# Vulnerabilities published in 2017


- [CVE-2017-18156](https://insights.sbomify.com/CVE-2017-18156/): Use after free in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18155](https://insights.sbomify.com/CVE-2017-18155/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile (high 7.8)
- [CVE-2017-18154](https://insights.sbomify.com/CVE-2017-18154/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-18153](https://insights.sbomify.com/CVE-2017-18153/): Use After Free in WLAN (medium 6.8)
- [CVE-2017-18147](https://insights.sbomify.com/CVE-2017-18147/): Other in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-18146](https://insights.sbomify.com/CVE-2017-18146/): Weak cryptography in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18145](https://insights.sbomify.com/CVE-2017-18145/): Use after free in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18144](https://insights.sbomify.com/CVE-2017-18144/): Use after free in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18143](https://insights.sbomify.com/CVE-2017-18143/): Information disclosure in Snapdragon Mobile (high 7.5)
- [CVE-2017-18142](https://insights.sbomify.com/CVE-2017-18142/): Memory corruption in Snapdragon Mobile (critical 9.8)
- [CVE-2017-18141](https://insights.sbomify.com/CVE-2017-18141/): Security feature bypass in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18140](https://insights.sbomify.com/CVE-2017-18140/): Use after free in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18139](https://insights.sbomify.com/CVE-2017-18139/): Memory corruption in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18138](https://insights.sbomify.com/CVE-2017-18138/): Memory corruption in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18137](https://insights.sbomify.com/CVE-2017-18137/): Memory corruption in Snapdragon Mobile (critical 9.8)
- [CVE-2017-18136](https://insights.sbomify.com/CVE-2017-18136/): Use after free in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18135](https://insights.sbomify.com/CVE-2017-18135/): Memory corruption in Snapdragon Mobile (critical 9.8)
- [CVE-2017-18134](https://insights.sbomify.com/CVE-2017-18134/): Memory corruption in Snapdragon Mobile (critical 9.8)
- [CVE-2017-18133](https://insights.sbomify.com/CVE-2017-18133/): Memory corruption in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18132](https://insights.sbomify.com/CVE-2017-18132/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile (critical 9.8)
- [CVE-2017-18131](https://insights.sbomify.com/CVE-2017-18131/): Security feature bypass in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18130](https://insights.sbomify.com/CVE-2017-18130/): Memory corruption in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18129](https://insights.sbomify.com/CVE-2017-18129/): Security feature bypass in Snapdragon Automobile, Snapdragon Mobile (critical 9.8)
- [CVE-2017-18128](https://insights.sbomify.com/CVE-2017-18128/): Information disclosure in Snapdragon Mobile (high 7.5)
- [CVE-2017-18127](https://insights.sbomify.com/CVE-2017-18127/): Memory corruption in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18126](https://insights.sbomify.com/CVE-2017-18126/): Weak cryptography in Snapdragon Mobile, Snapdragon Wear (high 7.5)
- [CVE-2017-18125](https://insights.sbomify.com/CVE-2017-18125/): Information disclosure in Snapdragon Mobile, Snapdragon Wear (high 7.5)
- [CVE-2017-18124](https://insights.sbomify.com/CVE-2017-18124/): Integer overflow in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.8)
- [CVE-2017-18123](https://insights.sbomify.com/CVE-2017-18123/): Code injection in debian:debian linux (high 8.6)
- [CVE-2017-18122](https://insights.sbomify.com/CVE-2017-18122/): SimpleSAMLphp Signature validation bypass (high 8.1)
- [CVE-2017-18121](https://insights.sbomify.com/CVE-2017-18121/): SimpleSAMLphp XSS Vulnerability (medium 6.1)
- [CVE-2017-18120](https://insights.sbomify.com/CVE-2017-18120/): Memory corruption in lcdf:gifsicle (high 7.8)
- [CVE-2017-18113](https://insights.sbomify.com/CVE-2017-18113/): Code injection in Jira Data Center (high 8.8)
- [CVE-2017-18112](https://insights.sbomify.com/CVE-2017-18112/): Information disclosure in Fisheye (medium 6.5)
- [CVE-2017-18111](https://insights.sbomify.com/CVE-2017-18111/): XML external entity in Application Links (high 8.7)
- [CVE-2017-18110](https://insights.sbomify.com/CVE-2017-18110/): XML external entity in Crowd (medium 6.5)
- [CVE-2017-18109](https://insights.sbomify.com/CVE-2017-18109/): Open redirect in Crowd (medium 6.1)
- [CVE-2017-18108](https://insights.sbomify.com/CVE-2017-18108/): Code injection in Crowd (high 7.2)
- [CVE-2017-18107](https://insights.sbomify.com/CVE-2017-18107/): Cross-site request forgery in Crowd (medium 6.5)
- [CVE-2017-18106](https://insights.sbomify.com/CVE-2017-18106/): Auth bypass in Crowd (high 7.5)
- [CVE-2017-18105](https://insights.sbomify.com/CVE-2017-18105/): Auth bypass in Crowd (high 8.1)
- [CVE-2017-18104](https://insights.sbomify.com/CVE-2017-18104/): Information disclosure in Jira (medium 5.9)
- [CVE-2017-18103](https://insights.sbomify.com/CVE-2017-18103/): Other in atlassian-http (medium 4.7)
- [CVE-2017-18102](https://insights.sbomify.com/CVE-2017-18102/): Cross-site scripting in atlassian-renderer (medium 5.4)
- [CVE-2017-18101](https://insights.sbomify.com/CVE-2017-18101/): Missing authorization in Jira (medium 6.5)
- [CVE-2017-18100](https://insights.sbomify.com/CVE-2017-18100/): Cross-site scripting in atlassian:jira (medium 6.1)
- [CVE-2017-18098](https://insights.sbomify.com/CVE-2017-18098/): Cross-site scripting in Jira (medium 6.1)
- [CVE-2017-18097](https://insights.sbomify.com/CVE-2017-18097/): Cross-site scripting in Jira (medium 5.4)
- [CVE-2017-18096](https://insights.sbomify.com/CVE-2017-18096/): Server-side request forgery in Atlassian Application Links (high 7.2)
- [CVE-2017-18095](https://insights.sbomify.com/CVE-2017-18095/): Missing authorization in Crucible (medium 5.3)
- [CVE-2017-18094](https://insights.sbomify.com/CVE-2017-18094/): Cross-site scripting in Fisheye and Crucible (medium 4.8)
- [CVE-2017-18093](https://insights.sbomify.com/CVE-2017-18093/): Cross-site scripting in Fisheye and Crucible (medium 4.8)
- [CVE-2017-18092](https://insights.sbomify.com/CVE-2017-18092/): Cross-site scripting in Crucible (medium 5.4)
- [CVE-2017-18091](https://insights.sbomify.com/CVE-2017-18091/): Cross-site scripting in Fisheye and Crucible (medium 4.8)
- [CVE-2017-18090](https://insights.sbomify.com/CVE-2017-18090/): Cross-site scripting in Fisheye (medium 6.1)
- [CVE-2017-18089](https://insights.sbomify.com/CVE-2017-18089/): Cross-site scripting in Crucible (medium 5.4)
- [CVE-2017-18088](https://insights.sbomify.com/CVE-2017-18088/): Other in atlassian:bitbucket (medium 4.3)
- [CVE-2017-18087](https://insights.sbomify.com/CVE-2017-18087/): Command injection in Bitbucket Server (high 7.5)
- [CVE-2017-18086](https://insights.sbomify.com/CVE-2017-18086/): Cross-site scripting in atlassian:confluence (medium 6.1)
- [CVE-2017-18085](https://insights.sbomify.com/CVE-2017-18085/): Cross-site scripting in Confluence (medium 6.1)
- [CVE-2017-18084](https://insights.sbomify.com/CVE-2017-18084/): Cross-site scripting in Confluence (medium 4.8)
- [CVE-2017-18083](https://insights.sbomify.com/CVE-2017-18083/): Cross-site scripting in Confluence (medium 5.4)
- [CVE-2017-18082](https://insights.sbomify.com/CVE-2017-18082/): Cross-site scripting in Bamboo (medium 5.4)
- [CVE-2017-18081](https://insights.sbomify.com/CVE-2017-18081/): Cross-site scripting in Bamboo (medium 6.1)
- [CVE-2017-18080](https://insights.sbomify.com/CVE-2017-18080/): Cross-site request forgery in Bamboo (high 8.8)
- [CVE-2017-18079](https://insights.sbomify.com/CVE-2017-18079/): Null dereference in canonical:ubuntu linux (high 7.8)
- [CVE-2017-18078](https://insights.sbomify.com/CVE-2017-18078/): Security feature bypass in debian:debian linux (high 7.8)
- [CVE-2017-18077](https://insights.sbomify.com/CVE-2017-18077/): ReDoS in brace-expansion (high 7.5)
- [CVE-2017-18076](https://insights.sbomify.com/CVE-2017-18076/): Omniauth allows POST parameters to be stored in session (high 7.5)
- [CVE-2017-18075](https://insights.sbomify.com/CVE-2017-18075/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2017-18074](https://insights.sbomify.com/CVE-2017-18074/): Denial of service in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18073](https://insights.sbomify.com/CVE-2017-18073/): Information disclosure in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear (high 7.5)
- [CVE-2017-18072](https://insights.sbomify.com/CVE-2017-18072/): Information disclosure in Snapdragon Mobile, Snapdragon Wear (high 7.5)
- [CVE-2017-18071](https://insights.sbomify.com/CVE-2017-18071/): Security feature bypass in Snapdragon Mobile, Snapdragon Wear (critical 9.8)
- [CVE-2017-18070](https://insights.sbomify.com/CVE-2017-18070/): Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-18069](https://insights.sbomify.com/CVE-2017-18069/): Memory corruption in google:android (high 7.5)
- [CVE-2017-18068](https://insights.sbomify.com/CVE-2017-18068/): Memory corruption in google:android (high 7.8)
- [CVE-2017-18067](https://insights.sbomify.com/CVE-2017-18067/): Memory corruption in google:android (critical 9.8)
- [CVE-2017-18066](https://insights.sbomify.com/CVE-2017-18066/): Use after free in google:android (high 7.8)
- [CVE-2017-18065](https://insights.sbomify.com/CVE-2017-18065/): Memory corruption in google:android (high 7.8)
- [CVE-2017-18064](https://insights.sbomify.com/CVE-2017-18064/): Memory corruption in google:android (high 7.8)
- [CVE-2017-18063](https://insights.sbomify.com/CVE-2017-18063/): Memory corruption in google:android (high 7.8)
- [CVE-2017-18062](https://insights.sbomify.com/CVE-2017-18062/): Memory corruption in google:android (high 7.8)
- [CVE-2017-18061](https://insights.sbomify.com/CVE-2017-18061/): Memory corruption in google:android (high 7.8)
- [CVE-2017-18060](https://insights.sbomify.com/CVE-2017-18060/): Memory corruption in google:android (high 7.5)
- [CVE-2017-18059](https://insights.sbomify.com/CVE-2017-18059/): Memory corruption in google:android (high 7.5)
- [CVE-2017-18058](https://insights.sbomify.com/CVE-2017-18058/): Memory corruption in google:android (high 7.5)
- [CVE-2017-18057](https://insights.sbomify.com/CVE-2017-18057/): Memory corruption in google:android (high 7.5)
- [CVE-2017-18056](https://insights.sbomify.com/CVE-2017-18056/): Memory corruption in google:android (high 7.8)
- [CVE-2017-18055](https://insights.sbomify.com/CVE-2017-18055/): Memory corruption in google:android (high 7.8)
- [CVE-2017-18054](https://insights.sbomify.com/CVE-2017-18054/): Memory corruption in google:android (high 7.8)
- [CVE-2017-18053](https://insights.sbomify.com/CVE-2017-18053/): Memory corruption in google:android (high 7.5)
- [CVE-2017-18052](https://insights.sbomify.com/CVE-2017-18052/): Memory corruption in google:android (high 7.5)
- [CVE-2017-18051](https://insights.sbomify.com/CVE-2017-18051/): Memory corruption in google:android (high 7.5)
- [CVE-2017-18050](https://insights.sbomify.com/CVE-2017-18050/): Memory corruption in google:android (high 7.8)
- [CVE-2017-18049](https://insights.sbomify.com/CVE-2017-18049/): SilverStripe CSV Excel Macro Injection (medium 5.5)
- [CVE-2017-18048](https://insights.sbomify.com/CVE-2017-18048/): File upload in monstra:monstra (high 8.8)
- [CVE-2017-18047](https://insights.sbomify.com/CVE-2017-18047/): Memory corruption in labf:nfsaxe (critical 9.8)
- [CVE-2017-18046](https://insights.sbomify.com/CVE-2017-18046/): Memory corruption in dasannetworks:h640x firmware (critical 9.8)
- [CVE-2017-18045](https://insights.sbomify.com/CVE-2017-18045/): Auth bypass in directadmin:directadmin (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/71/