statistics (medium 6.1)
- [CVE-2017-2135](https://insights.sbomify.com/CVE-2017-2135/): Cross-site scripting in WP Statistics (medium 6.1)
- [CVE-2017-2134](https://insights.sbomify.com/CVE-2017-2134/): Cross-site scripting in ASSETBASE (medium 6.1)
- [CVE-2017-2133](https://insights.sbomify.com/CVE-2017-2133/): SQL injection in panasonic:kx-hjb1000 firmware (high 8.8)
- [CVE-2017-2132](https://insights.sbomify.com/CVE-2017-2132/): Other in panasonic:kx-hjb1000 firmware (high 7.5)
- [CVE-2017-2131](https://insights.sbomify.com/CVE-2017-2131/): Auth bypass in panasonic:kx-hjb1000 firmware (medium 5.3)
- [CVE-2017-2130](https://insights.sbomify.com/CVE-2017-2130/): Other in The installer of PhishWall Client Internet Explorer version (high 7.8)
- [CVE-2017-2128](https://insights.sbomify.com/CVE-2017-2128/): Command injection in Security guide for website operators (high 8.8)
- [CVE-2017-2127](https://insights.sbomify.com/CVE-2017-2127/): Cross-site scripting in YOP Poll (medium 5.4)
- [CVE-2017-2126](https://insights.sbomify.com/CVE-2017-2126/): Auth bypass in WAPM-1166D (critical 9.8)
- [CVE-2017-2125](https://insights.sbomify.com/CVE-2017-2125/): Privilege escalation in CentreCOM (high 8.8)
- [CVE-2017-2124](https://insights.sbomify.com/CVE-2017-2124/): Cross-site scripting in OneThird CMS (medium 6.1)
- [CVE-2017-2123](https://insights.sbomify.com/CVE-2017-2123/): Cross-site scripting in OneThird CMS (medium 6.1)
- [CVE-2017-2122](https://insights.sbomify.com/CVE-2017-2122/): Cross-site scripting in Nessus (medium 5.4)
- [CVE-2017-2120](https://insights.sbomify.com/CVE-2017-2120/): SQL injection in WBCE CMS (high 7.2)
- [CVE-2017-2119](https://insights.sbomify.com/CVE-2017-2119/): Path traversal in WBCE CMS (high 8.6)
- [CVE-2017-2118](https://insights.sbomify.com/CVE-2017-2118/): Cross-site scripting in WBCE CMS (medium 6.1)
- [CVE-2017-2117](https://insights.sbomify.com/CVE-2017-2117/): Path traversal in CubeCart (medium 4.9)
- [CVE-2017-2116](https://insights.sbomify.com/CVE-2017-2116/): Missing authorization in Cybozu Office (medium 4.3)
- [CVE-2017-2115](https://insights.sbomify.com/CVE-2017-2115/): Missing authorization in Cybozu Office (medium 4.3)
- [CVE-2017-2114](https://insights.sbomify.com/CVE-2017-2114/): Cross-site scripting in Cybozu Office (medium 5.4)
- [CVE-2017-2113](https://insights.sbomify.com/CVE-2017-2113/): Memory corruption in TS-PTCAM/POE (high 8.8)
- [CVE-2017-2112](https://insights.sbomify.com/CVE-2017-2112/): Command injection in TS-PTCAM/POE (high 8.8)
- [CVE-2017-2111](https://insights.sbomify.com/CVE-2017-2111/): Other in TS-PTCAM/POE (medium 6.1)
- [CVE-2017-2110](https://insights.sbomify.com/CVE-2017-2110/): Security feature bypass in Access CX App for Android (medium 5.9)
- [CVE-2017-2109](https://insights.sbomify.com/CVE-2017-2109/): Information disclosure in Cybozu KUNAI for Android (low 2.5)
- [CVE-2017-2108](https://insights.sbomify.com/CVE-2017-2108/): Other in PrimeDrive Desktop Application (high 7.8)
- [CVE-2017-2107](https://insights.sbomify.com/CVE-2017-2107/): Other in Self-extracting archive files created by 7-ZIP32.DLL (high 7.8)
- [CVE-2017-2106](https://insights.sbomify.com/CVE-2017-2106/): Cross-site scripting in Webmin (medium 6.1)
- [CVE-2017-2105](https://insights.sbomify.com/CVE-2017-2105/): Weak cryptography in TVer App for Android (medium 5.9)
- [CVE-2017-2104](https://insights.sbomify.com/CVE-2017-2104/): Weak cryptography in Business LaLa Call App for Android (medium 5.9)
- [CVE-2017-2103](https://insights.sbomify.com/CVE-2017-2103/): Weak cryptography in LaLa Call App for Android (medium 5.9)
- [CVE-2017-2102](https://insights.sbomify.com/CVE-2017-2102/): Cross-site request forgery in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application (high 8.8)
- [CVE-2017-2101](https://insights.sbomify.com/CVE-2017-2101/): Auth bypass in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application (high 7.3)
- [CVE-2017-2100](https://insights.sbomify.com/CVE-2017-2100/): Security feature bypass in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application (medium 6.3)
- [CVE-2017-2099](https://insights.sbomify.com/CVE-2017-2099/): Other in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application (medium 6.3)
- [CVE-2017-2098](https://insights.sbomify.com/CVE-2017-2098/): Path traversal in CubeCart (medium 6.5)
- [CVE-2017-2097](https://insights.sbomify.com/CVE-2017-2097/): Cross-site request forgery in Knowledge (high 8.8)
- [CVE-2017-2096](https://insights.sbomify.com/CVE-2017-2096/): smalruby and smalruby-editor vulnerable to OS Command Injection (critical 9.8)
- [CVE-2017-2095](https://insights.sbomify.com/CVE-2017-2095/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2017-2094](https://insights.sbomify.com/CVE-2017-2094/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2017-2093](https://insights.sbomify.com/CVE-2017-2093/): Information disclosure in Cybozu Garoon (medium 4.3)
- [CVE-2017-2092](https://insights.sbomify.com/CVE-2017-2092/): Cross-site scripting in Cybozu Garoon (medium 5.4)
- [CVE-2017-2091](https://insights.sbomify.com/CVE-2017-2091/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2017-2090](https://insights.sbomify.com/CVE-2017-2090/): Path traversal in Cybozu Garoon (medium 6.5)
- [CVE-2017-20290](https://insights.sbomify.com/CVE-2017-20290/): Discourse < 1.9.0.beta13 Reflected XSS via /email/unsubscribed (medium 5.1)
- [CVE-2017-20289](https://insights.sbomify.com/CVE-2017-20289/): Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local File Inclusion via step parameter (high 7.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/60/