# Vulnerabilities published in 2017


- [CVE-2017-17507](https://insights.sbomify.com/CVE-2017-17507/): Memory corruption in hdfgroup:hdf5 (medium 6.5)
- [CVE-2017-17506](https://insights.sbomify.com/CVE-2017-17506/): Memory corruption in hdfgroup:hdf5 (medium 6.5)
- [CVE-2017-17505](https://insights.sbomify.com/CVE-2017-17505/): Null dereference in hdfgroup:hdf5 (medium 6.5)
- [CVE-2017-17504](https://insights.sbomify.com/CVE-2017-17504/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-17503](https://insights.sbomify.com/CVE-2017-17503/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2017-17502](https://insights.sbomify.com/CVE-2017-17502/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2017-17501](https://insights.sbomify.com/CVE-2017-17501/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2017-17500](https://insights.sbomify.com/CVE-2017-17500/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2017-1750](https://insights.sbomify.com/CVE-2017-1750/): Cross-site scripting in Jazz Reporting Service (medium 5.4)
- [CVE-2017-17499](https://insights.sbomify.com/CVE-2017-17499/): Use after free in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-17498](https://insights.sbomify.com/CVE-2017-17498/): Memory corruption in graphicsmagick:graphicsmagick (high 8.8)
- [CVE-2017-17497](https://insights.sbomify.com/CVE-2017-17497/): Memory corruption in htacg:tidy (high 7.5)
- [CVE-2017-1749](https://insights.sbomify.com/CVE-2017-1749/): Path traversal in UrbanCode Deploy (medium 5.3)
- [CVE-2017-17485](https://insights.sbomify.com/CVE-2017-17485/): jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass (critical 9.8)
- [CVE-2017-17484](https://insights.sbomify.com/CVE-2017-17484/): Memory corruption in icu-project:international components for unicode (critical 9.8)
- [CVE-2017-17482](https://insights.sbomify.com/CVE-2017-17482/): Memory corruption in hp:openvms (high 7.8)
- [CVE-2017-17480](https://insights.sbomify.com/CVE-2017-17480/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-1748](https://insights.sbomify.com/CVE-2017-1748/): Open redirect in Connections (medium 6.8)
- [CVE-2017-17479](https://insights.sbomify.com/CVE-2017-17479/): Memory corruption in uclouvain:openjpeg (critical 9.8)
- [CVE-2017-17478](https://insights.sbomify.com/CVE-2017-17478/): Cross-site scripting in pega:pega platform (medium 4.8)
- [CVE-2017-17477](https://insights.sbomify.com/CVE-2017-17477/): Cross-site scripting in pexip:pexip infinity (medium 6.1)
- [CVE-2017-17476](https://insights.sbomify.com/CVE-2017-17476/): Auth bypass in debian:debian linux (high 8.8)
- [CVE-2017-17475](https://insights.sbomify.com/CVE-2017-17475/): Memory corruption in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17474](https://insights.sbomify.com/CVE-2017-17474/): Memory corruption in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17473](https://insights.sbomify.com/CVE-2017-17473/): Memory corruption in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17472](https://insights.sbomify.com/CVE-2017-17472/): Memory corruption in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17471](https://insights.sbomify.com/CVE-2017-17471/): Memory corruption in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17470](https://insights.sbomify.com/CVE-2017-17470/): Memory corruption in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-1747](https://insights.sbomify.com/CVE-2017-1747/): Denial of service in MQ (medium 5.3)
- [CVE-2017-17469](https://insights.sbomify.com/CVE-2017-17469/): Memory corruption in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17468](https://insights.sbomify.com/CVE-2017-17468/): Privilege escalation in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17467](https://insights.sbomify.com/CVE-2017-17467/): Memory corruption in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17466](https://insights.sbomify.com/CVE-2017-17466/): Privilege escalation in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17465](https://insights.sbomify.com/CVE-2017-17465/): Null dereference in k7computing:antivirus (critical 9.8)
- [CVE-2017-17464](https://insights.sbomify.com/CVE-2017-17464/): Null dereference in k7computing:antivirus (critical 9.8)
- [CVE-2017-17463](https://insights.sbomify.com/CVE-2017-17463/): Information disclosure in vivo:modem firmware (high 7.5)
- [CVE-2017-1746](https://insights.sbomify.com/CVE-2017-1746/): Cross-site request forgery in Tivoli Components (high 8.8)
- [CVE-2017-17459](https://insights.sbomify.com/CVE-2017-17459/): Command injection in fossil scm:fossil (high 8.8)
- [CVE-2017-17458](https://insights.sbomify.com/CVE-2017-17458/): Mercurial vulnerable to arbitrary code injection (critical 9.8)
- [CVE-2017-17455](https://insights.sbomify.com/CVE-2017-17455/): Security feature bypass in mahara:mahara (medium 5.9)
- [CVE-2017-17454](https://insights.sbomify.com/CVE-2017-17454/): Cross-site scripting in mahara:mahara (medium 5.4)
- [CVE-2017-17451](https://insights.sbomify.com/CVE-2017-17451/): Cross-site scripting in wpmailster:wp mailster (medium 6.1)
- [CVE-2017-17450](https://insights.sbomify.com/CVE-2017-17450/): Missing authorization in linux:linux kernel (high 7.8)
- [CVE-2017-17449](https://insights.sbomify.com/CVE-2017-17449/): Information disclosure in linux:linux kernel (medium 4.7)
- [CVE-2017-17448](https://insights.sbomify.com/CVE-2017-17448/): Missing authorization in linux:linux kernel (high 7.8)
- [CVE-2017-17446](https://insights.sbomify.com/CVE-2017-17446/): Denial of service in game-music-emu project:game-music-emu (medium 6.5)
- [CVE-2017-17443](https://insights.sbomify.com/CVE-2017-17443/): Denial of service in opcfoundation:local discovery server (medium 6.5)
- [CVE-2017-17442](https://insights.sbomify.com/CVE-2017-17442/): Cross-site scripting in UEM Management Console (medium 6.1)
- [CVE-2017-17440](https://insights.sbomify.com/CVE-2017-17440/): Null dereference in gnu:libextractor (medium 6.5)
- [CVE-2017-17439](https://insights.sbomify.com/CVE-2017-17439/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2017-17436](https://insights.sbomify.com/CVE-2017-17436/): Weak cryptography in vaulteksafe:vt20i firmware (high 8.8)
- [CVE-2017-17435](https://insights.sbomify.com/CVE-2017-17435/): Auth bypass in vaulteksafe:vt20i firmware (high 8.8)
- [CVE-2017-17434](https://insights.sbomify.com/CVE-2017-17434/): Path traversal in debian:debian linux (critical 9.8)
- [CVE-2017-17433](https://insights.sbomify.com/CVE-2017-17433/): Missing authorization in debian:debian linux (low 3.7)
- [CVE-2017-17432](https://insights.sbomify.com/CVE-2017-17432/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2017-17431](https://insights.sbomify.com/CVE-2017-17431/): GeniXCMS XSS Vulnerability (medium 6.1)
- [CVE-2017-17430](https://insights.sbomify.com/CVE-2017-17430/): Auth bypass in sangoma:netborder\/vega session firmware (critical 9.8)
- [CVE-2017-1743](https://insights.sbomify.com/CVE-2017-1743/): Information disclosure in WebSphere Application Server (medium 4.3)
- [CVE-2017-17429](https://insights.sbomify.com/CVE-2017-17429/): Privilege escalation in k7computing:antivirus (medium 5.5)
- [CVE-2017-17428](https://insights.sbomify.com/CVE-2017-17428/): Weak cryptography in cavium:nitrox ssl sdk (medium 5.9)
- [CVE-2017-17427](https://insights.sbomify.com/CVE-2017-17427/): Weak cryptography in radware:alteon firmware (medium 5.9)
- [CVE-2017-17426](https://insights.sbomify.com/CVE-2017-17426/): Integer overflow in gnu:glibc (high 8.1)
- [CVE-2017-17425](https://insights.sbomify.com/CVE-2017-17425/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17424](https://insights.sbomify.com/CVE-2017-17424/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17423](https://insights.sbomify.com/CVE-2017-17423/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17422](https://insights.sbomify.com/CVE-2017-17422/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17421](https://insights.sbomify.com/CVE-2017-17421/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17420](https://insights.sbomify.com/CVE-2017-17420/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17419](https://insights.sbomify.com/CVE-2017-17419/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17418](https://insights.sbomify.com/CVE-2017-17418/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17417](https://insights.sbomify.com/CVE-2017-17417/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17416](https://insights.sbomify.com/CVE-2017-17416/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17415](https://insights.sbomify.com/CVE-2017-17415/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17414](https://insights.sbomify.com/CVE-2017-17414/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17413](https://insights.sbomify.com/CVE-2017-17413/): SQL injection in quest:netvault backup (critical 9.8)
- [CVE-2017-17412](https://insights.sbomify.com/CVE-2017-17412/): SQL injection in Quest NetVault Backup (critical 9.8)
- [CVE-2017-17411](https://insights.sbomify.com/CVE-2017-17411/): Command injection in Linksys WVBR0 (critical 9.8)
- [CVE-2017-17410](https://insights.sbomify.com/CVE-2017-17410/): Memory corruption in Bitdefender Internet Security (high 8.8)
- [CVE-2017-1741](https://insights.sbomify.com/CVE-2017-1741/): Information disclosure in WebSphere Application Server (medium 4.3)
- [CVE-2017-17409](https://insights.sbomify.com/CVE-2017-17409/): Integer overflow in Bitdefender Internet Security (high 8.8)
- [CVE-2017-17408](https://insights.sbomify.com/CVE-2017-17408/): Integer overflow in Bitdefender Internet Security (high 8.8)
- [CVE-2017-17407](https://insights.sbomify.com/CVE-2017-17407/): Command injection in NetGain Systems Enterprise Manager (critical 9.8)
- [CVE-2017-17406](https://insights.sbomify.com/CVE-2017-17406/): Deserialization in NetGain Systems Enterprise Manager (critical 9.8)
- [CVE-2017-17405](https://insights.sbomify.com/CVE-2017-17405/): Command injection in debian:debian linux (high 8.8)
- [CVE-2017-1740](https://insights.sbomify.com/CVE-2017-1740/): Cross-site scripting in Cram Social Program Management (medium 5.4)
- [CVE-2017-1739](https://insights.sbomify.com/CVE-2017-1739/): Cross-site scripting in Cram Social Program Management (medium 5.4)
- [CVE-2017-17384](https://insights.sbomify.com/CVE-2017-17384/): Privilege escalation in ispconfig:ispconfig (high 8.8)
- [CVE-2017-17383](https://insights.sbomify.com/CVE-2017-17383/): Cross-site Scripting in Jenkins Core (medium 4.7)
- [CVE-2017-17382](https://insights.sbomify.com/CVE-2017-17382/): Weak cryptography in citrix:application delivery controller firmware (medium 5.9)
- [CVE-2017-17381](https://insights.sbomify.com/CVE-2017-17381/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2017-1738](https://insights.sbomify.com/CVE-2017-1738/): Cross-site scripting in Rational Quality Manager (medium 6.3)
- [CVE-2017-1734](https://insights.sbomify.com/CVE-2017-1734/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3)
- [CVE-2017-17330](https://insights.sbomify.com/CVE-2017-17330/): Denial of service in AR3200; NGFW Module (low 3.3)
- [CVE-2017-1733](https://insights.sbomify.com/CVE-2017-1733/): Information disclosure in Security QRadar SIEM (medium 4.0)
- [CVE-2017-17329](https://insights.sbomify.com/CVE-2017-17329/): Denial of service in ViewPoint 8660 (low 3.3)
- [CVE-2017-17328](https://insights.sbomify.com/CVE-2017-17328/): Integer overflow in MHA-AL00A (medium 5.5)
- [CVE-2017-17327](https://insights.sbomify.com/CVE-2017-17327/): Denial of service in MHA-AL00A (medium 5.5)
- [CVE-2017-17326](https://insights.sbomify.com/CVE-2017-17326/): Security feature bypass in Mate 9 Pro (medium 4.6)
- [CVE-2017-17325](https://insights.sbomify.com/CVE-2017-17325/): Information disclosure in HiCinema (low 3.7)
- [CVE-2017-17324](https://insights.sbomify.com/CVE-2017-17324/): Integer overflow in Mate 9 Pro (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/77/