# Vulnerabilities published in 2017


- [CVE-2017-18698](https://insights.sbomify.com/CVE-2017-18698/): Memory corruption in netgear:r6100 firmware (medium 6.8)
- [CVE-2017-18697](https://insights.sbomify.com/CVE-2017-18697/): Memory corruption in netgear:r7800 firmware (medium 6.8)
- [CVE-2017-18696](https://insights.sbomify.com/CVE-2017-18696/): Memory corruption in google:android (critical 9.8)
- [CVE-2017-18695](https://insights.sbomify.com/CVE-2017-18695/): Information disclosure in google:android (medium 6.5)
- [CVE-2017-18694](https://insights.sbomify.com/CVE-2017-18694/): Information disclosure in google:android (medium 5.3)
- [CVE-2017-18693](https://insights.sbomify.com/CVE-2017-18693/): Memory corruption in google:android (critical 9.8)
- [CVE-2017-18692](https://insights.sbomify.com/CVE-2017-18692/): Race condition in google:android (high 8.1)
- [CVE-2017-18691](https://insights.sbomify.com/CVE-2017-18691/): Memory corruption in google:android (critical 9.8)
- [CVE-2017-18690](https://insights.sbomify.com/CVE-2017-18690/): Memory corruption in google:android (critical 9.8)
- [CVE-2017-18689](https://insights.sbomify.com/CVE-2017-18689/): Security feature bypass in google:android (high 7.5)
- [CVE-2017-18688](https://insights.sbomify.com/CVE-2017-18688/): Information disclosure in google:android (high 7.5)
- [CVE-2017-18687](https://insights.sbomify.com/CVE-2017-18687/): Information disclosure in google:android (medium 5.3)
- [CVE-2017-18686](https://insights.sbomify.com/CVE-2017-18686/): Information disclosure in google:android (medium 5.3)
- [CVE-2017-18685](https://insights.sbomify.com/CVE-2017-18685/): Denial of service in google:android (high 7.5)
- [CVE-2017-18684](https://insights.sbomify.com/CVE-2017-18684/): Other in google:android (critical 9.8)
- [CVE-2017-18683](https://insights.sbomify.com/CVE-2017-18683/): Other in google:android (critical 9.8)
- [CVE-2017-18682](https://insights.sbomify.com/CVE-2017-18682/): Denial of service in google:android (high 7.5)
- [CVE-2017-18681](https://insights.sbomify.com/CVE-2017-18681/): Memory corruption in samsung:galaxy s5 firmware (critical 9.8)
- [CVE-2017-18680](https://insights.sbomify.com/CVE-2017-18680/): Security feature bypass in google:android (high 7.1)
- [CVE-2017-18679](https://insights.sbomify.com/CVE-2017-18679/): Denial of service in google:android (high 7.5)
- [CVE-2017-18678](https://insights.sbomify.com/CVE-2017-18678/): Denial of service in google:android (high 7.5)
- [CVE-2017-18677](https://insights.sbomify.com/CVE-2017-18677/): Missing authorization in google:android (high 7.5)
- [CVE-2017-18676](https://insights.sbomify.com/CVE-2017-18676/): Security feature bypass in google:android (high 7.5)
- [CVE-2017-18675](https://insights.sbomify.com/CVE-2017-18675/): Information disclosure in google:android (high 7.5)
- [CVE-2017-18674](https://insights.sbomify.com/CVE-2017-18674/): Denial of service in google:android (high 7.5)
- [CVE-2017-18673](https://insights.sbomify.com/CVE-2017-18673/): Security feature bypass in google:android (low 2.4)
- [CVE-2017-18672](https://insights.sbomify.com/CVE-2017-18672/): Denial of service in google:android (medium 5.5)
- [CVE-2017-18671](https://insights.sbomify.com/CVE-2017-18671/): Denial of service in google:android (high 7.5)
- [CVE-2017-18670](https://insights.sbomify.com/CVE-2017-18670/): Deserialization in google:android (high 7.5)
- [CVE-2017-18669](https://insights.sbomify.com/CVE-2017-18669/): Privilege escalation in google:android (high 7.5)
- [CVE-2017-18668](https://insights.sbomify.com/CVE-2017-18668/): Misconfiguration in google:android (high 7.5)
- [CVE-2017-18667](https://insights.sbomify.com/CVE-2017-18667/): Other in google:android (medium 4.3)
- [CVE-2017-18666](https://insights.sbomify.com/CVE-2017-18666/): Missing authorization in google:android (high 7.5)
- [CVE-2017-18665](https://insights.sbomify.com/CVE-2017-18665/): Null dereference in google:android (high 8.8)
- [CVE-2017-18664](https://insights.sbomify.com/CVE-2017-18664/): Null dereference in google:android (high 7.5)
- [CVE-2017-18663](https://insights.sbomify.com/CVE-2017-18663/): Null dereference in google:android (high 7.5)
- [CVE-2017-18662](https://insights.sbomify.com/CVE-2017-18662/): Information disclosure in google:android (high 7.5)
- [CVE-2017-18661](https://insights.sbomify.com/CVE-2017-18661/): Memory corruption in google:android (critical 9.8)
- [CVE-2017-18660](https://insights.sbomify.com/CVE-2017-18660/): Memory corruption in google:android (critical 9.8)
- [CVE-2017-18659](https://insights.sbomify.com/CVE-2017-18659/): Denial of service in google:android (medium 5.3)
- [CVE-2017-18658](https://insights.sbomify.com/CVE-2017-18658/): Null dereference in google:android (medium 5.3)
- [CVE-2017-18657](https://insights.sbomify.com/CVE-2017-18657/): Memory corruption in google:android (medium 5.3)
- [CVE-2017-18656](https://insights.sbomify.com/CVE-2017-18656/): Memory corruption in google:android (medium 5.3)
- [CVE-2017-18655](https://insights.sbomify.com/CVE-2017-18655/): Memory corruption in google:android (critical 9.8)
- [CVE-2017-18654](https://insights.sbomify.com/CVE-2017-18654/): Auth bypass in google:android (high 7.5)
- [CVE-2017-18653](https://insights.sbomify.com/CVE-2017-18653/): Missing authorization in google:android (medium 4.3)
- [CVE-2017-18652](https://insights.sbomify.com/CVE-2017-18652/): Code injection in google:android (critical 9.8)
- [CVE-2017-18651](https://insights.sbomify.com/CVE-2017-18651/): Integer overflow in google:android (high 7.5)
- [CVE-2017-18650](https://insights.sbomify.com/CVE-2017-18650/): Denial of service in google:android (high 7.5)
- [CVE-2017-18649](https://insights.sbomify.com/CVE-2017-18649/): Security feature bypass in google:android (high 7.2)
- [CVE-2017-18648](https://insights.sbomify.com/CVE-2017-18648/): Security feature bypass in google:android (critical 9.1)
- [CVE-2017-18647](https://insights.sbomify.com/CVE-2017-18647/): Race condition in google:android (high 8.1)
- [CVE-2017-18646](https://insights.sbomify.com/CVE-2017-18646/): Auth bypass in google:android (medium 4.6)
- [CVE-2017-18645](https://insights.sbomify.com/CVE-2017-18645/): Memory corruption in google:android (critical 9.8)
- [CVE-2017-18644](https://insights.sbomify.com/CVE-2017-18644/): Memory corruption in google:android (critical 9.8)
- [CVE-2017-18643](https://insights.sbomify.com/CVE-2017-18643/): Information disclosure in google:android (high 7.5)
- [CVE-2017-18642](https://insights.sbomify.com/CVE-2017-18642/): Information disclosure in syska:smartlight rainbow led smart bulb firmware (medium 6.5)
- [CVE-2017-18641](https://insights.sbomify.com/CVE-2017-18641/): Supply chain in linuxcontainers:lxc (high 8.1)
- [CVE-2017-18640](https://insights.sbomify.com/CVE-2017-18640/): SnakeYAML Entity Expansion during load operation (high 7.5)
- [CVE-2017-18639](https://insights.sbomify.com/CVE-2017-18639/): Cross-site scripting in progress:sitefinity cms (medium 6.1)
- [CVE-2017-18638](https://insights.sbomify.com/CVE-2017-18638/): graphite.composer.views.send_email vulnerable to SSRF (high 7.5)
- [CVE-2017-18636](https://insights.sbomify.com/CVE-2017-18636/): Path traversal in esafenet:cdg (high 7.5)
- [CVE-2017-18635](https://insights.sbomify.com/CVE-2017-18635/): Cross-Site Scripting in @novnc/novnc (medium 6.1)
- [CVE-2017-18634](https://insights.sbomify.com/CVE-2017-18634/): Cross-site scripting in tagdiv:newspaper (critical 9.8)
- [CVE-2017-18615](https://insights.sbomify.com/CVE-2017-18615/): Cross-site scripting in wp-kama:kama click counter (medium 6.1)
- [CVE-2017-18614](https://insights.sbomify.com/CVE-2017-18614/): SQL injection in wp-kama:kama click counter (high 8.1)
- [CVE-2017-18613](https://insights.sbomify.com/CVE-2017-18613/): Cross-site scripting in trust form project:trust form (medium 6.1)
- [CVE-2017-18612](https://insights.sbomify.com/CVE-2017-18612/): Cross-site scripting in netattingo:wp-whois-domain (medium 6.1)
- [CVE-2017-18611](https://insights.sbomify.com/CVE-2017-18611/): Cross-site scripting in magicfields:magic fields (medium 6.1)
- [CVE-2017-18610](https://insights.sbomify.com/CVE-2017-18610/): Cross-site scripting in magicfields:magic fields (medium 6.1)
- [CVE-2017-18609](https://insights.sbomify.com/CVE-2017-18609/): Cross-site scripting in magicfields:magic fields (medium 6.1)
- [CVE-2017-18608](https://insights.sbomify.com/CVE-2017-18608/): Cross-site scripting in spot:spot.im comments (medium 6.1)
- [CVE-2017-18607](https://insights.sbomify.com/CVE-2017-18607/): Cross-site request forgery in theme-fusion:avada (high 8.8)
- [CVE-2017-18606](https://insights.sbomify.com/CVE-2017-18606/): Cross-site scripting in theme-fusion:avada (medium 6.1)
- [CVE-2017-18605](https://insights.sbomify.com/CVE-2017-18605/): Deserialization in gravitatedesign:gravitate qa tracker (critical 9.8)
- [CVE-2017-18604](https://insights.sbomify.com/CVE-2017-18604/): Deserialization in sitebuilder dynamic components project:sitebuilder dynamic components (high 7.5)
- [CVE-2017-18603](https://insights.sbomify.com/CVE-2017-18603/): Cross-site scripting in postman-smtp project:postman-smtp (medium 6.1)
- [CVE-2017-18602](https://insights.sbomify.com/CVE-2017-18602/): SQL injection in ibps online exam project:ibps online exam (high 8.8)
- [CVE-2017-18601](https://insights.sbomify.com/CVE-2017-18601/): Cross-site scripting in ibps online exam project:ibps online exam (medium 5.4)
- [CVE-2017-18600](https://insights.sbomify.com/CVE-2017-18600/): Cross-site scripting in ncrafts:formcraft (medium 5.4)
- [CVE-2017-18599](https://insights.sbomify.com/CVE-2017-18599/): Cross-site scripting in pinfinity project:pinfinity (medium 6.1)
- [CVE-2017-18598](https://insights.sbomify.com/CVE-2017-18598/): Cross-site scripting in designmodo:qards (medium 6.1)
- [CVE-2017-18597](https://insights.sbomify.com/CVE-2017-18597/): SQL injection in jtrt responsive tables project:jtrt responsive tables (high 8.8)
- [CVE-2017-18596](https://insights.sbomify.com/CVE-2017-18596/): Missing authorization in elementor:elementor page builder (high 8.8)
- [CVE-2017-18595](https://insights.sbomify.com/CVE-2017-18595/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2017-18594](https://insights.sbomify.com/CVE-2017-18594/): Memory corruption in nmap:nmap (high 7.5)
- [CVE-2017-18593](https://insights.sbomify.com/CVE-2017-18593/): Cross-site scripting in updraftplus:updraftplus (medium 6.1)
- [CVE-2017-18592](https://insights.sbomify.com/CVE-2017-18592/): File upload in wc-marketplace:wc catalog enquiry (high 7.5)
- [CVE-2017-18591](https://insights.sbomify.com/CVE-2017-18591/): Cross-site scripting in dev4press:gd rating system (medium 6.1)
- [CVE-2017-18590](https://insights.sbomify.com/CVE-2017-18590/): Cross-site scripting in bestwebsoft:timesheet (medium 6.1)
- [CVE-2017-18589](https://insights.sbomify.com/CVE-2017-18589/): Improper Input Validation in cookie (high 7.5)
- [CVE-2017-18588](https://insights.sbomify.com/CVE-2017-18588/): Improper Certificate Validation in security-framework (medium 5.3)
- [CVE-2017-18587](https://insights.sbomify.com/CVE-2017-18587/): Headers containing newline characters can split messages in hyper (medium 5.3)
- [CVE-2017-18586](https://insights.sbomify.com/CVE-2017-18586/): Path traversal in insert pages project:insert pages (critical 9.1)
- [CVE-2017-18585](https://insights.sbomify.com/CVE-2017-18585/): Path traversal in ivycat:posts in page (high 8.1)
- [CVE-2017-18584](https://insights.sbomify.com/CVE-2017-18584/): Missing authorization in post pay counter project:post pay counter (high 7.5)
- [CVE-2017-18583](https://insights.sbomify.com/CVE-2017-18583/): Deserialization in post pay counter project:post pay counter (critical 9.8)
- [CVE-2017-18582](https://insights.sbomify.com/CVE-2017-18582/): Cross-site scripting in time sheets project:time sheets (medium 6.1)
- [CVE-2017-18581](https://insights.sbomify.com/CVE-2017-18581/): Cross-site scripting in time sheets project:time sheets (medium 6.1)
- [CVE-2017-18580](https://insights.sbomify.com/CVE-2017-18580/): Code injection in getshortcodes:shortcodes ultimate (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/66/