# Vulnerabilities published in 2017


- [CVE-2017-16144](https://insights.sbomify.com/CVE-2017-16144/): Directory Traversal in myserver.alexcthomas18 (high 7.5)
- [CVE-2017-16143](https://insights.sbomify.com/CVE-2017-16143/): Directory Traversal in commentapp.stetsonwood (high 7.5)
- [CVE-2017-16142](https://insights.sbomify.com/CVE-2017-16142/): Directory Traversal in infraserver (high 7.5)
- [CVE-2017-16141](https://insights.sbomify.com/CVE-2017-16141/): Directory Traversal in lab6drewfusbyu (high 7.5)
- [CVE-2017-16140](https://insights.sbomify.com/CVE-2017-16140/): Directory Traversal in lab6.brit95 (high 7.5)
- [CVE-2017-16139](https://insights.sbomify.com/CVE-2017-16139/): Directory Traversal in jikes (high 7.5)
- [CVE-2017-16138](https://insights.sbomify.com/CVE-2017-16138/): mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input (high 7.5)
- [CVE-2017-16137](https://insights.sbomify.com/CVE-2017-16137/): Regular Expression Denial of Service in debug (medium 5.3)
- [CVE-2017-16136](https://insights.sbomify.com/CVE-2017-16136/): method-override ReDoS when untrusted user input passed into X-HTTP-Method-Override header (high 7.5)
- [CVE-2017-16135](https://insights.sbomify.com/CVE-2017-16135/): Directory Traversal in serverzyy (high 7.5)
- [CVE-2017-16134](https://insights.sbomify.com/CVE-2017-16134/): Directory Traversal in http_static_simple (high 7.5)
- [CVE-2017-16133](https://insights.sbomify.com/CVE-2017-16133/): Directory Traversal in goserv (high 7.5)
- [CVE-2017-16132](https://insights.sbomify.com/CVE-2017-16132/): Directory Traversal in simple-npm-registry (high 7.5)
- [CVE-2017-16131](https://insights.sbomify.com/CVE-2017-16131/): Directory Traversal in unicorn-list (high 7.5)
- [CVE-2017-16130](https://insights.sbomify.com/CVE-2017-16130/): Directory Traversal in exxxxxxxxxxx (high 7.5)
- [CVE-2017-1613](https://insights.sbomify.com/CVE-2017-1613/): Information disclosure in Connections (medium 5.3)
- [CVE-2017-16129](https://insights.sbomify.com/CVE-2017-16129/): superagent vulnerable to zip bomb attacks (medium 5.9)
- [CVE-2017-16128](https://insights.sbomify.com/CVE-2017-16128/): npm-script-demo is malware (critical 9.8)
- [CVE-2017-16127](https://insights.sbomify.com/CVE-2017-16127/): pandora-doomsday is malware (critical 9.8)
- [CVE-2017-16126](https://insights.sbomify.com/CVE-2017-16126/): Tracking Module in botbait (medium 5.3)
- [CVE-2017-16125](https://insights.sbomify.com/CVE-2017-16125/): Directory Traversal in rtcmulticonnection-client (high 7.5)
- [CVE-2017-16124](https://insights.sbomify.com/CVE-2017-16124/): Directory Traversal in node-server-forfront (high 7.5)
- [CVE-2017-16123](https://insights.sbomify.com/CVE-2017-16123/): Directory Traversal in welcomyzt (high 7.5)
- [CVE-2017-16122](https://insights.sbomify.com/CVE-2017-16122/): Directory Traversal in cuciuci (high 7.5)
- [CVE-2017-16121](https://insights.sbomify.com/CVE-2017-16121/): Directory Traversal in datachannel-client (high 7.5)
- [CVE-2017-16120](https://insights.sbomify.com/CVE-2017-16120/): Directory Traversal in liyujing (high 7.5)
- [CVE-2017-1612](https://insights.sbomify.com/CVE-2017-1612/): Code injection in MQ (high 7.8)
- [CVE-2017-16119](https://insights.sbomify.com/CVE-2017-16119/): Regular Expression Denial of Service in fresh (high 7.5)
- [CVE-2017-16118](https://insights.sbomify.com/CVE-2017-16118/): Regular Expression Denial of Service in forwarded (high 7.5)
- [CVE-2017-16117](https://insights.sbomify.com/CVE-2017-16117/): Regular Expression Denial of Service in slug (high 7.5)
- [CVE-2017-16116](https://insights.sbomify.com/CVE-2017-16116/): Regular Expression Denial of Service in string package (high 7.5)
- [CVE-2017-16115](https://insights.sbomify.com/CVE-2017-16115/): Regular Expression Denial of Service in timespan (high 7.5)
- [CVE-2017-16114](https://insights.sbomify.com/CVE-2017-16114/): Regular Expression Denial of Service in marked (high 7.5)
- [CVE-2017-16113](https://insights.sbomify.com/CVE-2017-16113/): Regular Expression Denial of Service in parsejson (high 7.5)
- [CVE-2017-16111](https://insights.sbomify.com/CVE-2017-16111/): Regular Expression Denial of Service in content (high 7.5)
- [CVE-2017-16110](https://insights.sbomify.com/CVE-2017-16110/): Directory Traversal in weather.swlyons (high 7.5)
- [CVE-2017-16109](https://insights.sbomify.com/CVE-2017-16109/): Directory Traversal in easyquick (medium 5.3)
- [CVE-2017-16108](https://insights.sbomify.com/CVE-2017-16108/): Directory Traversal in gaoxiaotingtingting (high 7.5)
- [CVE-2017-16107](https://insights.sbomify.com/CVE-2017-16107/): Directory traversal in pooledwebsocket (high 7.5)
- [CVE-2017-16106](https://insights.sbomify.com/CVE-2017-16106/): Directory Traversal in tmock (high 7.5)
- [CVE-2017-16105](https://insights.sbomify.com/CVE-2017-16105/): Directory Traversal in serverwzl (high 7.5)
- [CVE-2017-16104](https://insights.sbomify.com/CVE-2017-16104/): Directory Traversal in citypredict.whauwiller (high 7.5)
- [CVE-2017-16103](https://insights.sbomify.com/CVE-2017-16103/): Directory Traversal in serveryztyzt (high 7.5)
- [CVE-2017-16102](https://insights.sbomify.com/CVE-2017-16102/): Directory Traversal in serverhuwenhui (high 7.5)
- [CVE-2017-16101](https://insights.sbomify.com/CVE-2017-16101/): Directory Traversal in serverwg (high 7.5)
- [CVE-2017-16100](https://insights.sbomify.com/CVE-2017-16100/): Command Injection in dns-sync (critical 9.8)
- [CVE-2017-16099](https://insights.sbomify.com/CVE-2017-16099/): Regular Expression Denial of Service in no-case (high 7.5)
- [CVE-2017-16098](https://insights.sbomify.com/CVE-2017-16098/): Regular Expression Denial of Service in charset (high 7.5)
- [CVE-2017-16097](https://insights.sbomify.com/CVE-2017-16097/): Directory Traversal in tiny-http (high 7.5)
- [CVE-2017-16096](https://insights.sbomify.com/CVE-2017-16096/): Directory Traversal in serveryaozeyan (high 7.5)
- [CVE-2017-16095](https://insights.sbomify.com/CVE-2017-16095/): Directory Traversal in serverliujiayi1 (high 7.5)
- [CVE-2017-16094](https://insights.sbomify.com/CVE-2017-16094/): Directory Traversal in iter-http (high 7.5)
- [CVE-2017-16093](https://insights.sbomify.com/CVE-2017-16093/): Directory Traversal in cyber-js (high 7.5)
- [CVE-2017-16092](https://insights.sbomify.com/CVE-2017-16092/): Directory Traversal in sencisho (high 7.5)
- [CVE-2017-16091](https://insights.sbomify.com/CVE-2017-16091/): Directory Traversal in xtalk (high 7.5)
- [CVE-2017-16090](https://insights.sbomify.com/CVE-2017-16090/): Directory Traversal in fsk-server (high 7.5)
- [CVE-2017-1609](https://insights.sbomify.com/CVE-2017-1609/): Cross-site scripting in Rational Quality Manager (medium 5.4)
- [CVE-2017-16089](https://insights.sbomify.com/CVE-2017-16089/): Directory Traversal in serverlyr (high 7.5)
- [CVE-2017-16088](https://insights.sbomify.com/CVE-2017-16088/): Sandbox Breakout in safe-eval (critical 10.0)
- [CVE-2017-16086](https://insights.sbomify.com/CVE-2017-16086/): ReDoS via long UserAgent header in ua-parser (high 7.5)
- [CVE-2017-16085](https://insights.sbomify.com/CVE-2017-16085/): Directory Traversal in tinyserver2 (high 7.5)
- [CVE-2017-16084](https://insights.sbomify.com/CVE-2017-16084/): Directory Traversal in list-n-stream (high 7.5)
- [CVE-2017-16083](https://insights.sbomify.com/CVE-2017-16083/): Directory Traversal in node-simple-router (high 7.5)
- [CVE-2017-16082](https://insights.sbomify.com/CVE-2017-16082/): Remote Code Execution in pg (critical 9.8)
- [CVE-2017-16081](https://insights.sbomify.com/CVE-2017-16081/): cross-env.js is malware (high 7.5)
- [CVE-2017-16080](https://insights.sbomify.com/CVE-2017-16080/): Nodesass is malware (high 7.5)
- [CVE-2017-1608](https://insights.sbomify.com/CVE-2017-1608/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-16079](https://insights.sbomify.com/CVE-2017-16079/): smb is malware (high 7.5)
- [CVE-2017-16078](https://insights.sbomify.com/CVE-2017-16078/): Shadowsock is malware (high 7.5)
- [CVE-2017-16077](https://insights.sbomify.com/CVE-2017-16077/): mongose is malware (high 7.5)
- [CVE-2017-16076](https://insights.sbomify.com/CVE-2017-16076/): Hijacked Environment Variables in proxy.js (high 7.5)
- [CVE-2017-16075](https://insights.sbomify.com/CVE-2017-16075/): http-proxy.js is malware (high 7.5)
- [CVE-2017-16074](https://insights.sbomify.com/CVE-2017-16074/): crossenv is malware (high 7.5)
- [CVE-2017-16073](https://insights.sbomify.com/CVE-2017-16073/): noderequest is malware (high 7.5)
- [CVE-2017-16072](https://insights.sbomify.com/CVE-2017-16072/): nodemailer.js is malware (high 7.5)
- [CVE-2017-16071](https://insights.sbomify.com/CVE-2017-16071/): nodemailer-js is malware (high 7.5)
- [CVE-2017-16070](https://insights.sbomify.com/CVE-2017-16070/): nodecaffe is malware (high 7.5)
- [CVE-2017-1607](https://insights.sbomify.com/CVE-2017-1607/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2017-16069](https://insights.sbomify.com/CVE-2017-16069/): nodeffmpeg is malware (high 7.5)
- [CVE-2017-16068](https://insights.sbomify.com/CVE-2017-16068/): ffmepg is malware (high 7.5)
- [CVE-2017-16067](https://insights.sbomify.com/CVE-2017-16067/): node-opencv is malware (high 7.5)
- [CVE-2017-16066](https://insights.sbomify.com/CVE-2017-16066/): opencv.js is malware (high 7.5)
- [CVE-2017-16065](https://insights.sbomify.com/CVE-2017-16065/): openssl.js is malware (high 7.5)
- [CVE-2017-16064](https://insights.sbomify.com/CVE-2017-16064/): node-openssl is malware (high 7.5)
- [CVE-2017-16063](https://insights.sbomify.com/CVE-2017-16063/): node-opensl is malware (high 7.5)
- [CVE-2017-16062](https://insights.sbomify.com/CVE-2017-16062/): node-tkinter is malware (high 7.5)
- [CVE-2017-16061](https://insights.sbomify.com/CVE-2017-16061/): tkinter is malware (high 7.5)
- [CVE-2017-16060](https://insights.sbomify.com/CVE-2017-16060/): babelcli is malware (high 7.5)
- [CVE-2017-1606](https://insights.sbomify.com/CVE-2017-1606/): SQL injection in Financial Transaction Manager (high 8.8)
- [CVE-2017-16059](https://insights.sbomify.com/CVE-2017-16059/): mssql-node is malware (high 7.5)
- [CVE-2017-16058](https://insights.sbomify.com/CVE-2017-16058/): gruntcli is malware (high 7.5)
- [CVE-2017-16057](https://insights.sbomify.com/CVE-2017-16057/): nodemssql is malware (high 7.5)
- [CVE-2017-16056](https://insights.sbomify.com/CVE-2017-16056/): mssql.js is malware (high 7.5)
- [CVE-2017-16055](https://insights.sbomify.com/CVE-2017-16055/): sqlserver is malware (high 7.5)
- [CVE-2017-16054](https://insights.sbomify.com/CVE-2017-16054/): nodefabric is malware (high 7.5)
- [CVE-2017-16053](https://insights.sbomify.com/CVE-2017-16053/): fabric-js is malware (high 7.5)
- [CVE-2017-16052](https://insights.sbomify.com/CVE-2017-16052/): node-fabric is malware (high 7.5)
- [CVE-2017-16051](https://insights.sbomify.com/CVE-2017-16051/): sqliter is malware (high 7.5)
- [CVE-2017-16050](https://insights.sbomify.com/CVE-2017-16050/): sqlite.js is malware (high 7.5)
- [CVE-2017-16049](https://insights.sbomify.com/CVE-2017-16049/): nodesqlite is malware (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/87/