# Vulnerabilities published in 2017


- [CVE-2017-17828](https://insights.sbomify.com/CVE-2017-17828/): Cross-site scripting in doditsolutions:busbooking-script (medium 4.8)
- [CVE-2017-17827](https://insights.sbomify.com/CVE-2017-17827/): Cross-site request forgery in piwigo:piwigo (high 8.8)
- [CVE-2017-17826](https://insights.sbomify.com/CVE-2017-17826/): Cross-site scripting in piwigo:piwigo (medium 6.1)
- [CVE-2017-17825](https://insights.sbomify.com/CVE-2017-17825/): Cross-site scripting in piwigo:piwigo (medium 4.8)
- [CVE-2017-17824](https://insights.sbomify.com/CVE-2017-17824/): SQL injection in piwigo:piwigo (medium 4.9)
- [CVE-2017-17823](https://insights.sbomify.com/CVE-2017-17823/): SQL injection in piwigo:piwigo (medium 4.9)
- [CVE-2017-17822](https://insights.sbomify.com/CVE-2017-17822/): SQL injection in piwigo:piwigo (medium 4.9)
- [CVE-2017-17821](https://insights.sbomify.com/CVE-2017-17821/): Memory corruption in apple:safari (critical 9.8)
- [CVE-2017-17820](https://insights.sbomify.com/CVE-2017-17820/): Use after free in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-17819](https://insights.sbomify.com/CVE-2017-17819/): Null dereference in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-17818](https://insights.sbomify.com/CVE-2017-17818/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2017-17817](https://insights.sbomify.com/CVE-2017-17817/): Use after free in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-17816](https://insights.sbomify.com/CVE-2017-17816/): Use after free in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-17815](https://insights.sbomify.com/CVE-2017-17815/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-17814](https://insights.sbomify.com/CVE-2017-17814/): Use after free in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-17813](https://insights.sbomify.com/CVE-2017-17813/): Use after free in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-17812](https://insights.sbomify.com/CVE-2017-17812/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-17811](https://insights.sbomify.com/CVE-2017-17811/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-17810](https://insights.sbomify.com/CVE-2017-17810/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-17809](https://insights.sbomify.com/CVE-2017-17809/): Privilege escalation in goldenfrog:vyprvpn (high 7.8)
- [CVE-2017-17807](https://insights.sbomify.com/CVE-2017-17807/): Missing authorization in linux:linux kernel (low 3.3)
- [CVE-2017-17806](https://insights.sbomify.com/CVE-2017-17806/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2017-17805](https://insights.sbomify.com/CVE-2017-17805/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2017-17804](https://insights.sbomify.com/CVE-2017-17804/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-17803](https://insights.sbomify.com/CVE-2017-17803/): Memory corruption in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17802](https://insights.sbomify.com/CVE-2017-17802/): Memory corruption in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17801](https://insights.sbomify.com/CVE-2017-17801/): Memory corruption in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17800](https://insights.sbomify.com/CVE-2017-17800/): Memory corruption in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17799](https://insights.sbomify.com/CVE-2017-17799/): Other in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17798](https://insights.sbomify.com/CVE-2017-17798/): Memory corruption in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17797](https://insights.sbomify.com/CVE-2017-17797/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-17796](https://insights.sbomify.com/CVE-2017-17796/): Memory corruption in tgsoft:vir.it explorer lite (high 7.8)
- [CVE-2017-17795](https://insights.sbomify.com/CVE-2017-17795/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-17794](https://insights.sbomify.com/CVE-2017-17794/): Security feature bypass in blogotext project:blogotext (critical 9.8)
- [CVE-2017-17793](https://insights.sbomify.com/CVE-2017-17793/): Information disclosure in blogotext project:blogotext (high 7.5)
- [CVE-2017-17792](https://insights.sbomify.com/CVE-2017-17792/): Cross-site scripting in blogotext project:blogotext (medium 6.1)
- [CVE-2017-17790](https://insights.sbomify.com/CVE-2017-17790/): Command injection in ruby-lang:ruby (critical 9.8)
- [CVE-2017-1779](https://insights.sbomify.com/CVE-2017-1779/): Information disclosure in Cognos Analytics (high 7.8)
- [CVE-2017-17789](https://insights.sbomify.com/CVE-2017-17789/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2017-17788](https://insights.sbomify.com/CVE-2017-17788/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-17787](https://insights.sbomify.com/CVE-2017-17787/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2017-17786](https://insights.sbomify.com/CVE-2017-17786/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2017-17785](https://insights.sbomify.com/CVE-2017-17785/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2017-17784](https://insights.sbomify.com/CVE-2017-17784/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2017-17783](https://insights.sbomify.com/CVE-2017-17783/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2017-17782](https://insights.sbomify.com/CVE-2017-17782/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2017-17780](https://insights.sbomify.com/CVE-2017-17780/): Cross-site scripting in mediaburst:booking calendar sms (medium 6.1)
- [CVE-2017-17779](https://insights.sbomify.com/CVE-2017-17779/): SQL injection in paid to read script project:paid to read script (critical 9.8)
- [CVE-2017-17778](https://insights.sbomify.com/CVE-2017-17778/): Cross-site scripting in paid to read script project:paid to read script (medium 4.8)
- [CVE-2017-17777](https://insights.sbomify.com/CVE-2017-17777/): Auth bypass in paid to read script project:paid to read script (critical 9.8)
- [CVE-2017-17776](https://insights.sbomify.com/CVE-2017-17776/): Information disclosure in paid to read script project:paid to read script (medium 5.3)
- [CVE-2017-17775](https://insights.sbomify.com/CVE-2017-17775/): Cross-site scripting in piwigo:piwigo (medium 6.1)
- [CVE-2017-17774](https://insights.sbomify.com/CVE-2017-17774/): Cross-site request forgery in piwigo:piwigo (high 8.8)
- [CVE-2017-17773](https://insights.sbomify.com/CVE-2017-17773/): Memory corruption in qualcomm:mdm9206 firmware (critical 9.8)
- [CVE-2017-17772](https://insights.sbomify.com/CVE-2017-17772/): Multiple buffer overread vulnerabilities in WLAN (high 8.8)
- [CVE-2017-17771](https://insights.sbomify.com/CVE-2017-17771/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-17770](https://insights.sbomify.com/CVE-2017-17770/): Null dereference in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-17769](https://insights.sbomify.com/CVE-2017-17769/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.5)
- [CVE-2017-17767](https://insights.sbomify.com/CVE-2017-17767/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-17766](https://insights.sbomify.com/CVE-2017-17766/): Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-17765](https://insights.sbomify.com/CVE-2017-17765/): Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-17764](https://insights.sbomify.com/CVE-2017-17764/): Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-17763](https://insights.sbomify.com/CVE-2017-17763/): Weak cryptography in liveqos:superbeam (high 7.5)
- [CVE-2017-17762](https://insights.sbomify.com/CVE-2017-17762/): XML external entity in episerver:episerver (high 7.5)
- [CVE-2017-17761](https://insights.sbomify.com/CVE-2017-17761/): Command injection in ichano:athome ip camera firmware (critical 9.8)
- [CVE-2017-17760](https://insights.sbomify.com/CVE-2017-17760/): Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV (medium 6.5)
- [CVE-2017-17759](https://insights.sbomify.com/CVE-2017-17759/): Missing authorization in conarc:ichannel (critical 9.8)
- [CVE-2017-17758](https://insights.sbomify.com/CVE-2017-17758/): Command injection in tp-link:tl-war1200l firmware (high 8.8)
- [CVE-2017-17757](https://insights.sbomify.com/CVE-2017-17757/): Command injection in tp-link:tl-war1200l firmware (high 8.8)
- [CVE-2017-17753](https://insights.sbomify.com/CVE-2017-17753/): Cross-site scripting in csv-import-export project:csv-import-export (medium 6.1)
- [CVE-2017-17752](https://insights.sbomify.com/CVE-2017-17752/): Cross-site scripting in codecrafters:ability mail server (medium 6.1)
- [CVE-2017-17751](https://insights.sbomify.com/CVE-2017-17751/): Other in bose:soundtouch (high 8.8)
- [CVE-2017-17750](https://insights.sbomify.com/CVE-2017-17750/): Cross-site scripting in bose:soundtouch (medium 5.4)
- [CVE-2017-17749](https://insights.sbomify.com/CVE-2017-17749/): Cross-site scripting in bose:soundtouch (medium 5.4)
- [CVE-2017-17747](https://insights.sbomify.com/CVE-2017-17747/): Missing authorization in tp-link:tl-sg108e firmware (medium 6.5)
- [CVE-2017-17746](https://insights.sbomify.com/CVE-2017-17746/): Auth bypass in tp-link:tl-sg108e firmware (medium 6.8)
- [CVE-2017-17745](https://insights.sbomify.com/CVE-2017-17745/): Cross-site scripting in tp-link:tl-sg108e firmware (medium 5.4)
- [CVE-2017-17744](https://insights.sbomify.com/CVE-2017-17744/): Cross-site scripting in webdesi9:custom map (medium 6.1)
- [CVE-2017-17743](https://insights.sbomify.com/CVE-2017-17743/): Command injection in ucopia:wireless appliance firmware (medium 6.7)
- [CVE-2017-17742](https://insights.sbomify.com/CVE-2017-17742/): Other in debian:debian linux (medium 5.3)
- [CVE-2017-17741](https://insights.sbomify.com/CVE-2017-17741/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2017-17740](https://insights.sbomify.com/CVE-2017-17740/): Memory corruption in mcafee:policy auditor (high 7.5)
- [CVE-2017-1774](https://insights.sbomify.com/CVE-2017-1774/): Information disclosure in Security Guardium Big Data Intelligence (medium 5.3)
- [CVE-2017-17739](https://insights.sbomify.com/CVE-2017-17739/): Path traversal in brightsign:4k242 firmware (critical 9.8)
- [CVE-2017-17738](https://insights.sbomify.com/CVE-2017-17738/): Missing authorization in brightsign:4k242 firmware (high 7.5)
- [CVE-2017-17737](https://insights.sbomify.com/CVE-2017-17737/): Cross-site scripting in brightsign:4k242 firmware (medium 6.1)
- [CVE-2017-17736](https://insights.sbomify.com/CVE-2017-17736/): Auth bypass in kentico:xperience (critical 9.8)
- [CVE-2017-17735](https://insights.sbomify.com/CVE-2017-17735/): Information disclosure in cmsmadesimple:cms made simple (critical 9.8)
- [CVE-2017-17734](https://insights.sbomify.com/CVE-2017-17734/): Information disclosure in cmsmadesimple:cms made simple (critical 9.8)
- [CVE-2017-17733](https://insights.sbomify.com/CVE-2017-17733/): Command injection in maccms:maccms (critical 9.8)
- [CVE-2017-17731](https://insights.sbomify.com/CVE-2017-17731/): SQL injection in dedecms:dedecms (critical 9.8)
- [CVE-2017-17730](https://insights.sbomify.com/CVE-2017-17730/): SQL injection in dedecms:dedecms (critical 9.8)
- [CVE-2017-1773](https://insights.sbomify.com/CVE-2017-1773/): Security feature bypass in DataPower Gateways (medium 4.0)
- [CVE-2017-17727](https://insights.sbomify.com/CVE-2017-17727/): File upload in dedecms:dedecms (high 8.8)
- [CVE-2017-17725](https://insights.sbomify.com/CVE-2017-17725/): Integer overflow in exiv2:exiv2 (medium 6.5)
- [CVE-2017-17724](https://insights.sbomify.com/CVE-2017-17724/): Memory corruption in exiv2:exiv2 (medium 6.5)
- [CVE-2017-17723](https://insights.sbomify.com/CVE-2017-17723/): Memory corruption in exiv2:exiv2 (high 8.1)
- [CVE-2017-17722](https://insights.sbomify.com/CVE-2017-17722/): Denial of service in exiv2:exiv2 (medium 6.5)
- [CVE-2017-17721](https://insights.sbomify.com/CVE-2017-17721/): SQL injection in zuuse:beims contractorweb .net (critical 9.8)
- [CVE-2017-1772](https://insights.sbomify.com/CVE-2017-1772/): Cross-site scripting in MobileFirst Platform Foundation (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/74/