# Vulnerabilities published in 2017


- [CVE-2017-18044](https://insights.sbomify.com/CVE-2017-18044/): Command injection in commvault:commvault (critical 9.8)
- [CVE-2017-18043](https://insights.sbomify.com/CVE-2017-18043/): Integer overflow in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-18042](https://insights.sbomify.com/CVE-2017-18042/): Cross-site request forgery in Bamboo (high 8.8)
- [CVE-2017-18041](https://insights.sbomify.com/CVE-2017-18041/): Cross-site scripting in Bamboo (medium 5.4)
- [CVE-2017-18040](https://insights.sbomify.com/CVE-2017-18040/): Cross-site scripting in Bamboo (medium 5.4)
- [CVE-2017-18039](https://insights.sbomify.com/CVE-2017-18039/): Cross-site scripting in Jira (medium 6.1)
- [CVE-2017-18038](https://insights.sbomify.com/CVE-2017-18038/): Path traversal in Bitbucket Server (medium 5.3)
- [CVE-2017-18037](https://insights.sbomify.com/CVE-2017-18037/): Path traversal in Bitbucket Server (medium 6.5)
- [CVE-2017-18036](https://insights.sbomify.com/CVE-2017-18036/): Server-side request forgery in Bitbucket Server (medium 4.3)
- [CVE-2017-18035](https://insights.sbomify.com/CVE-2017-18035/): Missing authorization in Fisheye and Crucible (medium 4.3)
- [CVE-2017-18034](https://insights.sbomify.com/CVE-2017-18034/): Cross-site scripting in Fisheye and Crucible (medium 5.4)
- [CVE-2017-18033](https://insights.sbomify.com/CVE-2017-18033/): Cross-site request forgery in Jira (medium 6.5)
- [CVE-2017-18032](https://insights.sbomify.com/CVE-2017-18032/): Cross-site scripting in w3eden:download manager (medium 6.1)
- [CVE-2017-18030](https://insights.sbomify.com/CVE-2017-18030/): Memory corruption in debian:debian linux (medium 4.4)
- [CVE-2017-18029](https://insights.sbomify.com/CVE-2017-18029/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-18028](https://insights.sbomify.com/CVE-2017-18028/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-18027](https://insights.sbomify.com/CVE-2017-18027/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-18026](https://insights.sbomify.com/CVE-2017-18026/): Command injection in debian:debian linux (high 8.8)
- [CVE-2017-18025](https://insights.sbomify.com/CVE-2017-18025/): Command injection in innotube:itguard manager (critical 9.8)
- [CVE-2017-18024](https://insights.sbomify.com/CVE-2017-18024/): Cross-site scripting in avantfax:avantfax (medium 6.1)
- [CVE-2017-18023](https://insights.sbomify.com/CVE-2017-18023/): Cross-site scripting in officetracker:officetracker (medium 6.1)
- [CVE-2017-18022](https://insights.sbomify.com/CVE-2017-18022/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-18021](https://insights.sbomify.com/CVE-2017-18021/): Weak cryptography in qtpass:qtpass (critical 9.8)
- [CVE-2017-18020](https://insights.sbomify.com/CVE-2017-18020/): Memory corruption in samsung:samsung mobile (high 8.4)
- [CVE-2017-18019](https://insights.sbomify.com/CVE-2017-18019/): Memory corruption in k7computing:total security (high 7.1)
- [CVE-2017-18018](https://insights.sbomify.com/CVE-2017-18018/): Race condition in gnu:coreutils (high 7.1)
- [CVE-2017-18017](https://insights.sbomify.com/CVE-2017-18017/): Use after free in arista:eos (critical 9.8)
- [CVE-2017-18016](https://insights.sbomify.com/CVE-2017-18016/): Security feature bypass in parity:browser (medium 5.3)
- [CVE-2017-18015](https://insights.sbomify.com/CVE-2017-18015/): Cross-site scripting in wp-unit:share this image (medium 6.1)
- [CVE-2017-18014](https://insights.sbomify.com/CVE-2017-18014/): Cross-site scripting in sophos:sfos (medium 6.1)
- [CVE-2017-18013](https://insights.sbomify.com/CVE-2017-18013/): Null dereference in libtiff:libtiff (medium 6.5)
- [CVE-2017-18012](https://insights.sbomify.com/CVE-2017-18012/): Cross-site scripting in z-url preview project:z-url preview (medium 6.1)
- [CVE-2017-18011](https://insights.sbomify.com/CVE-2017-18011/): Cross-site scripting in clickbank:affiliate ads for clickbank products (medium 6.1)
- [CVE-2017-18010](https://insights.sbomify.com/CVE-2017-18010/): Cross-site scripting in e-goi:smart marketing sms and newsletters forms (medium 6.1)
- [CVE-2017-18009](https://insights.sbomify.com/CVE-2017-18009/): Out-of-bounds Read in OpenCV (high 7.5)
- [CVE-2017-18008](https://insights.sbomify.com/CVE-2017-18008/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-18006](https://insights.sbomify.com/CVE-2017-18006/): Cross-site scripting in extensis:portfolio netpublish (medium 6.1)
- [CVE-2017-18005](https://insights.sbomify.com/CVE-2017-18005/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2017-18004](https://insights.sbomify.com/CVE-2017-18004/): Cross-site scripting in zurmo:zurmo crm (medium 5.4)
- [CVE-2017-18001](https://insights.sbomify.com/CVE-2017-18001/): Auth bypass in trustwave:secure web gateway (critical 9.8)
- [CVE-2017-17999](https://insights.sbomify.com/CVE-2017-17999/): SQL injection in fairsketch:rise ultimate project manager (critical 9.8)
- [CVE-2017-17997](https://insights.sbomify.com/CVE-2017-17997/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2017-17996](https://insights.sbomify.com/CVE-2017-17996/): Memory corruption in flexense:syncbreeze (high 8.8)
- [CVE-2017-17995](https://insights.sbomify.com/CVE-2017-17995/): Cross-site scripting in iwcnetwork:biometric shift employee management system (medium 5.4)
- [CVE-2017-17994](https://insights.sbomify.com/CVE-2017-17994/): Cross-site scripting in iwcnetwork:biometric shift employee management system (medium 5.4)
- [CVE-2017-17993](https://insights.sbomify.com/CVE-2017-17993/): Cross-site scripting in iwcnetwork:biometric shift employee management system (medium 5.4)
- [CVE-2017-17992](https://insights.sbomify.com/CVE-2017-17992/): Path traversal in iwcnetwork:biometric shift employee management system (critical 9.8)
- [CVE-2017-17991](https://insights.sbomify.com/CVE-2017-17991/): Cross-site scripting in iwcnetwork:biometric shift employee management system (medium 5.4)
- [CVE-2017-17990](https://insights.sbomify.com/CVE-2017-17990/): Cross-site request forgery in iwcnetwork:biometric shift employee management system (high 8.8)
- [CVE-2017-17989](https://insights.sbomify.com/CVE-2017-17989/): Cross-site scripting in iwcnetwork:biometric shift employee management system (medium 5.4)
- [CVE-2017-17988](https://insights.sbomify.com/CVE-2017-17988/): Cross-site scripting in muslim matrimonial script project:muslim matrimonial script (medium 4.8)
- [CVE-2017-17987](https://insights.sbomify.com/CVE-2017-17987/): File upload in muslim matrimonial script project:muslim matrimonial script (high 7.2)
- [CVE-2017-17986](https://insights.sbomify.com/CVE-2017-17986/): Cross-site scripting in muslim matrimonial script project:muslim matrimonial script (medium 4.8)
- [CVE-2017-17985](https://insights.sbomify.com/CVE-2017-17985/): Cross-site scripting in muslim matrimonial script project:muslim matrimonial script (medium 4.8)
- [CVE-2017-17984](https://insights.sbomify.com/CVE-2017-17984/): Cross-site scripting in muslim matrimonial script project:muslim matrimonial script (medium 4.8)
- [CVE-2017-17983](https://insights.sbomify.com/CVE-2017-17983/): SQL injection in muslim matrimonial script project:muslim matrimonial script (high 8.8)
- [CVE-2017-17982](https://insights.sbomify.com/CVE-2017-17982/): Cross-site request forgery in muslim matrimonial script project:muslim matrimonial script (medium 6.8)
- [CVE-2017-17981](https://insights.sbomify.com/CVE-2017-17981/): Cross-site scripting in muslim matrimonial script project:muslim matrimonial script (medium 5.4)
- [CVE-2017-17976](https://insights.sbomify.com/CVE-2017-17976/): File upload in perfexcrm:perfex crm (critical 9.8)
- [CVE-2017-17975](https://insights.sbomify.com/CVE-2017-17975/): Use after free in linux:linux kernel (medium 5.5)
- [CVE-2017-17974](https://insights.sbomify.com/CVE-2017-17974/): Information disclosure in basystems:bas920 firmware (critical 9.8)
- [CVE-2017-17973](https://insights.sbomify.com/CVE-2017-17973/): Use after free in libtiff:libtiff (high 8.8)
- [CVE-2017-17972](https://insights.sbomify.com/CVE-2017-17972/): Cross-site scripting in archon project:archon (medium 6.1)
- [CVE-2017-17971](https://insights.sbomify.com/CVE-2017-17971/): Dolibarr ERP and CRM contain XSS Vulnerability (medium 6.1)
- [CVE-2017-17970](https://insights.sbomify.com/CVE-2017-17970/): SQL injection in muvikoscript:muviko (critical 9.8)
- [CVE-2017-17969](https://insights.sbomify.com/CVE-2017-17969/): Memory corruption in 7-zip:7-zip (high 7.8)
- [CVE-2017-17968](https://insights.sbomify.com/CVE-2017-17968/): Memory corruption in xi-soft:nettransport download manager (critical 9.8)
- [CVE-2017-17967](https://insights.sbomify.com/CVE-2017-17967/): Denial of service in ksosoft:wps office (medium 5.5)
- [CVE-2017-17960](https://insights.sbomify.com/CVE-2017-17960/): Cross-site request forgery in php multivendor ecommerce project:php multivendor ecommerce (high 8.8)
- [CVE-2017-17959](https://insights.sbomify.com/CVE-2017-17959/): SQL injection in php multivendor ecommerce project:php multivendor ecommerce (critical 9.8)
- [CVE-2017-17958](https://insights.sbomify.com/CVE-2017-17958/): Cross-site scripting in php multivendor ecommerce project:php multivendor ecommerce (medium 6.1)
- [CVE-2017-17957](https://insights.sbomify.com/CVE-2017-17957/): SQL injection in php multivendor ecommerce project:php multivendor ecommerce (critical 9.8)
- [CVE-2017-17956](https://insights.sbomify.com/CVE-2017-17956/): Cross-site scripting in php multivendor ecommerce project:php multivendor ecommerce (medium 6.1)
- [CVE-2017-17955](https://insights.sbomify.com/CVE-2017-17955/): Cross-site scripting in php multivendor ecommerce project:php multivendor ecommerce (medium 6.1)
- [CVE-2017-17954](https://insights.sbomify.com/CVE-2017-17954/): Cross-site scripting in php multivendor ecommerce project:php multivendor ecommerce (medium 6.1)
- [CVE-2017-17953](https://insights.sbomify.com/CVE-2017-17953/): Cross-site scripting in php multivendor ecommerce project:php multivendor ecommerce (medium 6.1)
- [CVE-2017-17952](https://insights.sbomify.com/CVE-2017-17952/): Business logic in php multivendor ecommerce project:php multivendor ecommerce (high 8.6)
- [CVE-2017-17951](https://insights.sbomify.com/CVE-2017-17951/): SQL injection in php multivendor ecommerce project:php multivendor ecommerce (critical 9.8)
- [CVE-2017-17950](https://insights.sbomify.com/CVE-2017-17950/): SQL injection in cells:blog (high 8.8)
- [CVE-2017-1795](https://insights.sbomify.com/CVE-2017-1795/): Information disclosure in WebSphere MQ (medium 4.4)
- [CVE-2017-17949](https://insights.sbomify.com/CVE-2017-17949/): Cross-site scripting in cells:blog (medium 6.1)
- [CVE-2017-17948](https://insights.sbomify.com/CVE-2017-17948/): Cross-site scripting in cells:blog (medium 6.1)
- [CVE-2017-17947](https://insights.sbomify.com/CVE-2017-17947/): Cross-site scripting in pulsesecure:pulse connect secure (medium 4.8)
- [CVE-2017-17946](https://insights.sbomify.com/CVE-2017-17946/): Memory corruption in novosoft:handy password (critical 9.8)
- [CVE-2017-17945](https://insights.sbomify.com/CVE-2017-17945/): Security feature bypass in asus:hivivo (critical 9.1)
- [CVE-2017-17944](https://insights.sbomify.com/CVE-2017-17944/): Security feature bypass in asus:hivivo (critical 9.1)
- [CVE-2017-17942](https://insights.sbomify.com/CVE-2017-17942/): Memory corruption in libtiff:libtiff (high 8.8)
- [CVE-2017-17941](https://insights.sbomify.com/CVE-2017-17941/): SQL injection in single theater booking script project:single theater booking script (high 7.2)
- [CVE-2017-17940](https://insights.sbomify.com/CVE-2017-17940/): Cross-site scripting in single theater booking script project:single theater booking script (medium 4.8)
- [CVE-2017-1794](https://insights.sbomify.com/CVE-2017-1794/): Privilege escalation in Tivoli Monitoring (high 7.5)
- [CVE-2017-17939](https://insights.sbomify.com/CVE-2017-17939/): Cross-site request forgery in single theater booking script project:single theater booking script (high 8.8)
- [CVE-2017-17938](https://insights.sbomify.com/CVE-2017-17938/): Cross-site scripting in single theater booking script project:single theater booking script (medium 4.8)
- [CVE-2017-17937](https://insights.sbomify.com/CVE-2017-17937/): Cross-site scripting in vanguard project:marketplace digital products php (medium 6.1)
- [CVE-2017-17936](https://insights.sbomify.com/CVE-2017-17936/): Cross-site request forgery in vanguard project:marketplace digital products php (high 8.8)
- [CVE-2017-17935](https://insights.sbomify.com/CVE-2017-17935/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2017-17934](https://insights.sbomify.com/CVE-2017-17934/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-17933](https://insights.sbomify.com/CVE-2017-17933/): Cross-site scripting in netwin:surgeftp (medium 6.1)
- [CVE-2017-17932](https://insights.sbomify.com/CVE-2017-17932/): Memory corruption in allmediaserver:allmediaserver (critical 9.8)
- [CVE-2017-17931](https://insights.sbomify.com/CVE-2017-17931/): SQL injection in resume clone script project:resume clone script (critical 9.8)
- [CVE-2017-17930](https://insights.sbomify.com/CVE-2017-17930/): Cross-site request forgery in ordermanagementscript:professional service script (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/72/