# Vulnerabilities published in 2017


- [CVE-2017-16883](https://insights.sbomify.com/CVE-2017-16883/): Null dereference in libming:libming (medium 6.5)
- [CVE-2017-16882](https://insights.sbomify.com/CVE-2017-16882/): Privilege escalation in icinga:icinga (high 7.8)
- [CVE-2017-16881](https://insights.sbomify.com/CVE-2017-16881/): Cross-site scripting in symphony project:symphony (medium 6.1)
- [CVE-2017-16880](https://insights.sbomify.com/CVE-2017-16880/): filp whoops Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2017-1688](https://insights.sbomify.com/CVE-2017-1688/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2017-16879](https://insights.sbomify.com/CVE-2017-16879/): Memory corruption in invisible-island:ncurses (high 7.8)
- [CVE-2017-16878](https://insights.sbomify.com/CVE-2017-16878/): Cross-site scripting in paloaltonetworks:pan-os (medium 6.1)
- [CVE-2017-16877](https://insights.sbomify.com/CVE-2017-16877/): Next.js Directory Traversal Vulnerability (high 7.5)
- [CVE-2017-16876](https://insights.sbomify.com/CVE-2017-16876/): mistune Cross-site scripting (XSS) vulnerability (medium 6.1)
- [CVE-2017-16875](https://insights.sbomify.com/CVE-2017-16875/): Integer overflow in teluu:pjsip (high 7.5)
- [CVE-2017-16873](https://insights.sbomify.com/CVE-2017-16873/): Privilege escalation in hashicorp:vagrant vmware fusion (high 7.8)
- [CVE-2017-16872](https://insights.sbomify.com/CVE-2017-16872/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2017-16871](https://insights.sbomify.com/CVE-2017-16871/): Race condition in updraftplus:updraftplus (high 8.1)
- [CVE-2017-16870](https://insights.sbomify.com/CVE-2017-16870/): Server-side request forgery in updraftplus:updraftplus (high 8.1)
- [CVE-2017-16869](https://insights.sbomify.com/CVE-2017-16869/): Memory corruption in upx:upx (high 7.8)
- [CVE-2017-16868](https://insights.sbomify.com/CVE-2017-16868/): Integer overflow in swftools:swftools (medium 5.5)
- [CVE-2017-16867](https://insights.sbomify.com/CVE-2017-16867/): Denial of service in amazon:amazon key firmware (medium 6.5)
- [CVE-2017-16866](https://insights.sbomify.com/CVE-2017-16866/): Cross-site scripting in finecms:finecms (medium 6.1)
- [CVE-2017-16865](https://insights.sbomify.com/CVE-2017-16865/): Server-side request forgery in Jira (medium 5.3)
- [CVE-2017-16864](https://insights.sbomify.com/CVE-2017-16864/): Cross-site scripting in Jira (medium 6.1)
- [CVE-2017-16863](https://insights.sbomify.com/CVE-2017-16863/): Cross-site scripting in Atlassian Jira (medium 6.1)
- [CVE-2017-16862](https://insights.sbomify.com/CVE-2017-16862/): Cross-site request forgery in Jira (medium 4.3)
- [CVE-2017-16861](https://insights.sbomify.com/CVE-2017-16861/): Code injection in Fisheye and Crucible (critical 9.8)
- [CVE-2017-16860](https://insights.sbomify.com/CVE-2017-16860/): Cross-site scripting in Application Links (medium 6.1)
- [CVE-2017-16859](https://insights.sbomify.com/CVE-2017-16859/): Path traversal in Fisheye and Crucible (medium 6.5)
- [CVE-2017-16858](https://insights.sbomify.com/CVE-2017-16858/): Auth bypass in Crowd (medium 6.8)
- [CVE-2017-16857](https://insights.sbomify.com/CVE-2017-16857/): Race condition in Auto-Unapprove Plugin (for Bitbucket Server) (high 8.5)
- [CVE-2017-16856](https://insights.sbomify.com/CVE-2017-16856/): Cross-site scripting in Confluence (medium 6.1)
- [CVE-2017-16854](https://insights.sbomify.com/CVE-2017-16854/): Information disclosure in debian:debian linux (medium 6.5)
- [CVE-2017-16853](https://insights.sbomify.com/CVE-2017-16853/): Security feature bypass in debian:debian linux (high 8.1)
- [CVE-2017-16852](https://insights.sbomify.com/CVE-2017-16852/): Security feature bypass in debian:debian linux (high 8.1)
- [CVE-2017-16851](https://insights.sbomify.com/CVE-2017-16851/): SQL injection in zohocorp:manageengine applications manager (critical 9.8)
- [CVE-2017-16850](https://insights.sbomify.com/CVE-2017-16850/): SQL injection in zohocorp:manageengine applications manager (critical 9.8)
- [CVE-2017-16849](https://insights.sbomify.com/CVE-2017-16849/): SQL injection in zohocorp:manageengine applications manager (critical 9.8)
- [CVE-2017-16848](https://insights.sbomify.com/CVE-2017-16848/): SQL injection in zohocorp:manageengine applications manager (critical 9.8)
- [CVE-2017-16847](https://insights.sbomify.com/CVE-2017-16847/): SQL injection in zohocorp:manageengine applications manager (critical 9.8)
- [CVE-2017-16846](https://insights.sbomify.com/CVE-2017-16846/): SQL injection in zohocorp:manageengine applications manager (critical 9.8)
- [CVE-2017-16845](https://insights.sbomify.com/CVE-2017-16845/): Memory corruption in canonical:ubuntu linux (critical 10.0)
- [CVE-2017-16844](https://insights.sbomify.com/CVE-2017-16844/): Memory corruption in procmail:procmail (critical 9.8)
- [CVE-2017-16843](https://insights.sbomify.com/CVE-2017-16843/): Cross-site scripting in vonage:vdv-23 firmware (medium 5.4)
- [CVE-2017-16842](https://insights.sbomify.com/CVE-2017-16842/): Cross-site scripting in yoast:wordpress seo (medium 4.8)
- [CVE-2017-16841](https://insights.sbomify.com/CVE-2017-16841/): Cross-site scripting in lansweeper:lansweeper (medium 6.1)
- [CVE-2017-16840](https://insights.sbomify.com/CVE-2017-16840/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2017-16839](https://insights.sbomify.com/CVE-2017-16839/): Privilege escalation in hashicorp:vagrant vmware fusion (high 7.0)
- [CVE-2017-16837](https://insights.sbomify.com/CVE-2017-16837/): Code injection in trusted boot project:trusted boot (high 7.8)
- [CVE-2017-16836](https://insights.sbomify.com/CVE-2017-16836/): Cross-site scripting in commscope:arris tg1682g firmware (medium 6.1)
- [CVE-2017-16835](https://insights.sbomify.com/CVE-2017-16835/): Information disclosure in photo\,video locker-calculator project:photo\,video locker-calculator (high 7.5)
- [CVE-2017-16834](https://insights.sbomify.com/CVE-2017-16834/): Privilege escalation in pnp4nagios:pnp4nagios (high 7.8)
- [CVE-2017-16833](https://insights.sbomify.com/CVE-2017-16833/): Gemirro Stored XSS in Gemspec "homepage" value (medium 6.1)
- [CVE-2017-16832](https://insights.sbomify.com/CVE-2017-16832/): Integer overflow in gnu:binutils (high 7.8)
- [CVE-2017-16831](https://insights.sbomify.com/CVE-2017-16831/): Integer overflow in gnu:binutils (high 7.8)
- [CVE-2017-16830](https://insights.sbomify.com/CVE-2017-16830/): Integer overflow in gnu:binutils (high 7.8)
- [CVE-2017-1683](https://insights.sbomify.com/CVE-2017-1683/): Cross-site scripting in Connections (medium 5.4)
- [CVE-2017-16829](https://insights.sbomify.com/CVE-2017-16829/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-16828](https://insights.sbomify.com/CVE-2017-16828/): Integer overflow in gnu:binutils (high 7.8)
- [CVE-2017-16827](https://insights.sbomify.com/CVE-2017-16827/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-16826](https://insights.sbomify.com/CVE-2017-16826/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-16821](https://insights.sbomify.com/CVE-2017-16821/): Cross-site scripting in b3log:symphony (medium 5.4)
- [CVE-2017-16820](https://insights.sbomify.com/CVE-2017-16820/): Memory corruption in collectd:collectd (critical 9.8)
- [CVE-2017-1682](https://insights.sbomify.com/CVE-2017-1682/): Cross-site scripting in Connections (medium 5.4)
- [CVE-2017-16819](https://insights.sbomify.com/CVE-2017-16819/): Cross-site scripting in icontime:rtc-1000 firmware (medium 5.4)
- [CVE-2017-16818](https://insights.sbomify.com/CVE-2017-16818/): Denial of service in fedoraproject:fedora (medium 6.5)
- [CVE-2017-16816](https://insights.sbomify.com/CVE-2017-16816/): Denial of service in wisc:htcondor (medium 6.5)
- [CVE-2017-16815](https://insights.sbomify.com/CVE-2017-16815/): Cross-site scripting in snapcreek:duplicator (medium 6.1)
- [CVE-2017-16814](https://insights.sbomify.com/CVE-2017-16814/): Path traversal in foxitsoftware:mobilepdf (medium 5.5)
- [CVE-2017-16813](https://insights.sbomify.com/CVE-2017-16813/): Denial of service in foxitsoftware:mobilepdf (medium 5.5)
- [CVE-2017-16810](https://insights.sbomify.com/CVE-2017-16810/): Cross-site scripting in octopus:octopus deploy (medium 5.4)
- [CVE-2017-1681](https://insights.sbomify.com/CVE-2017-1681/): Information disclosure in Liberty for Java for Bluemix (low 3.3)
- [CVE-2017-16808](https://insights.sbomify.com/CVE-2017-16808/): Memory corruption in tcpdump:tcpdump (medium 5.5)
- [CVE-2017-16807](https://insights.sbomify.com/CVE-2017-16807/): Kirby XSS Vulnerability (medium 5.4)
- [CVE-2017-16806](https://insights.sbomify.com/CVE-2017-16806/): Path traversal in ulterius:ulterius server (high 7.5)
- [CVE-2017-16805](https://insights.sbomify.com/CVE-2017-16805/): Memory corruption in radare:radare2 (medium 5.5)
- [CVE-2017-16804](https://insights.sbomify.com/CVE-2017-16804/): Information disclosure in debian:debian linux (medium 4.3)
- [CVE-2017-16803](https://insights.sbomify.com/CVE-2017-16803/): Denial of service in libav:libav (high 7.5)
- [CVE-2017-16802](https://insights.sbomify.com/CVE-2017-16802/): Cross-site scripting in misp-project:misp (medium 5.4)
- [CVE-2017-16801](https://insights.sbomify.com/CVE-2017-16801/): Cross-site scripting in octopus:octopus deploy (medium 5.4)
- [CVE-2017-16799](https://insights.sbomify.com/CVE-2017-16799/): Cross-site scripting in cmsmadesimple:cmsmadesimple (medium 5.4)
- [CVE-2017-16798](https://insights.sbomify.com/CVE-2017-16798/): File upload in cmsmadesimple:cms made simple (medium 5.4)
- [CVE-2017-16797](https://insights.sbomify.com/CVE-2017-16797/): Integer overflow in swftools:swftools (high 7.8)
- [CVE-2017-16796](https://insights.sbomify.com/CVE-2017-16796/): Memory corruption in swftools:swftools (high 7.8)
- [CVE-2017-16794](https://insights.sbomify.com/CVE-2017-16794/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2017-16793](https://insights.sbomify.com/CVE-2017-16793/): Memory corruption in swftools:swftools (high 7.8)
- [CVE-2017-16792](https://insights.sbomify.com/CVE-2017-16792/): Geminabox contains Cross-site Scripting (medium 6.1)
- [CVE-2017-16790](https://insights.sbomify.com/CVE-2017-16790/): Symfony SSRF Vulnerability via Form Component (medium 6.5)
- [CVE-2017-1679](https://insights.sbomify.com/CVE-2017-1679/): Information disclosure in OpenPages GRC Platform (medium 6.2)
- [CVE-2017-16789](https://insights.sbomify.com/CVE-2017-16789/): Cross-site scripting in integrationmatters:njams (medium 4.8)
- [CVE-2017-16788](https://insights.sbomify.com/CVE-2017-16788/): Path traversal in meinbergglobal:lantime firmware (high 7.2)
- [CVE-2017-16787](https://insights.sbomify.com/CVE-2017-16787/): Path traversal in meinbergglobal:lantime firmware (medium 6.5)
- [CVE-2017-16786](https://insights.sbomify.com/CVE-2017-16786/): Path traversal in meinbergglobal:lantime firmware (medium 6.5)
- [CVE-2017-16785](https://insights.sbomify.com/CVE-2017-16785/): Cross-site scripting in cacti:cacti (medium 6.1)
- [CVE-2017-16784](https://insights.sbomify.com/CVE-2017-16784/): Cross-site scripting in cmsmadesimple:cms made simple (medium 6.1)
- [CVE-2017-16783](https://insights.sbomify.com/CVE-2017-16783/): Code injection in cmsmadesimple:cms made simple (critical 9.8)
- [CVE-2017-16782](https://insights.sbomify.com/CVE-2017-16782/): Cross-site scripting in home-assistant:home-assistant (medium 6.1)
- [CVE-2017-16781](https://insights.sbomify.com/CVE-2017-16781/): Cross-site scripting in mybb:mybb (medium 5.4)
- [CVE-2017-16780](https://insights.sbomify.com/CVE-2017-16780/): Code injection in mybb:mybb (critical 9.8)
- [CVE-2017-1678](https://insights.sbomify.com/CVE-2017-1678/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2017-16778](https://insights.sbomify.com/CVE-2017-16778/): Auth bypass in fermax:outdoor panel firmware (medium 4.6)
- [CVE-2017-16777](https://insights.sbomify.com/CVE-2017-16777/): Privilege escalation in hashicorp:vagrant (high 7.8)
- [CVE-2017-16776](https://insights.sbomify.com/CVE-2017-16776/): Auth bypass in mckesson:conserus workflow intelligence (high 8.1)
- [CVE-2017-16775](https://insights.sbomify.com/CVE-2017-16775/): Other in SSO Server (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/81/