# Vulnerabilities published in 2017


- [CVE-2017-18379](https://insights.sbomify.com/CVE-2017-18379/): Memory corruption in linux:linux kernel (critical 9.8)
- [CVE-2017-18378](https://insights.sbomify.com/CVE-2017-18378/): Command injection in netgear:readynas surveillance firmware (high 8.4)
- [CVE-2017-18377](https://insights.sbomify.com/CVE-2017-18377/): Command injection in goahead:wireless ip camera wificam firmware (critical 9.8)
- [CVE-2017-18376](https://insights.sbomify.com/CVE-2017-18376/): Privilege escalation in strangebee:thehive (high 8.8)
- [CVE-2017-18375](https://insights.sbomify.com/CVE-2017-18375/): Deserialization in ampache:ampache (high 8.8)
- [CVE-2017-18374](https://insights.sbomify.com/CVE-2017-18374/): Hardcoded credentials in billion:5200w-t firmware (high 8.8)
- [CVE-2017-18373](https://insights.sbomify.com/CVE-2017-18373/): Hardcoded credentials in billion:5200w-t firmware (high 8.8)
- [CVE-2017-18372](https://insights.sbomify.com/CVE-2017-18372/): Command injection in billion:5200w-t firmware (high 8.8)
- [CVE-2017-18371](https://insights.sbomify.com/CVE-2017-18371/): Hardcoded credentials in billion:5200w-t firmware (critical 9.8)
- [CVE-2017-18370](https://insights.sbomify.com/CVE-2017-18370/): Command injection in billion:5200w-t firmware (high 8.8)
- [CVE-2017-18369](https://insights.sbomify.com/CVE-2017-18369/): Command injection in billion:5200w-t firmware (critical 9.8)
- [CVE-2017-18368](https://insights.sbomify.com/CVE-2017-18368/): Zyxel P660HN-T1A Routers Command Injection (critical 9.8, exploited in the wild)
- [CVE-2017-18367](https://insights.sbomify.com/CVE-2017-18367/): Improper Input Validation in libseccomp-golang (high 7.5)
- [CVE-2017-18366](https://insights.sbomify.com/CVE-2017-18366/): Subrion CMS vulnerable to CSRF in blog/delete (high 8.8)
- [CVE-2017-18365](https://insights.sbomify.com/CVE-2017-18365/): Deserialization in github:github (critical 9.8)
- [CVE-2017-18364](https://insights.sbomify.com/CVE-2017-18364/): Cross-site scripting in frank-karau:phpfk (high 7.4)
- [CVE-2017-18362](https://insights.sbomify.com/CVE-2017-18362/): Kaseya VSA SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2017-18361](https://insights.sbomify.com/CVE-2017-18361/): Pylons Colander Denial of Service vulnerability (high 7.5)
- [CVE-2017-18360](https://insights.sbomify.com/CVE-2017-18360/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-18359](https://insights.sbomify.com/CVE-2017-18359/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2017-18358](https://insights.sbomify.com/CVE-2017-18358/): Cross-site scripting in limesurvey:limesurvey (medium 6.1)
- [CVE-2017-18357](https://insights.sbomify.com/CVE-2017-18357/): Shopware XXE Vulnerability (medium 6.5)
- [CVE-2017-18356](https://insights.sbomify.com/CVE-2017-18356/): Deserialization in woocommerce:woocommerce (high 8.8)
- [CVE-2017-18355](https://insights.sbomify.com/CVE-2017-18355/): Rendertron discloses absolute paths of files (high 7.5)
- [CVE-2017-18354](https://insights.sbomify.com/CVE-2017-18354/): rendertron LFI vulnerability (high 7.5)
- [CVE-2017-18353](https://insights.sbomify.com/CVE-2017-18353/): rendertron can remotely shut down Chrome instance (high 7.5)
- [CVE-2017-18352](https://insights.sbomify.com/CVE-2017-18352/): rendertron XSS vulnerability (medium 6.1)
- [CVE-2017-18350](https://insights.sbomify.com/CVE-2017-18350/): Memory corruption in bitcoin:bitcoin core (medium 5.9)
- [CVE-2017-18349](https://insights.sbomify.com/CVE-2017-18349/): Improper Input Validation in alilibaba:fastjson (critical 9.8)
- [CVE-2017-18348](https://insights.sbomify.com/CVE-2017-18348/): Privilege escalation in splunk:splunk (high 7.0)
- [CVE-2017-18347](https://insights.sbomify.com/CVE-2017-18347/): Race condition in st:stm32f030c6 firmware (medium 4.6)
- [CVE-2017-18346](https://insights.sbomify.com/CVE-2017-18346/): SQL injection in web-gooroo:cms web-gooroo (critical 9.8)
- [CVE-2017-18345](https://insights.sbomify.com/CVE-2017-18345/): Information disclosure in joomanager project:joomanager (critical 9.8)
- [CVE-2017-18344](https://insights.sbomify.com/CVE-2017-18344/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-18343](https://insights.sbomify.com/CVE-2017-18343/): Cross-site scripting in sensiolabs:symfony (medium 6.1)
- [CVE-2017-18342](https://insights.sbomify.com/CVE-2017-18342/): PyYAML insecurely deserializes YAML strings leading to arbitrary code execution (critical 9.8)
- [CVE-2017-18332](https://insights.sbomify.com/CVE-2017-18332/): Information disclosure in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (medium 5.5)
- [CVE-2017-18331](https://insights.sbomify.com/CVE-2017-18331/): Missing authorization in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18330](https://insights.sbomify.com/CVE-2017-18330/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18329](https://insights.sbomify.com/CVE-2017-18329/): Memory corruption in Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18328](https://insights.sbomify.com/CVE-2017-18328/): Use after free in Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18327](https://insights.sbomify.com/CVE-2017-18327/): Information disclosure in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (medium 5.5)
- [CVE-2017-18326](https://insights.sbomify.com/CVE-2017-18326/): Information disclosure in Snapdragon Mobile, Snapdragon Wear (medium 5.5)
- [CVE-2017-18324](https://insights.sbomify.com/CVE-2017-18324/): Information disclosure in Snapdragon Mobile, Snapdragon Wear (medium 5.5)
- [CVE-2017-18323](https://insights.sbomify.com/CVE-2017-18323/): Information disclosure in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (medium 5.5)
- [CVE-2017-18322](https://insights.sbomify.com/CVE-2017-18322/): Information disclosure in Snapdragon Mobile, Snapdragon Wear (medium 5.5)
- [CVE-2017-18321](https://insights.sbomify.com/CVE-2017-18321/): Information disclosure in Snapdragon Mobile (medium 5.5)
- [CVE-2017-18320](https://insights.sbomify.com/CVE-2017-18320/): Other in Snapdragon Automobile, Snapdragon Mobile (high 7.8)
- [CVE-2017-18319](https://insights.sbomify.com/CVE-2017-18319/): Information disclosure in Snapdragon Mobile, Snapdragon Wear (medium 5.5)
- [CVE-2017-18318](https://insights.sbomify.com/CVE-2017-18318/): Security feature bypass in Snapdragon Automobile, Snapdragon Mobile (critical 9.8)
- [CVE-2017-18317](https://insights.sbomify.com/CVE-2017-18317/): Security feature bypass in Snapdragon Automobile, Snapdragon Mobile (high 7.8)
- [CVE-2017-18316](https://insights.sbomify.com/CVE-2017-18316/): Information disclosure in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18315](https://insights.sbomify.com/CVE-2017-18315/): Memory corruption in Snapdragon Mobile (high 7.8)
- [CVE-2017-18314](https://insights.sbomify.com/CVE-2017-18314/): Security feature bypass in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18313](https://insights.sbomify.com/CVE-2017-18313/): Security feature bypass in Snapdragon Mobile, Snapdragon Wear (medium 5.3)
- [CVE-2017-18312](https://insights.sbomify.com/CVE-2017-18312/): Missing authorization in Snapdragon Automobile, Snapdragon Mobile (high 7.8)
- [CVE-2017-18311](https://insights.sbomify.com/CVE-2017-18311/): Privilege escalation in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18310](https://insights.sbomify.com/CVE-2017-18310/): Misconfiguration in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18309](https://insights.sbomify.com/CVE-2017-18309/): Memory corruption in Snapdragon Mobile (high 7.1)
- [CVE-2017-18308](https://insights.sbomify.com/CVE-2017-18308/): Security feature bypass in Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18307](https://insights.sbomify.com/CVE-2017-18307/): Information Exposure in Kernel (high 8.4)
- [CVE-2017-18306](https://insights.sbomify.com/CVE-2017-18306/): Information Exposure in Camera Driver (high 8.4)
- [CVE-2017-18305](https://insights.sbomify.com/CVE-2017-18305/): Privilege escalation in Snapdragon Mobile, Snapdragon Wear (high 7.0)
- [CVE-2017-18304](https://insights.sbomify.com/CVE-2017-18304/): Memory corruption in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18303](https://insights.sbomify.com/CVE-2017-18303/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18302](https://insights.sbomify.com/CVE-2017-18302/): Race condition in Snapdragon Automobile, Snapdragon Mobile (medium 4.7)
- [CVE-2017-18301](https://insights.sbomify.com/CVE-2017-18301/): Null dereference in qualcomm:fsm9055 firmware (medium 5.5)
- [CVE-2017-18300](https://insights.sbomify.com/CVE-2017-18300/): Information disclosure in Snapdragon Mobile, Snapdragon Wear (medium 5.5)
- [CVE-2017-18299](https://insights.sbomify.com/CVE-2017-18299/): Denial of service in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (medium 5.5)
- [CVE-2017-18298](https://insights.sbomify.com/CVE-2017-18298/): Null dereference in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18297](https://insights.sbomify.com/CVE-2017-18297/): Memory corruption in Snapdragon Mobile (high 7.8)
- [CVE-2017-18296](https://insights.sbomify.com/CVE-2017-18296/): Missing authorization in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18295](https://insights.sbomify.com/CVE-2017-18295/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18294](https://insights.sbomify.com/CVE-2017-18294/): Memory corruption in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18293](https://insights.sbomify.com/CVE-2017-18293/): Security feature bypass in Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18292](https://insights.sbomify.com/CVE-2017-18292/): Security feature bypass in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (medium 5.5)
- [CVE-2017-18291](https://insights.sbomify.com/CVE-2017-18291/): SQL injection in pvpgn:stats (critical 9.8)
- [CVE-2017-18290](https://insights.sbomify.com/CVE-2017-18290/): SQL injection in pvpgn:stats (critical 9.8)
- [CVE-2017-18289](https://insights.sbomify.com/CVE-2017-18289/): SQL injection in pvpgn:stats (critical 9.8)
- [CVE-2017-18288](https://insights.sbomify.com/CVE-2017-18288/): SQL injection in pvpgn:stats (critical 9.8)
- [CVE-2017-18287](https://insights.sbomify.com/CVE-2017-18287/): SQL injection in pvpgn:stats (critical 9.8)
- [CVE-2017-18286](https://insights.sbomify.com/CVE-2017-18286/): nZEDb Cross-site Scripting (XSS) in the 404 error page (medium 5.4)
- [CVE-2017-18285](https://insights.sbomify.com/CVE-2017-18285/): Misconfiguration in burp project:burp (high 7.1)
- [CVE-2017-18284](https://insights.sbomify.com/CVE-2017-18284/): Misconfiguration in burp project:burp (high 7.1)
- [CVE-2017-18283](https://insights.sbomify.com/CVE-2017-18283/): Memory corruption in Snapdragon Mobile (medium 6.5)
- [CVE-2017-18282](https://insights.sbomify.com/CVE-2017-18282/): Information disclosure in Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18281](https://insights.sbomify.com/CVE-2017-18281/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.5)
- [CVE-2017-18280](https://insights.sbomify.com/CVE-2017-18280/): Information disclosure in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18279](https://insights.sbomify.com/CVE-2017-18279/): Memory corruption in Small Cell SoC, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18278](https://insights.sbomify.com/CVE-2017-18278/): Integer overflow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18277](https://insights.sbomify.com/CVE-2017-18277/): Denial of service in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (medium 5.5)
- [CVE-2017-18276](https://insights.sbomify.com/CVE-2017-18276/): Information disclosure in Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18275](https://insights.sbomify.com/CVE-2017-18275/): Missing authorization in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (medium 5.5)
- [CVE-2017-18274](https://insights.sbomify.com/CVE-2017-18274/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18273](https://insights.sbomify.com/CVE-2017-18273/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-18272](https://insights.sbomify.com/CVE-2017-18272/): Use after free in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-18271](https://insights.sbomify.com/CVE-2017-18271/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-18270](https://insights.sbomify.com/CVE-2017-18270/): Missing authorization in linux:linux kernel (high 7.1)
- [CVE-2017-18269](https://insights.sbomify.com/CVE-2017-18269/): Memory corruption in gnu:glibc (critical 9.8)
- [CVE-2017-18268](https://insights.sbomify.com/CVE-2017-18268/): Weak cryptography in IntelligenceCenter (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/69/