# Vulnerabilities published in 2017


- [CVE-2017-17164](https://insights.sbomify.com/CVE-2017-17164/): Denial of service in Secospace AntiDDoS8000 (medium 5.3)
- [CVE-2017-17163](https://insights.sbomify.com/CVE-2017-17163/): Memory corruption in Secospace USG6600 (medium 5.5)
- [CVE-2017-17162](https://insights.sbomify.com/CVE-2017-17162/): Denial of service in Secospace USG6600, Secospace USG6600, Secospace USG6600, USG9500, USG9500, USG9500 (medium 5.5)
- [CVE-2017-17161](https://insights.sbomify.com/CVE-2017-17161/): Auth bypass in Duke-L09 (medium 6.8)
- [CVE-2017-17160](https://insights.sbomify.com/CVE-2017-17160/): Memory corruption in AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,NetEngine16EX,SRG1300,SRG2300,SRG3300 (medium 5.9)
- [CVE-2017-1716](https://insights.sbomify.com/CVE-2017-1716/): Information disclosure in Tivoli Workload Scheduler (low 3.3)
- [CVE-2017-17159](https://insights.sbomify.com/CVE-2017-17159/): Denial of service in MT8-EMUI4.1,NTS-AL00 (medium 6.5)
- [CVE-2017-17158](https://insights.sbomify.com/CVE-2017-17158/): Information disclosure in Berlin-L21HN; Prague-AL00A; Prague-AL00B; Prague-AL00C; Prague-L31; Prague-TL00A; Prague-TL10A (medium 4.6)
- [CVE-2017-17157](https://insights.sbomify.com/CVE-2017-17157/): Other in IPS,Module,NGFW,Module,NIP6300,NIP6600,Secospace,USG6300,Secospace,USG6500,Secospace,USG6600,USG9500 (high 7.5)
- [CVE-2017-17156](https://insights.sbomify.com/CVE-2017-17156/): Other in IPS,Module,NGFW,Module,NIP6300,NIP6600,Secospace,USG6300,Secospace,USG6500,Secospace,USG6600,USG9500 (high 7.5)
- [CVE-2017-17155](https://insights.sbomify.com/CVE-2017-17155/): Memory corruption in IPS,Module,NGFW,Module,NIP6300,NIP6600,Secospace,USG6300,Secospace,USG6500,Secospace,USG6600,USG9500 (high 7.5)
- [CVE-2017-17154](https://insights.sbomify.com/CVE-2017-17154/): Other in IPS,Module,NGFW,Module,NIP6300,NIP6600,Secospace,USG6300,Secospace,USG6500,Secospace,USG6600,USG9500 (high 7.5)
- [CVE-2017-17153](https://insights.sbomify.com/CVE-2017-17153/): Other in IPS,Module,NGFW,Module,NIP6300,NIP6600,Secospace,USG6300,Secospace,USG6500,Secospace,USG6600,USG9500 (high 7.5)
- [CVE-2017-17152](https://insights.sbomify.com/CVE-2017-17152/): Memory corruption in IPS,Module,NGFW,Module,NIP6300,NIP6600,Secospace,USG6300,Secospace,USG6500,Secospace,USG6600,USG9500 (medium 5.9)
- [CVE-2017-17151](https://insights.sbomify.com/CVE-2017-17151/): Denial of service in AR100,AR100-S,AR110-S,AR120,AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR510,DP300,NetEngine16EX,RP200,SRG1300,SRG2300,SRG3300,TE30,TE40,TE50,TE60,TP3106,TP3206,ViewPoint 8660,ViewPoint 9030 (medium 5.9)
- [CVE-2017-17150](https://insights.sbomify.com/CVE-2017-17150/): Denial of service in DP300; RP200; TE30; TE40; TE50; TE60 (medium 5.5)
- [CVE-2017-1715](https://insights.sbomify.com/CVE-2017-1715/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-17149](https://insights.sbomify.com/CVE-2017-17149/): Auth bypass in Huawei HiWallet App (low 3.9)
- [CVE-2017-17148](https://insights.sbomify.com/CVE-2017-17148/): Denial of service in DP300 (medium 5.5)
- [CVE-2017-17147](https://insights.sbomify.com/CVE-2017-17147/): Integer overflow in DP300 (medium 5.5)
- [CVE-2017-17146](https://insights.sbomify.com/CVE-2017-17146/): Memory corruption in DP300 (high 7.8)
- [CVE-2017-17145](https://insights.sbomify.com/CVE-2017-17145/): Auth bypass in huawei:honor v9 play firmware (medium 4.6)
- [CVE-2017-17144](https://insights.sbomify.com/CVE-2017-17144/): Memory corruption in DP300; RP200; RSE6500; TE30; TE40; TE50; TE60; TP3106; TP3206; ViewPoint 9030; eSpace U1960; eSpace U1981 (medium 5.3)
- [CVE-2017-17143](https://insights.sbomify.com/CVE-2017-17143/): Memory corruption in DP300; RP200; RSE6500; TE30; TE40; TE50; TE60; TP3106; TP3206; ViewPoint 9030; eSpace U1960; eSpace U1981 (medium 5.3)
- [CVE-2017-17142](https://insights.sbomify.com/CVE-2017-17142/): Memory corruption in DP300; RP200; RSE6500; TE30; TE40; TE50; TE60; TP3106; TP3206; ViewPoint 9030; eSpace U1960; eSpace U1981 (medium 5.3)
- [CVE-2017-17141](https://insights.sbomify.com/CVE-2017-17141/): Denial of service in S12700; S1700; S2700; S3700; S5700; S6700; S7700; S9700 (low 3.7)
- [CVE-2017-17140](https://insights.sbomify.com/CVE-2017-17140/): Information disclosure in Enjoy 5s; Y6 Pro (medium 5.5)
- [CVE-2017-1714](https://insights.sbomify.com/CVE-2017-1714/): Privilege escalation in Client Application Access (high 7.8)
- [CVE-2017-17139](https://insights.sbomify.com/CVE-2017-17139/): Information disclosure in Mate 9; Mate 9 Pro (medium 5.5)
- [CVE-2017-17138](https://insights.sbomify.com/CVE-2017-17138/): Denial of service in DP300; IPS Module; NGFW Module; NIP6300; NIP6600; RP200; S12700; S1700; S2700; S5700; S6700; S7700; S9700; Secospace USG6300; Secospace USG6500; Secospace USG6600; TE30; TE40; TE50; TE60; TP3106; TP3206; USG9500; ViewPoint 9030 (medium 5.5)
- [CVE-2017-17137](https://insights.sbomify.com/CVE-2017-17137/): Memory corruption in DP300; IPS Module; NGFW Module; NIP6300; NIP6600; RP200; S12700; S1700; S2700; S5700; S6700; S7700; S9700; Secospace USG6300; Secospace USG6500; Secospace USG6600; TE30; TE40; TE50; TE60; TP3106; TP3206; USG9500; ViewPoint 9030 (medium 5.5)
- [CVE-2017-17136](https://insights.sbomify.com/CVE-2017-17136/): Memory corruption in DP300; IPS Module; NGFW Module; NIP6300; NIP6600; RP200; S12700; S1700; S2700; S5700; S6700; S7700; S9700; Secospace USG6300; Secospace USG6500; Secospace USG6600; TE30; TE40; TE50; TE60; TP3106; TP3206; USG9500; ViewPoint 9030 (medium 5.5)
- [CVE-2017-17135](https://insights.sbomify.com/CVE-2017-17135/): Null dereference in DP300; IPS Module; NGFW Module; NIP6300; NIP6600; RP200; S12700; S1700; S2700; S5700; S6700; S7700; S9700; Secospace USG6300; Secospace USG6500; Secospace USG6600; TE30; TE40; TE50; TE60; TP3106; TP3206; USG9500; ViewPoint 9030 (medium 5.5)
- [CVE-2017-17134](https://insights.sbomify.com/CVE-2017-17134/): Null dereference in DP300; RP200; TE30; TE40; TE50; TE60 (medium 5.5)
- [CVE-2017-17133](https://insights.sbomify.com/CVE-2017-17133/): Null dereference in VP9660 (medium 5.5)
- [CVE-2017-17132](https://insights.sbomify.com/CVE-2017-17132/): Memory corruption in VP9660 (medium 5.5)
- [CVE-2017-17131](https://insights.sbomify.com/CVE-2017-17131/): Denial of service in DP300; RP200; TE30; TE50; TE60; VP9660 (medium 5.7)
- [CVE-2017-17130](https://insights.sbomify.com/CVE-2017-17130/): Memory corruption in libav:libav (high 8.8)
- [CVE-2017-1713](https://insights.sbomify.com/CVE-2017-1713/): Weak cryptography in Streams (medium 5.9)
- [CVE-2017-17129](https://insights.sbomify.com/CVE-2017-17129/): Null dereference in libav:libav (high 8.8)
- [CVE-2017-17128](https://insights.sbomify.com/CVE-2017-17128/): Memory corruption in libav:libav (medium 6.5)
- [CVE-2017-17127](https://insights.sbomify.com/CVE-2017-17127/): Null dereference in libav:libav (medium 6.5)
- [CVE-2017-17126](https://insights.sbomify.com/CVE-2017-17126/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-17125](https://insights.sbomify.com/CVE-2017-17125/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-17124](https://insights.sbomify.com/CVE-2017-17124/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-17123](https://insights.sbomify.com/CVE-2017-17123/): Null dereference in gnu:binutils (medium 5.5)
- [CVE-2017-17122](https://insights.sbomify.com/CVE-2017-17122/): Integer overflow in gnu:binutils (high 7.8)
- [CVE-2017-17121](https://insights.sbomify.com/CVE-2017-17121/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-1712](https://insights.sbomify.com/CVE-2017-1712/): Weak cryptography in "HCL Domino" (medium 5.9)
- [CVE-2017-17114](https://insights.sbomify.com/CVE-2017-17114/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-17113](https://insights.sbomify.com/CVE-2017-17113/): Null dereference in ikarussecurity:anti.virus (medium 5.5)
- [CVE-2017-17112](https://insights.sbomify.com/CVE-2017-17112/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-17111](https://insights.sbomify.com/CVE-2017-17111/): SQL injection in scubez:posty readymade classifieds (critical 9.8)
- [CVE-2017-17110](https://insights.sbomify.com/CVE-2017-17110/): SQL injection in techno - portfolio management panel project:techno - portfolio management panel (critical 9.8)
- [CVE-2017-1711](https://insights.sbomify.com/CVE-2017-1711/): Other in Client Application Access (high 7.8)
- [CVE-2017-17108](https://insights.sbomify.com/CVE-2017-17108/): Path traversal in konakart:konakart (critical 9.8)
- [CVE-2017-17107](https://insights.sbomify.com/CVE-2017-17107/): Hardcoded credentials in zivif:pr115-204-p-rs firmware (critical 9.8)
- [CVE-2017-17106](https://insights.sbomify.com/CVE-2017-17106/): Missing authorization in zivif:pr115-204-p-rs firmware (critical 9.8)
- [CVE-2017-17105](https://insights.sbomify.com/CVE-2017-17105/): Command injection in zivif:pr115-204-p-rs firmware (critical 9.8)
- [CVE-2017-17104](https://insights.sbomify.com/CVE-2017-17104/): Path traversal in fiyo:fiyo cms (high 7.5)
- [CVE-2017-17103](https://insights.sbomify.com/CVE-2017-17103/): SQL injection in fiyo:fiyo cms (high 8.8)
- [CVE-2017-17102](https://insights.sbomify.com/CVE-2017-17102/): SQL injection in fiyo:fiyo cms (high 7.5)
- [CVE-2017-17101](https://insights.sbomify.com/CVE-2017-17101/): Auth bypass in apexis:apm-h803-mpc firmware (critical 9.8)
- [CVE-2017-1710](https://insights.sbomify.com/CVE-2017-1710/): Privilege escalation in Storwize V7000 (2076) (critical 9.8)
- [CVE-2017-17099](https://insights.sbomify.com/CVE-2017-17099/): Memory corruption in flexense:syncbreeze (high 7.8)
- [CVE-2017-17098](https://insights.sbomify.com/CVE-2017-17098/): Code injection in gps-server:gps tracking software (critical 9.8)
- [CVE-2017-17097](https://insights.sbomify.com/CVE-2017-17097/): Weak cryptography in gps-server:gps tracking software (critical 9.8)
- [CVE-2017-17096](https://insights.sbomify.com/CVE-2017-17096/): Cross-site scripting in content cards project:content cards (medium 6.1)
- [CVE-2017-17095](https://insights.sbomify.com/CVE-2017-17095/): Memory corruption in libtiff:libtiff (high 8.8)
- [CVE-2017-17094](https://insights.sbomify.com/CVE-2017-17094/): Cross-site scripting in debian:debian linux (medium 5.4)
- [CVE-2017-17093](https://insights.sbomify.com/CVE-2017-17093/): Cross-site scripting in debian:debian linux (medium 5.4)
- [CVE-2017-17092](https://insights.sbomify.com/CVE-2017-17092/): Cross-site scripting in debian:debian linux (medium 5.4)
- [CVE-2017-17091](https://insights.sbomify.com/CVE-2017-17091/): Auth bypass in wordpress:wordpress (high 8.8)
- [CVE-2017-17090](https://insights.sbomify.com/CVE-2017-17090/): Denial of service in digium:asterisk (high 7.5)
- [CVE-2017-17089](https://insights.sbomify.com/CVE-2017-17089/): Cross-site scripting in webmin:webmin (medium 4.8)
- [CVE-2017-17088](https://insights.sbomify.com/CVE-2017-17088/): Memory corruption in flexense:syncbreeze (high 7.5)
- [CVE-2017-17087](https://insights.sbomify.com/CVE-2017-17087/): Information disclosure in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-17086](https://insights.sbomify.com/CVE-2017-17086/): Other in inedo:otter (critical 9.8)
- [CVE-2017-17085](https://insights.sbomify.com/CVE-2017-17085/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2017-17084](https://insights.sbomify.com/CVE-2017-17084/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2017-17083](https://insights.sbomify.com/CVE-2017-17083/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2017-17081](https://insights.sbomify.com/CVE-2017-17081/): Memory corruption in ffmpeg:ffmpeg (medium 6.5)
- [CVE-2017-17080](https://insights.sbomify.com/CVE-2017-17080/): Memory corruption in gnu:binutils (medium 5.5)
- [CVE-2017-17069](https://insights.sbomify.com/CVE-2017-17069/): Code injection in amazon:audible (high 7.8)
- [CVE-2017-17068](https://insights.sbomify.com/CVE-2017-17068/): auth0-js Privilege Escalation Vulnerability (high 7.5)
- [CVE-2017-17067](https://insights.sbomify.com/CVE-2017-17067/): Auth bypass in splunk:splunk (critical 9.8)
- [CVE-2017-17066](https://insights.sbomify.com/CVE-2017-17066/): Memory corruption in getkovri:kovri (high 7.5)
- [CVE-2017-17065](https://insights.sbomify.com/CVE-2017-17065/): Memory corruption in dlink:dir-605l model b firmware (high 7.5)
- [CVE-2017-17062](https://insights.sbomify.com/CVE-2017-17062/): Privilege escalation in open-xchange:open-xchange appsuite (medium 6.5)
- [CVE-2017-17061](https://insights.sbomify.com/CVE-2017-17061/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 5.4)
- [CVE-2017-17060](https://insights.sbomify.com/CVE-2017-17060/): Misconfiguration in open-xchange:open-xchange appsuite (critical 9.8)
- [CVE-2017-17059](https://insights.sbomify.com/CVE-2017-17059/): Cross-site scripting in amtythumb project:amtythumb (medium 6.1)
- [CVE-2017-17058](https://insights.sbomify.com/CVE-2017-17058/): Path traversal in automattic:woocommerce (high 7.5)
- [CVE-2017-17057](https://insights.sbomify.com/CVE-2017-17057/): Cross-site scripting in zkteco:zktime web (medium 6.1)
- [CVE-2017-17056](https://insights.sbomify.com/CVE-2017-17056/): Cross-site request forgery in zkteco:zktime web (high 8.8)
- [CVE-2017-17055](https://insights.sbomify.com/CVE-2017-17055/): Cross-site scripting in articatech:artica proxy (critical 9.0)
- [CVE-2017-17054](https://insights.sbomify.com/CVE-2017-17054/): Aubio Divide-By-Zero DoS vulnerability in new_aubio_source_wavread function (medium 5.5)
- [CVE-2017-17053](https://insights.sbomify.com/CVE-2017-17053/): Use after free in linux:linux kernel (high 7.0)
- [CVE-2017-17052](https://insights.sbomify.com/CVE-2017-17052/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2017-17051](https://insights.sbomify.com/CVE-2017-17051/): OpenStack Nova DoS by rebuilding the same instance with a new image multiple times (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/79/