# Vulnerabilities published in 2017


- [CVE-2017-15946](https://insights.sbomify.com/CVE-2017-15946/): SQL injection in selfget:tag meta (critical 9.8)
- [CVE-2017-15945](https://insights.sbomify.com/CVE-2017-15945/): Privilege escalation in mariadb:mariadb (high 7.8)
- [CVE-2017-15944](https://insights.sbomify.com/CVE-2017-15944/): Palo Alto Networks PAN-OS Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-15943](https://insights.sbomify.com/CVE-2017-15943/): Server-side request forgery in paloaltonetworks:pan-os (medium 5.3)
- [CVE-2017-15942](https://insights.sbomify.com/CVE-2017-15942/): Denial of service in paloaltonetworks:pan-os (high 7.5)
- [CVE-2017-15941](https://insights.sbomify.com/CVE-2017-15941/): Cross-site scripting in paloaltonetworks:pan-os (medium 6.1)
- [CVE-2017-15940](https://insights.sbomify.com/CVE-2017-15940/): Command injection in paloaltonetworks:pan-os (critical 9.8)
- [CVE-2017-15939](https://insights.sbomify.com/CVE-2017-15939/): Null dereference in gnu:binutils (medium 5.5)
- [CVE-2017-15938](https://insights.sbomify.com/CVE-2017-15938/): Memory corruption in gnu:binutils (high 7.5)
- [CVE-2017-15937](https://insights.sbomify.com/CVE-2017-15937/): Information disclosure in artica:pandora fms (medium 6.5)
- [CVE-2017-15936](https://insights.sbomify.com/CVE-2017-15936/): Cross-site scripting in artica:pandora fms (medium 5.4)
- [CVE-2017-15935](https://insights.sbomify.com/CVE-2017-15935/): Code injection in artica:pandora fms (high 7.2)
- [CVE-2017-15934](https://insights.sbomify.com/CVE-2017-15934/): Cross-site scripting in artica:pandora fms (medium 5.4)
- [CVE-2017-15933](https://insights.sbomify.com/CVE-2017-15933/): SQL injection in eyesofnetwork:eyesofnetwork (high 7.2)
- [CVE-2017-15932](https://insights.sbomify.com/CVE-2017-15932/): Memory corruption in radare:radare2 (high 7.8)
- [CVE-2017-15931](https://insights.sbomify.com/CVE-2017-15931/): Memory corruption in radare:radare2 (high 7.8)
- [CVE-2017-15930](https://insights.sbomify.com/CVE-2017-15930/): Null dereference in debian:debian linux (high 8.8)
- [CVE-2017-1593](https://insights.sbomify.com/CVE-2017-1593/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2017-15928](https://insights.sbomify.com/CVE-2017-15928/): Ox gem crashes due to a crafted input (high 7.5)
- [CVE-2017-15924](https://insights.sbomify.com/CVE-2017-15924/): Command injection in debian:debian linux (high 7.8)
- [CVE-2017-15923](https://insights.sbomify.com/CVE-2017-15923/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2017-15922](https://insights.sbomify.com/CVE-2017-15922/): Memory corruption in gnu:libextractor (medium 5.5)
- [CVE-2017-15921](https://insights.sbomify.com/CVE-2017-15921/): Null dereference in watchdogdevelopment:anti-malware (high 7.5)
- [CVE-2017-15920](https://insights.sbomify.com/CVE-2017-15920/): Null dereference in watchdogdevelopment:anti-malware (high 7.5)
- [CVE-2017-1592](https://insights.sbomify.com/CVE-2017-1592/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-15919](https://insights.sbomify.com/CVE-2017-15919/): SQL injection in accesspressthemes:ultimate-form-builder-lite (critical 9.8)
- [CVE-2017-15918](https://insights.sbomify.com/CVE-2017-15918/): Information disclosure in ignitum:sera (high 7.8)
- [CVE-2017-15917](https://insights.sbomify.com/CVE-2017-15917/): Privilege escalation in paessler:prtg network monitor (medium 6.5)
- [CVE-2017-15914](https://insights.sbomify.com/CVE-2017-15914/): Borg Improper Access Control vulnerability (high 8.8)
- [CVE-2017-15913](https://insights.sbomify.com/CVE-2017-15913/): Other in navercorp:whale (high 7.8)
- [CVE-2017-15911](https://insights.sbomify.com/CVE-2017-15911/): Ignite Realtime Openfire Server has Cross-site Scripting vulnerability in admin console (medium 4.8)
- [CVE-2017-1591](https://insights.sbomify.com/CVE-2017-1591/): Cross-site scripting in DataPower Gateways (medium 6.1)
- [CVE-2017-15909](https://insights.sbomify.com/CVE-2017-15909/): Hardcoded credentials in dlink:dgs-1500 firmware (critical 9.8)
- [CVE-2017-15908](https://insights.sbomify.com/CVE-2017-15908/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2017-15907](https://insights.sbomify.com/CVE-2017-15907/): SQL injection in phpcollab:phpcollab (critical 9.8)
- [CVE-2017-15906](https://insights.sbomify.com/CVE-2017-15906/): Security feature bypass in debian:debian linux (medium 5.3)
- [CVE-2017-15897](https://insights.sbomify.com/CVE-2017-15897/): Memory corruption in Node.js (low 3.1)
- [CVE-2017-15896](https://insights.sbomify.com/CVE-2017-15896/): Security feature bypass in Node.js (critical 9.1)
- [CVE-2017-15895](https://insights.sbomify.com/CVE-2017-15895/): Path traversal in Synology Router Manager (SRM) (medium 6.5)
- [CVE-2017-15894](https://insights.sbomify.com/CVE-2017-15894/): Path traversal in Synology DiskStation Manager (DSM) (medium 6.5)
- [CVE-2017-15893](https://insights.sbomify.com/CVE-2017-15893/): Path traversal in Synology File Station (medium 6.5)
- [CVE-2017-15892](https://insights.sbomify.com/CVE-2017-15892/): Cross-site scripting in Chat (medium 5.4)
- [CVE-2017-15891](https://insights.sbomify.com/CVE-2017-15891/): Missing authorization in Synology Calendar (medium 6.5)
- [CVE-2017-15890](https://insights.sbomify.com/CVE-2017-15890/): Cross-site scripting in MailPlus Server (medium 4.8)
- [CVE-2017-15889](https://insights.sbomify.com/CVE-2017-15889/): Command injection in DiskStation Manager (DSM) (high 8.8)
- [CVE-2017-15888](https://insights.sbomify.com/CVE-2017-15888/): Cross-site scripting in Synology Audio Station (medium 5.4)
- [CVE-2017-15887](https://insights.sbomify.com/CVE-2017-15887/): Auth bypass in Synology CardDAV Server (critical 9.8)
- [CVE-2017-15886](https://insights.sbomify.com/CVE-2017-15886/): Server-side request forgery in Chat (medium 6.5)
- [CVE-2017-15885](https://insights.sbomify.com/CVE-2017-15885/): Cross-site scripting in axis:2100 network camera firmware (medium 6.1)
- [CVE-2017-15884](https://insights.sbomify.com/CVE-2017-15884/): Race condition in hashicorp:vagrant vmware fusion (high 7.0)
- [CVE-2017-15883](https://insights.sbomify.com/CVE-2017-15883/): Auth bypass in progress:sitefinity (critical 9.8)
- [CVE-2017-15882](https://insights.sbomify.com/CVE-2017-15882/): Denial of service in londontrustmedia:private internet access (high 7.5)
- [CVE-2017-15881](https://insights.sbomify.com/CVE-2017-15881/): Cross-Site Scripting in keystone (medium 4.8)
- [CVE-2017-15880](https://insights.sbomify.com/CVE-2017-15880/): SQL injection in eyesofnetwork:eyesofnetwork (high 7.2)
- [CVE-2017-15879](https://insights.sbomify.com/CVE-2017-15879/): Keystone is vulnerable to CSV injection (high 8.8)
- [CVE-2017-15878](https://insights.sbomify.com/CVE-2017-15878/): Cross-Site Scripting in keystone (medium 6.1)
- [CVE-2017-15877](https://insights.sbomify.com/CVE-2017-15877/): Misconfiguration in sistemagpweb:gpweb (critical 9.8)
- [CVE-2017-15876](https://insights.sbomify.com/CVE-2017-15876/): File upload in sistemagpweb:gpweb (high 7.2)
- [CVE-2017-15875](https://insights.sbomify.com/CVE-2017-15875/): SQL injection in sistemagpweb:gpweb (critical 9.8)
- [CVE-2017-15874](https://insights.sbomify.com/CVE-2017-15874/): Integer overflow in busybox:busybox (medium 5.0)
- [CVE-2017-15873](https://insights.sbomify.com/CVE-2017-15873/): Integer overflow in busybox:busybox (medium 5.5)
- [CVE-2017-15872](https://insights.sbomify.com/CVE-2017-15872/): Cross-site scripting in phpwcms:phpwcms (medium 4.8)
- [CVE-2017-15871](https://insights.sbomify.com/CVE-2017-15871/): Denial of service in serialize-to-js project:serialize-to-js (high 7.5)
- [CVE-2017-15870](https://insights.sbomify.com/CVE-2017-15870/): Privilege escalation in paloaltonetworks:globalprotect (medium 6.7)
- [CVE-2017-15869](https://insights.sbomify.com/CVE-2017-15869/): Cross-site scripting in livezilla:livezilla (medium 6.1)
- [CVE-2017-15868](https://insights.sbomify.com/CVE-2017-15868/): Privilege escalation in canonical:ubuntu linux (high 7.8)
- [CVE-2017-15867](https://insights.sbomify.com/CVE-2017-15867/): Cross-site scripting in user-login-history project:user-login-history (medium 6.1)
- [CVE-2017-15865](https://insights.sbomify.com/CVE-2017-15865/): Information disclosure in frrouting:frrouting (high 7.5)
- [CVE-2017-15864](https://insights.sbomify.com/CVE-2017-15864/): Information disclosure in debian:debian linux (high 8.8)
- [CVE-2017-15863](https://insights.sbomify.com/CVE-2017-15863/): Cross-site scripting in wp no external links project:wp no external links (medium 6.1)
- [CVE-2017-15862](https://insights.sbomify.com/CVE-2017-15862/): Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-15861](https://insights.sbomify.com/CVE-2017-15861/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-15860](https://insights.sbomify.com/CVE-2017-15860/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-15859](https://insights.sbomify.com/CVE-2017-15859/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.5)
- [CVE-2017-15857](https://insights.sbomify.com/CVE-2017-15857/): Memory corruption in google:android (high 7.8)
- [CVE-2017-15856](https://insights.sbomify.com/CVE-2017-15856/): Race condition in Android for MSM, Firefox OS for MSM, QRD Android (high 7.0)
- [CVE-2017-15855](https://insights.sbomify.com/CVE-2017-15855/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-15854](https://insights.sbomify.com/CVE-2017-15854/): Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-15853](https://insights.sbomify.com/CVE-2017-15853/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.3)
- [CVE-2017-15852](https://insights.sbomify.com/CVE-2017-15852/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-15851](https://insights.sbomify.com/CVE-2017-15851/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-15850](https://insights.sbomify.com/CVE-2017-15850/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (high 7.5)
- [CVE-2017-15849](https://insights.sbomify.com/CVE-2017-15849/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-15848](https://insights.sbomify.com/CVE-2017-15848/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-15847](https://insights.sbomify.com/CVE-2017-15847/): Race condition in Android for MSM, Firefox OS for MSM, QRD Android (high 7.0)
- [CVE-2017-15846](https://insights.sbomify.com/CVE-2017-15846/): Null dereference in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-15845](https://insights.sbomify.com/CVE-2017-15845/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-15844](https://insights.sbomify.com/CVE-2017-15844/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.5)
- [CVE-2017-15843](https://insights.sbomify.com/CVE-2017-15843/): Race condition in Android for MSM, Firefox OS for MSM, QRD Android (high 7.0)
- [CVE-2017-15842](https://insights.sbomify.com/CVE-2017-15842/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-15841](https://insights.sbomify.com/CVE-2017-15841/): Denial of service in Snapdragon Mobile (medium 5.5)
- [CVE-2017-15837](https://insights.sbomify.com/CVE-2017-15837/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.3)
- [CVE-2017-15836](https://insights.sbomify.com/CVE-2017-15836/): Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android (high 7.3)
- [CVE-2017-15835](https://insights.sbomify.com/CVE-2017-15835/): Denial of service in Android for MSM, Firefox OS for MSM, QRD Android (medium 6.5)
- [CVE-2017-15834](https://insights.sbomify.com/CVE-2017-15834/): Race condition in google:android (high 7.0)
- [CVE-2017-15833](https://insights.sbomify.com/CVE-2017-15833/): Information disclosure in google:android (high 7.8)
- [CVE-2017-15832](https://insights.sbomify.com/CVE-2017-15832/): Buffer overwrite due to improper input validation in WLAN host (high 7.8)
- [CVE-2017-15831](https://insights.sbomify.com/CVE-2017-15831/): Integer overflow in google:android (high 7.8)
- [CVE-2017-15830](https://insights.sbomify.com/CVE-2017-15830/): Memory corruption in google:android (high 7.8)
- [CVE-2017-1583](https://insights.sbomify.com/CVE-2017-1583/): Information disclosure in Liberty for Java for Bluemix (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/89/