# Vulnerabilities published in 2017


- [CVE-2017-18267](https://insights.sbomify.com/CVE-2017-18267/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-18266](https://insights.sbomify.com/CVE-2017-18266/): Command injection in canonical:ubuntu linux (high 8.8)
- [CVE-2017-18265](https://insights.sbomify.com/CVE-2017-18265/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2017-18264](https://insights.sbomify.com/CVE-2017-18264/): phpMyAdmin Improper Privilege Management (critical 9.8)
- [CVE-2017-18263](https://insights.sbomify.com/CVE-2017-18263/): Path traversal in seagate:personal cloud firmware (high 7.5)
- [CVE-2017-18262](https://insights.sbomify.com/CVE-2017-18262/): Open redirect in blackboard:blackboard learn (medium 6.1)
- [CVE-2017-18261](https://insights.sbomify.com/CVE-2017-18261/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2017-18260](https://insights.sbomify.com/CVE-2017-18260/): Dolibarr SQL injection vulnerability (high 8.8)
- [CVE-2017-18259](https://insights.sbomify.com/CVE-2017-18259/): Dolibarr ERP and CRM contain XSS Vulnerability (medium 5.4)
- [CVE-2017-18258](https://insights.sbomify.com/CVE-2017-18258/): Uncontrolled resource consumption in nokogiri (medium 6.5)
- [CVE-2017-18257](https://insights.sbomify.com/CVE-2017-18257/): Integer overflow in debian:debian linux (medium 5.5)
- [CVE-2017-18256](https://insights.sbomify.com/CVE-2017-18256/): Denial of service in brave:brave browser (medium 6.5)
- [CVE-2017-18255](https://insights.sbomify.com/CVE-2017-18255/): Integer overflow in linux:linux kernel (high 7.8)
- [CVE-2017-18254](https://insights.sbomify.com/CVE-2017-18254/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-18253](https://insights.sbomify.com/CVE-2017-18253/): Null dereference in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-18252](https://insights.sbomify.com/CVE-2017-18252/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-18251](https://insights.sbomify.com/CVE-2017-18251/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-18250](https://insights.sbomify.com/CVE-2017-18250/): Null dereference in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-18249](https://insights.sbomify.com/CVE-2017-18249/): Race condition in debian:debian linux (high 7.0)
- [CVE-2017-18248](https://insights.sbomify.com/CVE-2017-18248/): Denial of service in apple:cups (medium 5.3)
- [CVE-2017-18247](https://insights.sbomify.com/CVE-2017-18247/): Null dereference in libav:libav (medium 6.5)
- [CVE-2017-18246](https://insights.sbomify.com/CVE-2017-18246/): Memory corruption in libav:libav (medium 6.5)
- [CVE-2017-18245](https://insights.sbomify.com/CVE-2017-18245/): Memory corruption in libav:libav (medium 6.5)
- [CVE-2017-18244](https://insights.sbomify.com/CVE-2017-18244/): Memory corruption in libav:libav (medium 6.5)
- [CVE-2017-18243](https://insights.sbomify.com/CVE-2017-18243/): Memory corruption in libav:libav (medium 6.5)
- [CVE-2017-18242](https://insights.sbomify.com/CVE-2017-18242/): Memory corruption in libav:libav (medium 6.5)
- [CVE-2017-18241](https://insights.sbomify.com/CVE-2017-18241/): Null dereference in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-18240](https://insights.sbomify.com/CVE-2017-18240/): Privilege escalation in collectd:collectd (medium 5.5)
- [CVE-2017-18239](https://insights.sbomify.com/CVE-2017-18239/): Exposure of Sensitive information in authentikat-jwt (critical 9.8)
- [CVE-2017-18238](https://insights.sbomify.com/CVE-2017-18238/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2017-18237](https://insights.sbomify.com/CVE-2017-18237/): Null dereference in exempi project:exempi (medium 5.5)
- [CVE-2017-18236](https://insights.sbomify.com/CVE-2017-18236/): Denial of service in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-18235](https://insights.sbomify.com/CVE-2017-18235/): Denial of service in exempi project:exempi (medium 5.5)
- [CVE-2017-18234](https://insights.sbomify.com/CVE-2017-18234/): Use after free in canonical:ubuntu linux (high 7.8)
- [CVE-2017-18233](https://insights.sbomify.com/CVE-2017-18233/): Integer overflow in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-18232](https://insights.sbomify.com/CVE-2017-18232/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2017-18231](https://insights.sbomify.com/CVE-2017-18231/): Null dereference in debian:debian linux (medium 6.5)
- [CVE-2017-18230](https://insights.sbomify.com/CVE-2017-18230/): Null dereference in debian:debian linux (medium 6.5)
- [CVE-2017-18229](https://insights.sbomify.com/CVE-2017-18229/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2017-18228](https://insights.sbomify.com/CVE-2017-18228/): Cross-site scripting in bmc:remedy action request system (medium 5.4)
- [CVE-2017-18227](https://insights.sbomify.com/CVE-2017-18227/): Security feature bypass in titanhq:webtitan gateway (high 7.5)
- [CVE-2017-18226](https://insights.sbomify.com/CVE-2017-18226/): Misconfiguration in jabberd2:jabberd2 (medium 5.5)
- [CVE-2017-18225](https://insights.sbomify.com/CVE-2017-18225/): Privilege escalation in jabberd2:jabberd2 (high 7.8)
- [CVE-2017-18224](https://insights.sbomify.com/CVE-2017-18224/): Race condition in linux:linux kernel (medium 4.7)
- [CVE-2017-18223](https://insights.sbomify.com/CVE-2017-18223/): Auth bypass in bmc:remedy action request system (high 8.1)
- [CVE-2017-18222](https://insights.sbomify.com/CVE-2017-18222/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2017-18221](https://insights.sbomify.com/CVE-2017-18221/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2017-18220](https://insights.sbomify.com/CVE-2017-18220/): Use after free in graphicsmagick:graphicsmagick (high 8.8)
- [CVE-2017-18219](https://insights.sbomify.com/CVE-2017-18219/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2017-18218](https://insights.sbomify.com/CVE-2017-18218/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2017-18217](https://insights.sbomify.com/CVE-2017-18217/): Cross-site scripting in invoiceplane:invoiceplane (medium 6.1)
- [CVE-2017-18216](https://insights.sbomify.com/CVE-2017-18216/): Null dereference in linux:linux kernel (medium 5.5)
- [CVE-2017-18215](https://insights.sbomify.com/CVE-2017-18215/): Memory corruption in opensuse:leap (critical 9.8)
- [CVE-2017-18214](https://insights.sbomify.com/CVE-2017-18214/): Regular Expression Denial of Service in moment (high 7.5)
- [CVE-2017-18213](https://insights.sbomify.com/CVE-2017-18213/): Privilege escalation in exponentcms:exponent cms (high 7.2)
- [CVE-2017-18212](https://insights.sbomify.com/CVE-2017-18212/): Memory corruption in jerryscript:jerryscript (critical 9.8)
- [CVE-2017-18211](https://insights.sbomify.com/CVE-2017-18211/): Null dereference in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-18210](https://insights.sbomify.com/CVE-2017-18210/): Null dereference in imagemagick:imagemagick (critical 9.8)
- [CVE-2017-18209](https://insights.sbomify.com/CVE-2017-18209/): Null dereference in canonical:ubuntu linux (high 8.8)
- [CVE-2017-18208](https://insights.sbomify.com/CVE-2017-18208/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2017-18207](https://insights.sbomify.com/CVE-2017-18207/): Denial of service in python:python (medium 6.5)
- [CVE-2017-18206](https://insights.sbomify.com/CVE-2017-18206/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-18205](https://insights.sbomify.com/CVE-2017-18205/): Null dereference in zsh project:zsh (high 8.1)
- [CVE-2017-18204](https://insights.sbomify.com/CVE-2017-18204/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2017-18203](https://insights.sbomify.com/CVE-2017-18203/): Race condition in linux:linux kernel (medium 4.7)
- [CVE-2017-18202](https://insights.sbomify.com/CVE-2017-18202/): Use after free in linux:linux kernel (high 7.0)
- [CVE-2017-18201](https://insights.sbomify.com/CVE-2017-18201/): Memory corruption in gnu:libcdio (critical 9.8)
- [CVE-2017-18200](https://insights.sbomify.com/CVE-2017-18200/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2017-18199](https://insights.sbomify.com/CVE-2017-18199/): Null dereference in gnu:libcdio (medium 6.5)
- [CVE-2017-18198](https://insights.sbomify.com/CVE-2017-18198/): Memory corruption in gnu:libcdio (high 8.8)
- [CVE-2017-18197](https://insights.sbomify.com/CVE-2017-18197/): mxGraph vulnerable to XXE attacks (critical 9.8)
- [CVE-2017-18196](https://insights.sbomify.com/CVE-2017-18196/): Path traversal in leptonica:leptonica (low 3.3)
- [CVE-2017-18195](https://insights.sbomify.com/CVE-2017-18195/): Information disclosure in concretecms:concrete cms (medium 5.3)
- [CVE-2017-18194](https://insights.sbomify.com/CVE-2017-18194/): SQL injection in hamayeshnegar:hamayeshnegar cms (critical 9.8)
- [CVE-2017-18193](https://insights.sbomify.com/CVE-2017-18193/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2017-18192](https://insights.sbomify.com/CVE-2017-18192/): Hardcoded credentials in photo\,video locker-calculator project:photo\,video locker-calculator (high 7.5)
- [CVE-2017-18191](https://insights.sbomify.com/CVE-2017-18191/): OpenStack Nova Denial of service attack on the compute host (high 7.5)
- [CVE-2017-18190](https://insights.sbomify.com/CVE-2017-18190/): Security feature bypass in apple:cups (high 7.5)
- [CVE-2017-18189](https://insights.sbomify.com/CVE-2017-18189/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2017-18188](https://insights.sbomify.com/CVE-2017-18188/): Privilege escalation in openr:opentmpfiles (medium 5.5)
- [CVE-2017-18187](https://insights.sbomify.com/CVE-2017-18187/): Integer overflow in arm:mbed tls (critical 9.8)
- [CVE-2017-18186](https://insights.sbomify.com/CVE-2017-18186/): Denial of service in qpdf project:qpdf (medium 5.5)
- [CVE-2017-18185](https://insights.sbomify.com/CVE-2017-18185/): Integer overflow in qpdf project:qpdf (medium 5.5)
- [CVE-2017-18184](https://insights.sbomify.com/CVE-2017-18184/): Memory corruption in qpdf project:qpdf (medium 5.5)
- [CVE-2017-18183](https://insights.sbomify.com/CVE-2017-18183/): Denial of service in qpdf project:qpdf (medium 5.5)
- [CVE-2017-18179](https://insights.sbomify.com/CVE-2017-18179/): Auth bypass in progress:sitefinity (high 8.8)
- [CVE-2017-18178](https://insights.sbomify.com/CVE-2017-18178/): Open redirect in progress:sitefinity (medium 6.1)
- [CVE-2017-18177](https://insights.sbomify.com/CVE-2017-18177/): Cross-site scripting in progress:sitefinity (medium 5.4)
- [CVE-2017-18176](https://insights.sbomify.com/CVE-2017-18176/): Cross-site scripting in progress:sitefinity (medium 5.4)
- [CVE-2017-18175](https://insights.sbomify.com/CVE-2017-18175/): Cross-site scripting in progress:sitefinity (medium 5.4)
- [CVE-2017-18174](https://insights.sbomify.com/CVE-2017-18174/): Memory corruption in linux:linux kernel (critical 9.8)
- [CVE-2017-18173](https://insights.sbomify.com/CVE-2017-18173/): Integer overflow in Snapdragon Mobile (high 7.8)
- [CVE-2017-18172](https://insights.sbomify.com/CVE-2017-18172/): Integer overflow in Snapdragon Automobile, Snapdragon Mobile (high 7.8)
- [CVE-2017-18171](https://insights.sbomify.com/CVE-2017-18171/): Memory corruption in Snapdragon Mobile (high 8.8)
- [CVE-2017-18170](https://insights.sbomify.com/CVE-2017-18170/): Integer overflow in Snapdragon Mobile (high 8.8)
- [CVE-2017-18169](https://insights.sbomify.com/CVE-2017-18169/): Denial of service in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.5)
- [CVE-2017-18160](https://insights.sbomify.com/CVE-2017-18160/): Weak cryptography in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18159](https://insights.sbomify.com/CVE-2017-18159/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-18158](https://insights.sbomify.com/CVE-2017-18158/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-18157](https://insights.sbomify.com/CVE-2017-18157/): Use after free in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/70/