# Vulnerabilities published in 2017


- [CVE-2017-17050](https://insights.sbomify.com/CVE-2017-17050/): Null dereference in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-1705](https://insights.sbomify.com/CVE-2017-1705/): Information disclosure in Security Privileged Identity Manager (medium 4.3)
- [CVE-2017-17049](https://insights.sbomify.com/CVE-2017-17049/): Null dereference in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-17046](https://insights.sbomify.com/CVE-2017-17046/): Information disclosure in xen:xen (medium 6.5)
- [CVE-2017-17045](https://insights.sbomify.com/CVE-2017-17045/): Use after free in xen:xen (high 8.8)
- [CVE-2017-17044](https://insights.sbomify.com/CVE-2017-17044/): Denial of service in xen:xen (medium 6.5)
- [CVE-2017-17043](https://insights.sbomify.com/CVE-2017-17043/): Cross-site scripting in zitec:emag marketplace connector (medium 6.1)
- [CVE-2017-17042](https://insights.sbomify.com/CVE-2017-17042/): Arbitrary file read vulnerability in yard server (high 7.5)
- [CVE-2017-17033](https://insights.sbomify.com/CVE-2017-17033/): Memory corruption in QTS Notification function (critical 9.8)
- [CVE-2017-17032](https://insights.sbomify.com/CVE-2017-17032/): Memory corruption in QTS Password function (critical 9.8)
- [CVE-2017-17031](https://insights.sbomify.com/CVE-2017-17031/): Memory corruption in QTS Password function (critical 9.8)
- [CVE-2017-17030](https://insights.sbomify.com/CVE-2017-17030/): Memory corruption in QTS Login function (critical 9.8)
- [CVE-2017-17029](https://insights.sbomify.com/CVE-2017-17029/): Memory corruption in QTS Login function (critical 9.8)
- [CVE-2017-17028](https://insights.sbomify.com/CVE-2017-17028/): Memory corruption in QTS External Device function (critical 9.8)
- [CVE-2017-17027](https://insights.sbomify.com/CVE-2017-17027/): Memory corruption in QTS FTP service (critical 9.8)
- [CVE-2017-17023](https://insights.sbomify.com/CVE-2017-17023/): Security feature bypass in ncp-e:ncp secure entry client (high 8.1)
- [CVE-2017-17020](https://insights.sbomify.com/CVE-2017-17020/): Command injection in dlink:dcs-5009 firmware (high 8.8)
- [CVE-2017-17010](https://insights.sbomify.com/CVE-2017-17010/): Privilege escalation in Content Manager Assistant for PlayStation (high 7.8)
- [CVE-2017-1701](https://insights.sbomify.com/CVE-2017-1701/): Weak cryptography in Rational Team Concert (high 8.8)
- [CVE-2017-1700](https://insights.sbomify.com/CVE-2017-1700/): Missing authorization in Rational Collaborative Lifecycle Management (medium 6.5)
- [CVE-2017-16997](https://insights.sbomify.com/CVE-2017-16997/): Privilege escalation in glibc 2.19 through 2.26 (high 7.8)
- [CVE-2017-16996](https://insights.sbomify.com/CVE-2017-16996/): Memory corruption in Linux kernel through 4.14.8 (high 7.8)
- [CVE-2017-16995](https://insights.sbomify.com/CVE-2017-16995/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2017-16994](https://insights.sbomify.com/CVE-2017-16994/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2017-1699](https://insights.sbomify.com/CVE-2017-1699/): Misconfiguration in MQ (low 3.3)
- [CVE-2017-1698](https://insights.sbomify.com/CVE-2017-1698/): Information disclosure in WebSphere Portal (medium 5.3)
- [CVE-2017-16962](https://insights.sbomify.com/CVE-2017-16962/): Cross-site scripting in communigate:communigate pro (medium 6.1)
- [CVE-2017-16961](https://insights.sbomify.com/CVE-2017-16961/): SQL injection in bigtreecms:bigtree cms (medium 6.5)
- [CVE-2017-16960](https://insights.sbomify.com/CVE-2017-16960/): Command injection in tp-link:tl-er3210g firmware (high 8.8)
- [CVE-2017-1696](https://insights.sbomify.com/CVE-2017-1696/): Command injection in Security QRadar SIEM (high 8.8)
- [CVE-2017-16959](https://insights.sbomify.com/CVE-2017-16959/): Path traversal in tp-link:tl-er3210g firmware (medium 6.5)
- [CVE-2017-16958](https://insights.sbomify.com/CVE-2017-16958/): Command injection in tp-link:tl-er3210g firmware (high 8.8)
- [CVE-2017-16957](https://insights.sbomify.com/CVE-2017-16957/): Command injection in tp-link:tl-er3210g firmware (high 8.8)
- [CVE-2017-16956](https://insights.sbomify.com/CVE-2017-16956/): Cross-site scripting in symphony project:symphony (medium 6.1)
- [CVE-2017-16955](https://insights.sbomify.com/CVE-2017-16955/): SQL injection in inlinks project:inlinks (high 8.8)
- [CVE-2017-16953](https://insights.sbomify.com/CVE-2017-16953/): Auth bypass in zte:zxdsl 831cii firmware (high 7.5)
- [CVE-2017-16952](https://insights.sbomify.com/CVE-2017-16952/): Denial of service in kmplayer:kmplayer (medium 5.5)
- [CVE-2017-16951](https://insights.sbomify.com/CVE-2017-16951/): Denial of service in audiovalley:winamp pro (medium 5.5)
- [CVE-2017-16950](https://insights.sbomify.com/CVE-2017-16950/): Cross-site scripting in urbackup:urbackup server (medium 6.1)
- [CVE-2017-1695](https://insights.sbomify.com/CVE-2017-1695/): Weak cryptography in QRadar SIEM (medium 5.9)
- [CVE-2017-16949](https://insights.sbomify.com/CVE-2017-16949/): File upload in accesspressthemes:anonymous post pro (critical 9.8)
- [CVE-2017-16948](https://insights.sbomify.com/CVE-2017-16948/): Null dereference in tgsoft:vir.it explorer (high 7.8)
- [CVE-2017-16946](https://insights.sbomify.com/CVE-2017-16946/): Information disclosure in misp-project:misp (medium 4.9)
- [CVE-2017-16945](https://insights.sbomify.com/CVE-2017-16945/): Privilege escalation in haystacksoftware:arq (high 7.8)
- [CVE-2017-16944](https://insights.sbomify.com/CVE-2017-16944/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2017-16943](https://insights.sbomify.com/CVE-2017-16943/): Use after free in debian:debian linux (critical 9.8)
- [CVE-2017-16942](https://insights.sbomify.com/CVE-2017-16942/): Denial of service in libsndfile project:libsndfile (medium 6.5)
- [CVE-2017-16941](https://insights.sbomify.com/CVE-2017-16941/): File upload in octobercms:october (high 8.8)
- [CVE-2017-1694](https://insights.sbomify.com/CVE-2017-1694/): Information disclosure in Integration Bus (high 8.1)
- [CVE-2017-16939](https://insights.sbomify.com/CVE-2017-16939/): Use after free in debian:debian linux (high 7.8)
- [CVE-2017-16938](https://insights.sbomify.com/CVE-2017-16938/): Memory corruption in optipng project:optipng (high 7.8)
- [CVE-2017-16936](https://insights.sbomify.com/CVE-2017-16936/): Path traversal in tenda:ac15 firmware (medium 6.5)
- [CVE-2017-16935](https://insights.sbomify.com/CVE-2017-16935/): Auth bypass in ametys:ametys (critical 9.8)
- [CVE-2017-16934](https://insights.sbomify.com/CVE-2017-16934/): Command injection in dbltek:web server (critical 9.8)
- [CVE-2017-16933](https://insights.sbomify.com/CVE-2017-16933/): Privilege escalation in icinga:icinga (high 7.0)
- [CVE-2017-16932](https://insights.sbomify.com/CVE-2017-16932/): Nokogiri gem, via libxml, is affected by DoS vulnerabilities (high 7.5)
- [CVE-2017-16931](https://insights.sbomify.com/CVE-2017-16931/): Memory corruption in xmlsoft:libxml2 (critical 9.8)
- [CVE-2017-16930](https://insights.sbomify.com/CVE-2017-16930/): Memory corruption in claymore dual miner project:claymore dual miner (critical 9.8)
- [CVE-2017-1693](https://insights.sbomify.com/CVE-2017-1693/): Auth bypass in Integration Bus (medium 5.6)
- [CVE-2017-16929](https://insights.sbomify.com/CVE-2017-16929/): Path traversal in claymore dual miner project:claymore dual miner (high 8.1)
- [CVE-2017-16928](https://insights.sbomify.com/CVE-2017-16928/): Privilege escalation in haystacksoftware:arq (high 7.8)
- [CVE-2017-16927](https://insights.sbomify.com/CVE-2017-16927/): Memory corruption in debian:debian linux (high 8.4)
- [CVE-2017-16926](https://insights.sbomify.com/CVE-2017-16926/): Command injection in ohcount project:ohcount (critical 9.8)
- [CVE-2017-16924](https://insights.sbomify.com/CVE-2017-16924/): Information disclosure in zohocorp:manageengine desktop central (critical 9.8)
- [CVE-2017-16923](https://insights.sbomify.com/CVE-2017-16923/): Command injection in tenda:ac15 firmware (high 8.8)
- [CVE-2017-16922](https://insights.sbomify.com/CVE-2017-16922/): Path traversal in wowza:streaming engine (medium 5.3)
- [CVE-2017-16921](https://insights.sbomify.com/CVE-2017-16921/): Command injection in debian:debian linux (high 8.8)
- [CVE-2017-16920](https://insights.sbomify.com/CVE-2017-16920/): File upload in finecms:finecms (critical 9.8)
- [CVE-2017-1692](https://insights.sbomify.com/CVE-2017-1692/): Privilege escalation in AIX (high 7.8)
- [CVE-2017-16919](https://insights.sbomify.com/CVE-2017-16919/): Cross-site scripting in mapos project:mapos (medium 5.4)
- [CVE-2017-16914](https://insights.sbomify.com/CVE-2017-16914/): Null dereference in Linux Kernel (medium 5.9)
- [CVE-2017-16913](https://insights.sbomify.com/CVE-2017-16913/): Denial of service in Linux Kernel (medium 5.9)
- [CVE-2017-16912](https://insights.sbomify.com/CVE-2017-16912/): Memory corruption in Linux Kernel (medium 5.9)
- [CVE-2017-16911](https://insights.sbomify.com/CVE-2017-16911/): Information disclosure in Linux Kernel (medium 4.7)
- [CVE-2017-16910](https://insights.sbomify.com/CVE-2017-16910/): Memory corruption in LibRaw (medium 6.5)
- [CVE-2017-1691](https://insights.sbomify.com/CVE-2017-1691/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-16909](https://insights.sbomify.com/CVE-2017-16909/): Memory corruption in LibRaw (high 8.8)
- [CVE-2017-16908](https://insights.sbomify.com/CVE-2017-16908/): Cross-site scripting in horde:groupware (medium 5.4)
- [CVE-2017-16907](https://insights.sbomify.com/CVE-2017-16907/): Cross-site scripting in horde:groupware (medium 5.4)
- [CVE-2017-16906](https://insights.sbomify.com/CVE-2017-16906/): Cross-site scripting in horde:groupware (medium 5.4)
- [CVE-2017-16905](https://insights.sbomify.com/CVE-2017-16905/): Code injection in duolingo:tinycards (high 8.1)
- [CVE-2017-16904](https://insights.sbomify.com/CVE-2017-16904/): Cross-site scripting in lvyecms project:lvyecms (medium 6.1)
- [CVE-2017-16903](https://insights.sbomify.com/CVE-2017-16903/): Path traversal in lvyecms project:lvyecms (critical 9.8)
- [CVE-2017-16902](https://insights.sbomify.com/CVE-2017-16902/): Memory corruption in vonage:vdv-23 firmware (high 7.5)
- [CVE-2017-16900](https://insights.sbomify.com/CVE-2017-16900/): Auth bypass in hunesion:i-onenet (medium 5.5)
- [CVE-2017-1690](https://insights.sbomify.com/CVE-2017-1690/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-16899](https://insights.sbomify.com/CVE-2017-16899/): Memory corruption in debian:debian linux (high 7.1)
- [CVE-2017-16898](https://insights.sbomify.com/CVE-2017-16898/): Memory corruption in libming:libming (medium 5.5)
- [CVE-2017-16897](https://insights.sbomify.com/CVE-2017-16897/): passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token (high 8.1)
- [CVE-2017-16896](https://insights.sbomify.com/CVE-2017-16896/): SQL injection in tt-rss:tiny tiny rss (critical 9.8)
- [CVE-2017-16895](https://insights.sbomify.com/CVE-2017-16895/): Privilege escalation in arqbackup:arq (high 7.8)
- [CVE-2017-16894](https://insights.sbomify.com/CVE-2017-16894/): Information disclosure in laravel:laravel (high 7.5)
- [CVE-2017-16893](https://insights.sbomify.com/CVE-2017-16893/): SQL injection in piwigo:piwigo (medium 6.5)
- [CVE-2017-16892](https://insights.sbomify.com/CVE-2017-16892/): Denial of service in bftpd project:bftpd (high 7.5)
- [CVE-2017-16890](https://insights.sbomify.com/CVE-2017-16890/): Denial of service in swftools:swftools (medium 5.5)
- [CVE-2017-1689](https://insights.sbomify.com/CVE-2017-1689/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2017-16887](https://insights.sbomify.com/CVE-2017-16887/): Missing authorization in fiberhome:lm53q1 firmware (critical 9.8)
- [CVE-2017-16886](https://insights.sbomify.com/CVE-2017-16886/): Cross-site request forgery in fiberhome:lm53q1 firmware (high 8.8)
- [CVE-2017-16885](https://insights.sbomify.com/CVE-2017-16885/): Missing authorization in fiberhome:lm53q1 firmware (critical 9.8)
- [CVE-2017-16884](https://insights.sbomify.com/CVE-2017-16884/): Cross-site scripting in mistserver:mistserver (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/80/