# Vulnerabilities published in 2017 - [CVE-2017-1793](https://insights.sbomify.com/CVE-2017-1793/): Cross-site scripting in Rational Quality Manager (medium 5.4) - [CVE-2017-17929](https://insights.sbomify.com/CVE-2017-17929/): Cross-site scripting in ordermanagementscript:professional service script (medium 4.8) - [CVE-2017-17928](https://insights.sbomify.com/CVE-2017-17928/): SQL injection in ordermanagementscript:professional service script (critical 9.8) - [CVE-2017-17927](https://insights.sbomify.com/CVE-2017-17927/): Information disclosure in ordermanagementscript:professional service script (medium 5.3) - [CVE-2017-17926](https://insights.sbomify.com/CVE-2017-17926/): Business logic in ordermanagementscript:professional service script (medium 5.3) - [CVE-2017-17925](https://insights.sbomify.com/CVE-2017-17925/): Cross-site scripting in ordermanagementscript:professional service script (medium 4.8) - [CVE-2017-17924](https://insights.sbomify.com/CVE-2017-17924/): Information disclosure in ordermanagementscript:professional service script (medium 5.3) - [CVE-2017-17920](https://insights.sbomify.com/CVE-2017-17920/): SQL injection in rubyonrails:ruby on rails (high 8.1) - [CVE-2017-1792](https://insights.sbomify.com/CVE-2017-1792/): Cross-site scripting in Rational Quality Manager (medium 5.4) - [CVE-2017-17919](https://insights.sbomify.com/CVE-2017-17919/): SQL injection in rubyonrails:ruby on rails (high 8.1) - [CVE-2017-17917](https://insights.sbomify.com/CVE-2017-17917/): SQL injection in rubyonrails:rails (high 8.1) - [CVE-2017-17916](https://insights.sbomify.com/CVE-2017-17916/): SQL injection in rubyonrails:rails (high 8.1) - [CVE-2017-17915](https://insights.sbomify.com/CVE-2017-17915/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2017-17914](https://insights.sbomify.com/CVE-2017-17914/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2017-17913](https://insights.sbomify.com/CVE-2017-17913/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2017-17912](https://insights.sbomify.com/CVE-2017-17912/): Memory corruption in debian:debian linux (high 8.8) - [CVE-2017-17911](https://insights.sbomify.com/CVE-2017-17911/): Cross-site scripting in archon:archon (medium 6.1) - [CVE-2017-17910](https://insights.sbomify.com/CVE-2017-17910/): Weak cryptography in hoermann:hs5-868-bs firmware (medium 6.5) - [CVE-2017-1791](https://insights.sbomify.com/CVE-2017-1791/): Cross-site scripting in Rational Quality Manager (medium 5.4) - [CVE-2017-17909](https://insights.sbomify.com/CVE-2017-17909/): Cross-site scripting in responsive realestate script project:responsive realestate script (medium 4.8) - [CVE-2017-17908](https://insights.sbomify.com/CVE-2017-17908/): Cross-site request forgery in responsive realestate script project:responsive realestate script (high 8.8) - [CVE-2017-17907](https://insights.sbomify.com/CVE-2017-17907/): Cross-site scripting in car rental script project:car rental script (medium 6.1) - [CVE-2017-17906](https://insights.sbomify.com/CVE-2017-17906/): SQL injection in car rental script project:car rental script (critical 9.8) - [CVE-2017-17905](https://insights.sbomify.com/CVE-2017-17905/): Cross-site request forgery in car rental script project:car rental script (high 8.8) - [CVE-2017-17904](https://insights.sbomify.com/CVE-2017-17904/): Cross-site scripting in fortunescripts:lynda clone (medium 5.4) - [CVE-2017-17903](https://insights.sbomify.com/CVE-2017-17903/): Cross-site request forgery in fortunescripts:lynda clone (high 8.8) - [CVE-2017-17902](https://insights.sbomify.com/CVE-2017-17902/): SQL injection in kliqqi:kliqqi cms (critical 9.8) - [CVE-2017-17901](https://insights.sbomify.com/CVE-2017-17901/): Denial of service in zyxel:p-660hw firmware (high 7.5) - [CVE-2017-17900](https://insights.sbomify.com/CVE-2017-17900/): Dolibarr SQL injection vulnerability in fourn/index.php (critical 9.8) - [CVE-2017-1790](https://insights.sbomify.com/CVE-2017-1790/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4) - [CVE-2017-17899](https://insights.sbomify.com/CVE-2017-17899/): Dolibarr SQL injection vulnerability in adherents/subscription/info.php (critical 9.8) - [CVE-2017-17898](https://insights.sbomify.com/CVE-2017-17898/): Dolibarr sensitive information disclosure (high 7.5) - [CVE-2017-17897](https://insights.sbomify.com/CVE-2017-17897/): Dolibarr SQL injection vulnerability in comm/multiprix.php (critical 9.8) - [CVE-2017-17896](https://insights.sbomify.com/CVE-2017-17896/): Cross-site scripting in basic job site script project:basic job site script (medium 6.1) - [CVE-2017-17895](https://insights.sbomify.com/CVE-2017-17895/): SQL injection in basic job site script project:basic job site script (critical 9.8) - [CVE-2017-17894](https://insights.sbomify.com/CVE-2017-17894/): Cross-site request forgery in basic job site script project:basic job site script (high 8.8) - [CVE-2017-17893](https://insights.sbomify.com/CVE-2017-17893/): Cross-site scripting in readymade video sharing script project:readymade video sharing script (medium 6.1) - [CVE-2017-17892](https://insights.sbomify.com/CVE-2017-17892/): SQL injection in readymade video sharing script project:readymade video sharing script (critical 9.8) - [CVE-2017-17891](https://insights.sbomify.com/CVE-2017-17891/): Cross-site request forgery in readymade video sharing script project:readymade video sharing script (high 8.8) - [CVE-2017-1789](https://insights.sbomify.com/CVE-2017-1789/): Code injection in Tivoli Monitoring V6 (critical 9.8) - [CVE-2017-17889](https://insights.sbomify.com/CVE-2017-17889/): Cross-site scripting in kliqqi:kliqqi cms (medium 5.4) - [CVE-2017-17888](https://insights.sbomify.com/CVE-2017-17888/): Command injection in hoytech:antiweb (high 8.8) - [CVE-2017-17887](https://insights.sbomify.com/CVE-2017-17887/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2017-17886](https://insights.sbomify.com/CVE-2017-17886/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2017-17885](https://insights.sbomify.com/CVE-2017-17885/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2017-17884](https://insights.sbomify.com/CVE-2017-17884/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2017-17883](https://insights.sbomify.com/CVE-2017-17883/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2017-17882](https://insights.sbomify.com/CVE-2017-17882/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2017-17881](https://insights.sbomify.com/CVE-2017-17881/): Denial of service in canonical:ubuntu linux (medium 6.5) - [CVE-2017-17880](https://insights.sbomify.com/CVE-2017-17880/): Memory corruption in imagemagick:imagemagick (high 8.8) - [CVE-2017-1788](https://insights.sbomify.com/CVE-2017-1788/): Other in WebSphere Application Server (medium 5.3) - [CVE-2017-17879](https://insights.sbomify.com/CVE-2017-17879/): Memory corruption in canonical:ubuntu linux (high 8.8) - [CVE-2017-17878](https://insights.sbomify.com/CVE-2017-17878/): Weak cryptography in valvesoftware:steam link firmware (critical 9.8) - [CVE-2017-17877](https://insights.sbomify.com/CVE-2017-17877/): Misconfiguration in valvesoftware:steam link firmware (critical 9.8) - [CVE-2017-17876](https://insights.sbomify.com/CVE-2017-17876/): Path traversal in iwcnetwork:shift (high 7.5) - [CVE-2017-17875](https://insights.sbomify.com/CVE-2017-17875/): SQL injection in jextn:jextn faq pro (critical 9.8) - [CVE-2017-17874](https://insights.sbomify.com/CVE-2017-17874/): File upload in vanguard project:marketplace digital products php (high 8.8) - [CVE-2017-17873](https://insights.sbomify.com/CVE-2017-17873/): SQL injection in vanguard project:marketplace digital products php (critical 9.8) - [CVE-2017-17872](https://insights.sbomify.com/CVE-2017-17872/): SQL injection in jextn:jextn video gallery (critical 9.8) - [CVE-2017-17871](https://insights.sbomify.com/CVE-2017-17871/): SQL injection in jextn:jextn question and answer (critical 9.8) - [CVE-2017-17870](https://insights.sbomify.com/CVE-2017-17870/): SQL injection in jbuildozer:jbuildozer (critical 9.8) - [CVE-2017-1787](https://insights.sbomify.com/CVE-2017-1787/): Hardcoded credentials in Rational Publishing Engine (medium 4.4) - [CVE-2017-17869](https://insights.sbomify.com/CVE-2017-17869/): Cross-site scripting in mgl-instagram-gallery project:mgl-instagram-gallery (medium 6.1) - [CVE-2017-17868](https://insights.sbomify.com/CVE-2017-17868/): Cross-site scripting in liferay:liferay portal (medium 6.1) - [CVE-2017-17867](https://insights.sbomify.com/CVE-2017-17867/): Command injection in intenogroup:iopsys (high 8.8) - [CVE-2017-17866](https://insights.sbomify.com/CVE-2017-17866/): Memory corruption in artifex:mupdf (high 7.8) - [CVE-2017-17864](https://insights.sbomify.com/CVE-2017-17864/): Information disclosure in debian:debian linux (low 3.3) - [CVE-2017-17863](https://insights.sbomify.com/CVE-2017-17863/): Integer overflow in debian:debian linux (high 7.8) - [CVE-2017-17862](https://insights.sbomify.com/CVE-2017-17862/): Denial of service in debian:debian linux (medium 5.5) - [CVE-2017-17860](https://insights.sbomify.com/CVE-2017-17860/): Weak cryptography in google:android (medium 5.7) - [CVE-2017-1786](https://insights.sbomify.com/CVE-2017-1786/): Denial of service in MQ (medium 5.3) - [CVE-2017-17859](https://insights.sbomify.com/CVE-2017-17859/): Cross-site scripting in samsung:internet browser (medium 6.1) - [CVE-2017-17858](https://insights.sbomify.com/CVE-2017-17858/): Memory corruption in artifex:mupdf (high 7.8) - [CVE-2017-17857](https://insights.sbomify.com/CVE-2017-17857/): Memory corruption in debian:debian linux (high 7.8) - [CVE-2017-17856](https://insights.sbomify.com/CVE-2017-17856/): Memory corruption in debian:debian linux (high 7.8) - [CVE-2017-17855](https://insights.sbomify.com/CVE-2017-17855/): Memory corruption in debian:debian linux (high 7.8) - [CVE-2017-17854](https://insights.sbomify.com/CVE-2017-17854/): Integer overflow in debian:debian linux (high 7.8) - [CVE-2017-17853](https://insights.sbomify.com/CVE-2017-17853/): Memory corruption in debian:debian linux (high 7.8) - [CVE-2017-17852](https://insights.sbomify.com/CVE-2017-17852/): Memory corruption in debian:debian linux (high 7.8) - [CVE-2017-17850](https://insights.sbomify.com/CVE-2017-17850/): Denial of service in digium:asterisk (high 7.5) - [CVE-2017-1785](https://insights.sbomify.com/CVE-2017-1785/): Information disclosure in API Connect (medium 4.3) - [CVE-2017-17849](https://insights.sbomify.com/CVE-2017-17849/): Memory corruption in getgosoft:getgo download manager (critical 9.8) - [CVE-2017-17848](https://insights.sbomify.com/CVE-2017-17848/): Security feature bypass in debian:debian linux (high 7.5) - [CVE-2017-17847](https://insights.sbomify.com/CVE-2017-17847/): Security feature bypass in debian:debian linux (high 7.5) - [CVE-2017-17846](https://insights.sbomify.com/CVE-2017-17846/): Denial of service in debian:debian linux (high 7.5) - [CVE-2017-17845](https://insights.sbomify.com/CVE-2017-17845/): Weak cryptography in debian:debian linux (high 7.3) - [CVE-2017-17844](https://insights.sbomify.com/CVE-2017-17844/): Weak cryptography in debian:debian linux (medium 6.5) - [CVE-2017-17843](https://insights.sbomify.com/CVE-2017-17843/): Weak cryptography in debian:debian linux (medium 5.9) - [CVE-2017-17841](https://insights.sbomify.com/CVE-2017-17841/): Weak cryptography in paloaltonetworks:pan-os (medium 5.9) - [CVE-2017-17840](https://insights.sbomify.com/CVE-2017-17840/): Memory corruption in open-iscsi project:open-iscsi (high 7.8) - [CVE-2017-1784](https://insights.sbomify.com/CVE-2017-1784/): Information disclosure in Cognos Analytics (medium 5.5) - [CVE-2017-17837](https://insights.sbomify.com/CVE-2017-17837/): Cross-site Scripting in Apache DeltaSpike (medium 6.1) - [CVE-2017-17836](https://insights.sbomify.com/CVE-2017-17836/): Apache Airflow vulnerable to XSS (critical 9.8) - [CVE-2017-17835](https://insights.sbomify.com/CVE-2017-17835/): Cross-Site Request Forgery (CSRF) in Apache Airflow (high 8.8) - [CVE-2017-17833](https://insights.sbomify.com/CVE-2017-17833/): Memory corruption in canonical:ubuntu linux (critical 9.8) - [CVE-2017-17832](https://insights.sbomify.com/CVE-2017-17832/): Cross-site scripting in serverscheck:monitoring software (medium 5.4) - [CVE-2017-17831](https://insights.sbomify.com/CVE-2017-17831/): GitHub Git LFS Arbitrary command execution vulnerability (high 8.8) - [CVE-2017-17830](https://insights.sbomify.com/CVE-2017-17830/): Cross-site request forgery in doditsolutions:bus booking script (medium 6.8) - [CVE-2017-1783](https://insights.sbomify.com/CVE-2017-1783/): Auth bypass in Cognos Analytics (medium 4.0) - [CVE-2017-17829](https://insights.sbomify.com/CVE-2017-17829/): SQL injection in doditsolutions:bus booking script (high 7.2) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/73/