# Vulnerabilities published in 2017


- [CVE-2017-16048](https://insights.sbomify.com/CVE-2017-16048/): node-sqlite is malware (high 7.5)
- [CVE-2017-16047](https://insights.sbomify.com/CVE-2017-16047/): mysqljs is malware (high 7.5)
- [CVE-2017-16046](https://insights.sbomify.com/CVE-2017-16046/): Supply chain in mariadb node module (high 7.5)
- [CVE-2017-16045](https://insights.sbomify.com/CVE-2017-16045/): jquery.js is malware (high 7.5)
- [CVE-2017-16044](https://insights.sbomify.com/CVE-2017-16044/): d3.js is malware (high 7.5)
- [CVE-2017-16043](https://insights.sbomify.com/CVE-2017-16043/): HTML Injection in shout (medium 6.1)
- [CVE-2017-16042](https://insights.sbomify.com/CVE-2017-16042/): Growl before 1.10.0 vulnerable to Command Injection (critical 9.8)
- [CVE-2017-16041](https://insights.sbomify.com/CVE-2017-16041/): ikst Downloads Resources over HTTP (medium 5.9)
- [CVE-2017-16040](https://insights.sbomify.com/CVE-2017-16040/): gfe-sass downloads Resources over HTTP (high 8.1)
- [CVE-2017-1604](https://insights.sbomify.com/CVE-2017-1604/): Cross-site scripting in Maximo Anywhere (medium 5.4)
- [CVE-2017-16039](https://insights.sbomify.com/CVE-2017-16039/): Directory Traversal in hftp (high 7.5)
- [CVE-2017-16038](https://insights.sbomify.com/CVE-2017-16038/): Directory Traversal in f2e-server (high 7.5)
- [CVE-2017-16037](https://insights.sbomify.com/CVE-2017-16037/): Directory Traversal in gomeplus-h5-proxy (high 7.5)
- [CVE-2017-16036](https://insights.sbomify.com/CVE-2017-16036/): Directory Traversal in badjs-sourcemap-server (high 7.5)
- [CVE-2017-16035](https://insights.sbomify.com/CVE-2017-16035/): hubl-server downloads resources over HTTP (high 8.1)
- [CVE-2017-16031](https://insights.sbomify.com/CVE-2017-16031/): Insecure randomness in socket.io (high 7.5)
- [CVE-2017-16030](https://insights.sbomify.com/CVE-2017-16030/): ReDoS via long UserAgent header in useragent (high 7.5)
- [CVE-2017-16029](https://insights.sbomify.com/CVE-2017-16029/): Directory Traversal in hostr (high 7.5)
- [CVE-2017-16028](https://insights.sbomify.com/CVE-2017-16028/): Cryptographically Weak PRNG in randomatic (medium 5.3)
- [CVE-2017-16026](https://insights.sbomify.com/CVE-2017-16026/): Remote Memory Exposure in request (medium 5.9)
- [CVE-2017-16025](https://insights.sbomify.com/CVE-2017-16025/): Denial of Service in nes (medium 5.9)
- [CVE-2017-16024](https://insights.sbomify.com/CVE-2017-16024/): Tmp files readable by other users in sync-exec (medium 6.5)
- [CVE-2017-16023](https://insights.sbomify.com/CVE-2017-16023/): Regular Expression Denial of Service in decamelize (high 7.5)
- [CVE-2017-16022](https://insights.sbomify.com/CVE-2017-16022/): Cross-Site Scripting in morris.js (medium 6.1)
- [CVE-2017-16021](https://insights.sbomify.com/CVE-2017-16021/): Regular Expression Denial Of Service in uri-js (medium 6.5)
- [CVE-2017-16020](https://insights.sbomify.com/CVE-2017-16020/): Unsafe eval() in summit allows arbitrary code execution (critical 9.8)
- [CVE-2017-1602](https://insights.sbomify.com/CVE-2017-1602/): Missing authorization in Rational Collaborative Lifecycle Management (medium 4.3)
- [CVE-2017-16019](https://insights.sbomify.com/CVE-2017-16019/): Cross-Site Scripting in gitbook (medium 6.1)
- [CVE-2017-16018](https://insights.sbomify.com/CVE-2017-16018/): Cross-Site Scripting (XSS) in restify (medium 6.1)
- [CVE-2017-16017](https://insights.sbomify.com/CVE-2017-16017/): Cross-Site Scripting in sanitize-html (medium 6.1)
- [CVE-2017-16016](https://insights.sbomify.com/CVE-2017-16016/): Cross-Site Scripting in sanitize-html (medium 6.1)
- [CVE-2017-16015](https://insights.sbomify.com/CVE-2017-16015/): Cross-Site Scripting in forms (medium 6.1)
- [CVE-2017-16014](https://insights.sbomify.com/CVE-2017-16014/): Insufficient Error Handling in http-proxy (high 7.5)
- [CVE-2017-16013](https://insights.sbomify.com/CVE-2017-16013/): Denial of Service via malformed accept-encoding header in hapi (high 7.5)
- [CVE-2017-16010](https://insights.sbomify.com/CVE-2017-16010/): Cross-Site Scripting in i18next (medium 6.1)
- [CVE-2017-1601](https://insights.sbomify.com/CVE-2017-1601/): Misconfiguration in ibm:security guardium database activity monitor (critical 9.8)
- [CVE-2017-16009](https://insights.sbomify.com/CVE-2017-16009/): XSS via Angular Expression in ag-grid (medium 6.1)
- [CVE-2017-16008](https://insights.sbomify.com/CVE-2017-16008/): Cross-Site Scripting in i18next (medium 6.1)
- [CVE-2017-16007](https://insights.sbomify.com/CVE-2017-16007/): Invalid Curve Attack in node-jose (medium 5.9)
- [CVE-2017-16006](https://insights.sbomify.com/CVE-2017-16006/): XSS in Data URI in remarkable (medium 6.1)
- [CVE-2017-16005](https://insights.sbomify.com/CVE-2017-16005/): Header Forgery in http-signature (high 7.5)
- [CVE-2017-16003](https://insights.sbomify.com/CVE-2017-16003/): windows-build-tools downloads Resources over HTTP (high 8.1)
- [CVE-2017-16001](https://insights.sbomify.com/CVE-2017-16001/): Race condition in hashicorp:vagrant (high 7.8)
- [CVE-2017-16000](https://insights.sbomify.com/CVE-2017-16000/): SQL injection in eyesofnetwork:eyesofnetwork (high 7.2)
- [CVE-2017-1600](https://insights.sbomify.com/CVE-2017-1600/): Cross-site scripting in Security Guardium (medium 5.4)
- [CVE-2017-15999](https://insights.sbomify.com/CVE-2017-15999/): Weak cryptography in nq:contacts backup \& restore (critical 9.8)
- [CVE-2017-15998](https://insights.sbomify.com/CVE-2017-15998/): Weak cryptography in nq:contacts backup \& restore (high 7.5)
- [CVE-2017-15997](https://insights.sbomify.com/CVE-2017-15997/): Weak cryptography in nq:contacts backup \& restore (high 7.8)
- [CVE-2017-15996](https://insights.sbomify.com/CVE-2017-15996/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-15994](https://insights.sbomify.com/CVE-2017-15994/): Security feature bypass in samba:rsync (critical 9.8)
- [CVE-2017-15993](https://insights.sbomify.com/CVE-2017-15993/): SQL injection in zomato clone script project:zomato clone script (critical 9.8)
- [CVE-2017-15992](https://insights.sbomify.com/CVE-2017-15992/): SQL injection in website broker script project:website broker script (critical 9.8)
- [CVE-2017-15991](https://insights.sbomify.com/CVE-2017-15991/): SQL injection in vastal:agent zone (critical 9.8)
- [CVE-2017-15990](https://insights.sbomify.com/CVE-2017-15990/): File upload in savsofteproducts:phpinventory (critical 9.8)
- [CVE-2017-15989](https://insights.sbomify.com/CVE-2017-15989/): SQL injection in online exam test application project:online exam test application (critical 9.8)
- [CVE-2017-15988](https://insights.sbomify.com/CVE-2017-15988/): SQL injection in nicephpscripts:nice php faq script (critical 9.8)
- [CVE-2017-15987](https://insights.sbomify.com/CVE-2017-15987/): SQL injection in fake magazine cover script project:fake magazine cover script (critical 9.8)
- [CVE-2017-15986](https://insights.sbomify.com/CVE-2017-15986/): SQL injection in cpa lead reward script project:cpa lead reward script (critical 9.8)
- [CVE-2017-15985](https://insights.sbomify.com/CVE-2017-15985/): SQL injection in readymadeb2bscript:basic b2b script (critical 9.8)
- [CVE-2017-15984](https://insights.sbomify.com/CVE-2017-15984/): SQL injection in bekirk:creative management system lite (critical 9.8)
- [CVE-2017-15983](https://insights.sbomify.com/CVE-2017-15983/): SQL injection in geniusocean:mymagazine magazine \& blog cms (critical 9.8)
- [CVE-2017-15982](https://insights.sbomify.com/CVE-2017-15982/): SQL injection in geniusocean:news (critical 9.8)
- [CVE-2017-15981](https://insights.sbomify.com/CVE-2017-15981/): SQL injection in geniusocean:newspaper (critical 9.8)
- [CVE-2017-15980](https://insights.sbomify.com/CVE-2017-15980/): SQL injection in rowindex:us zip codes database script (critical 9.8)
- [CVE-2017-1598](https://insights.sbomify.com/CVE-2017-1598/): Weak cryptography in Security Guardium (high 7.5)
- [CVE-2017-15979](https://insights.sbomify.com/CVE-2017-15979/): SQL injection in odallated:shareet (critical 9.8)
- [CVE-2017-15978](https://insights.sbomify.com/CVE-2017-15978/): SQL injection in arox:school erp php script (critical 9.8)
- [CVE-2017-15977](https://insights.sbomify.com/CVE-2017-15977/): SQL injection in protectedlinks:expiring download links (critical 9.8)
- [CVE-2017-15976](https://insights.sbomify.com/CVE-2017-15976/): SQL injection in zeescripts:zeebuddy (critical 9.8)
- [CVE-2017-15975](https://insights.sbomify.com/CVE-2017-15975/): SQL injection in vastal:dating zone (critical 9.8)
- [CVE-2017-15974](https://insights.sbomify.com/CVE-2017-15974/): SQL injection in datacomponents:tpanel (critical 9.8)
- [CVE-2017-15973](https://insights.sbomify.com/CVE-2017-15973/): SQL injection in sokial:sokial (critical 9.8)
- [CVE-2017-15972](https://insights.sbomify.com/CVE-2017-15972/): SQL injection in softdatepro:dating software (critical 9.8)
- [CVE-2017-15971](https://insights.sbomify.com/CVE-2017-15971/): SQL injection in softdatepro:same date pro (critical 9.8)
- [CVE-2017-15970](https://insights.sbomify.com/CVE-2017-15970/): SQL injection in phpcityportal:phpcityportal (critical 9.8)
- [CVE-2017-1597](https://insights.sbomify.com/CVE-2017-1597/): Misconfiguration in Security Guardium (medium 5.9)
- [CVE-2017-15969](https://insights.sbomify.com/CVE-2017-15969/): SQL injection in pilotgroup:allsharevideo (critical 9.8)
- [CVE-2017-15968](https://insights.sbomify.com/CVE-2017-15968/): SQL injection in contractorscripts:mybuildersite (critical 9.8)
- [CVE-2017-15967](https://insights.sbomify.com/CVE-2017-15967/): SQL injection in mailing-manager:mailing list manager pro (critical 9.8)
- [CVE-2017-15966](https://insights.sbomify.com/CVE-2017-15966/): SQL injection in zh yandexmap project:zh yandexmap (critical 9.8)
- [CVE-2017-15965](https://insights.sbomify.com/CVE-2017-15965/): SQL injection in nswd:ns download shop (critical 9.8)
- [CVE-2017-15964](https://insights.sbomify.com/CVE-2017-15964/): SQL injection in nicephpscripts:job board script (critical 9.8)
- [CVE-2017-15963](https://insights.sbomify.com/CVE-2017-15963/): SQL injection in itechscripts:gigs script (critical 9.8)
- [CVE-2017-15962](https://insights.sbomify.com/CVE-2017-15962/): File upload in istock management system project:istock management system (critical 9.8)
- [CVE-2017-15961](https://insights.sbomify.com/CVE-2017-15961/): SQL injection in iproject management system project:iproject management system (critical 9.8)
- [CVE-2017-15960](https://insights.sbomify.com/CVE-2017-15960/): SQL injection in yourarticlesdirectory:article directory script (critical 9.8)
- [CVE-2017-1596](https://insights.sbomify.com/CVE-2017-1596/): Information disclosure in Security Guardium (medium 5.5)
- [CVE-2017-15959](https://insights.sbomify.com/CVE-2017-15959/): SQL injection in adultscriptpro:adultscriptpro (critical 9.8)
- [CVE-2017-15958](https://insights.sbomify.com/CVE-2017-15958/): SQL injection in domainzaar:d-park pro (critical 9.8)
- [CVE-2017-15957](https://insights.sbomify.com/CVE-2017-15957/): File upload in ingenious school management system project:ingenious school management system (high 8.8)
- [CVE-2017-15956](https://insights.sbomify.com/CVE-2017-15956/): Path traversal in converto video downloader \& converter project:converto video downloader \& converter (high 7.5)
- [CVE-2017-15955](https://insights.sbomify.com/CVE-2017-15955/): Null dereference in bchunk project:bchunk (medium 5.5)
- [CVE-2017-15954](https://insights.sbomify.com/CVE-2017-15954/): Memory corruption in bchunk project:bchunk (medium 5.5)
- [CVE-2017-15953](https://insights.sbomify.com/CVE-2017-15953/): Memory corruption in bchunk project:bchunk (medium 5.5)
- [CVE-2017-15951](https://insights.sbomify.com/CVE-2017-15951/): Race condition in linux:linux kernel (high 7.8)
- [CVE-2017-15950](https://insights.sbomify.com/CVE-2017-15950/): Memory corruption in flexense:syncbreeze (high 7.8)
- [CVE-2017-1595](https://insights.sbomify.com/CVE-2017-1595/): Information disclosure in Security Guardium (medium 5.5)
- [CVE-2017-15949](https://insights.sbomify.com/CVE-2017-15949/): SQL injection in angry-frog:xavier (high 7.2)
- [CVE-2017-15948](https://insights.sbomify.com/CVE-2017-15948/): File upload in grabaperch:perch (medium 4.8)
- [CVE-2017-15947](https://insights.sbomify.com/CVE-2017-15947/): Cross-site scripting in aspsource:simple asc content management system (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/88/