# Vulnerabilities published in 2017


- [CVE-2017-15710](https://insights.sbomify.com/CVE-2017-15710/): Memory corruption in Apache HTTP Server (high 7.5)
- [CVE-2017-1571](https://insights.sbomify.com/CVE-2017-1571/): Weak cryptography in DB2 for Linux, UNIX and Windows (medium 5.1)
- [CVE-2017-15709](https://insights.sbomify.com/CVE-2017-15709/): ActiveMQ's OpenWire protocol exposes certain system details as plain text (low 3.7)
- [CVE-2017-15708](https://insights.sbomify.com/CVE-2017-15708/): Remote Code Execution in Apache Synapse (critical 9.8)
- [CVE-2017-15707](https://insights.sbomify.com/CVE-2017-15707/): Moderate severity vulnerability that affects org.apache.struts:struts2-rest-plugin (medium 6.2)
- [CVE-2017-15706](https://insights.sbomify.com/CVE-2017-15706/): Inconsistent documentation in Apache Tomcat (medium 5.3)
- [CVE-2017-15705](https://insights.sbomify.com/CVE-2017-15705/): Denial of service in Apache SpamAssassin (medium 5.3)
- [CVE-2017-15703](https://insights.sbomify.com/CVE-2017-15703/): Denial of service via deserialization attack in nifi (medium 5.0)
- [CVE-2017-15702](https://insights.sbomify.com/CVE-2017-15702/): Apache Qpid Broker vulnerable to authentication port spoofing (critical 9.8)
- [CVE-2017-15701](https://insights.sbomify.com/CVE-2017-15701/): Apache Qpid Broker-J vulnerable to Denial of Service (DoS) via uncontrolled resource consumption (high 7.5)
- [CVE-2017-15700](https://insights.sbomify.com/CVE-2017-15700/): Apache Sling Authentication Service vulnerability (high 8.8)
- [CVE-2017-1570](https://insights.sbomify.com/CVE-2017-1570/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3)
- [CVE-2017-15699](https://insights.sbomify.com/CVE-2017-15699/): Denial of service in Apache Qpid Dispatch Router (medium 6.5)
- [CVE-2017-15698](https://insights.sbomify.com/CVE-2017-15698/): Security feature bypass in Apache Tomcat Native (medium 5.9)
- [CVE-2017-15697](https://insights.sbomify.com/CVE-2017-15697/): Apache NiFi XSS issue in context path handling (critical 9.8)
- [CVE-2017-15696](https://insights.sbomify.com/CVE-2017-15696/): Apache Geode configuration request authorization vulnerability (high 7.5)
- [CVE-2017-15695](https://insights.sbomify.com/CVE-2017-15695/): Apache Geode vulnerable to Incorrect Authorization (high 8.8)
- [CVE-2017-15694](https://insights.sbomify.com/CVE-2017-15694/): Argument Injection in Apache Geode server (medium 6.5)
- [CVE-2017-15693](https://insights.sbomify.com/CVE-2017-15693/): Apache Geode unsafe deserialization of application objects (high 7.5)
- [CVE-2017-15692](https://insights.sbomify.com/CVE-2017-15692/): Apache Geode unsafe deserialization in TcpServer (critical 9.8)
- [CVE-2017-15691](https://insights.sbomify.com/CVE-2017-15691/): Improper Restriction of XML External Entity Reference in Apache uimaj (medium 6.5)
- [CVE-2017-1569](https://insights.sbomify.com/CVE-2017-1569/): Denial of service in WebSphere Commerce Enterprise (high 7.5)
- [CVE-2017-15687](https://insights.sbomify.com/CVE-2017-15687/): Cross-site scripting in logitech:media server (medium 6.1)
- [CVE-2017-15686](https://insights.sbomify.com/CVE-2017-15686/): Cross-site scripting in Crafter CMS Crafter Studio (medium 6.1)
- [CVE-2017-15685](https://insights.sbomify.com/CVE-2017-15685/): XML Injection in Crafter CMS Crafter Studio 3.0.1 (high 8.6)
- [CVE-2017-15684](https://insights.sbomify.com/CVE-2017-15684/): Path Traversal in Crafter CMS Crafter Studio (high 7.5)
- [CVE-2017-15683](https://insights.sbomify.com/CVE-2017-15683/): XML injection in Crafter CMS (high 8.6)
- [CVE-2017-15682](https://insights.sbomify.com/CVE-2017-15682/): Cross site scripting in Crafter CMS (medium 6.1)
- [CVE-2017-15681](https://insights.sbomify.com/CVE-2017-15681/): Path Traversal in Crafter CMS Crafter Studio (critical 9.8)
- [CVE-2017-15680](https://insights.sbomify.com/CVE-2017-15680/): Missing Authorization in Crafter CMS (medium 6.5)
- [CVE-2017-1568](https://insights.sbomify.com/CVE-2017-1568/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-15673](https://insights.sbomify.com/CVE-2017-15673/): File upload in cs-cart:cs-cart (high 7.2)
- [CVE-2017-15672](https://insights.sbomify.com/CVE-2017-15672/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2017-15671](https://insights.sbomify.com/CVE-2017-15671/): Denial of service in gnu:glibc (medium 5.9)
- [CVE-2017-15670](https://insights.sbomify.com/CVE-2017-15670/): Memory corruption in gnu:glibc (critical 9.8)
- [CVE-2017-1567](https://insights.sbomify.com/CVE-2017-1567/): Cross-site scripting in Rational DOORS (medium 5.4)
- [CVE-2017-15667](https://insights.sbomify.com/CVE-2017-15667/): Denial of service in flexense:sysgauge (high 7.5)
- [CVE-2017-15665](https://insights.sbomify.com/CVE-2017-15665/): Denial of service in flexense:diskboss (high 7.5)
- [CVE-2017-15664](https://insights.sbomify.com/CVE-2017-15664/): Denial of service in flexense:syncbreeze (high 7.5)
- [CVE-2017-15663](https://insights.sbomify.com/CVE-2017-15663/): Denial of service in flexense:disk pulse (high 7.5)
- [CVE-2017-15662](https://insights.sbomify.com/CVE-2017-15662/): Denial of service in flexense:vx search (high 7.5)
- [CVE-2017-15656](https://insights.sbomify.com/CVE-2017-15656/): Information disclosure in asus:asuswrt (high 8.8)
- [CVE-2017-15655](https://insights.sbomify.com/CVE-2017-15655/): Memory corruption in asus:asuswrt (critical 9.6)
- [CVE-2017-15654](https://insights.sbomify.com/CVE-2017-15654/): Weak cryptography in asus:asuswrt (high 8.3)
- [CVE-2017-15653](https://insights.sbomify.com/CVE-2017-15653/): Auth bypass in asus:asuswrt (high 8.8)
- [CVE-2017-15652](https://insights.sbomify.com/CVE-2017-15652/): Information disclosure in artifex:ghostscript (medium 5.5)
- [CVE-2017-15651](https://insights.sbomify.com/CVE-2017-15651/): File upload in paessler:prtg network monitor (medium 6.7)
- [CVE-2017-15650](https://insights.sbomify.com/CVE-2017-15650/): Memory corruption in musl-libc:musl (high 7.5)
- [CVE-2017-1565](https://insights.sbomify.com/CVE-2017-1565/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-15649](https://insights.sbomify.com/CVE-2017-15649/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2017-15648](https://insights.sbomify.com/CVE-2017-15648/): Cross-site scripting in phpsugar:php melody (medium 6.1)
- [CVE-2017-15647](https://insights.sbomify.com/CVE-2017-15647/): Path traversal in fiberhome:routerfiberhome firmware (high 7.5)
- [CVE-2017-15646](https://insights.sbomify.com/CVE-2017-15646/): Cross-site scripting in webmin:webmin (medium 6.1)
- [CVE-2017-15645](https://insights.sbomify.com/CVE-2017-15645/): Cross-site request forgery in webmin:webmin (high 8.8)
- [CVE-2017-15644](https://insights.sbomify.com/CVE-2017-15644/): Server-side request forgery in webmin:webmin (high 8.6)
- [CVE-2017-15643](https://insights.sbomify.com/CVE-2017-15643/): Supply chain in ikarussecurity:ikarus antivirus (high 7.4)
- [CVE-2017-15642](https://insights.sbomify.com/CVE-2017-15642/): Use after free in debian:debian linux (medium 5.5)
- [CVE-2017-15640](https://insights.sbomify.com/CVE-2017-15640/): Cross-site scripting in phpipam:phpipam (medium 5.4)
- [CVE-2017-1564](https://insights.sbomify.com/CVE-2017-1564/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-15639](https://insights.sbomify.com/CVE-2017-15639/): XML external entity in getmura:mura cms (medium 6.5)
- [CVE-2017-15638](https://insights.sbomify.com/CVE-2017-15638/): Security feature bypass in suse:susefirewall2 (medium 6.5)
- [CVE-2017-15637](https://insights.sbomify.com/CVE-2017-15637/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15636](https://insights.sbomify.com/CVE-2017-15636/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15635](https://insights.sbomify.com/CVE-2017-15635/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15634](https://insights.sbomify.com/CVE-2017-15634/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15633](https://insights.sbomify.com/CVE-2017-15633/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15632](https://insights.sbomify.com/CVE-2017-15632/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15631](https://insights.sbomify.com/CVE-2017-15631/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15630](https://insights.sbomify.com/CVE-2017-15630/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-1563](https://insights.sbomify.com/CVE-2017-1563/): Cross-site scripting in Rational DOORS (medium 5.4)
- [CVE-2017-15629](https://insights.sbomify.com/CVE-2017-15629/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15628](https://insights.sbomify.com/CVE-2017-15628/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15627](https://insights.sbomify.com/CVE-2017-15627/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15626](https://insights.sbomify.com/CVE-2017-15626/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15625](https://insights.sbomify.com/CVE-2017-15625/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15624](https://insights.sbomify.com/CVE-2017-15624/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15623](https://insights.sbomify.com/CVE-2017-15623/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15622](https://insights.sbomify.com/CVE-2017-15622/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15621](https://insights.sbomify.com/CVE-2017-15621/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15620](https://insights.sbomify.com/CVE-2017-15620/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-1562](https://insights.sbomify.com/CVE-2017-1562/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-15619](https://insights.sbomify.com/CVE-2017-15619/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15618](https://insights.sbomify.com/CVE-2017-15618/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15617](https://insights.sbomify.com/CVE-2017-15617/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15616](https://insights.sbomify.com/CVE-2017-15616/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15615](https://insights.sbomify.com/CVE-2017-15615/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15614](https://insights.sbomify.com/CVE-2017-15614/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15613](https://insights.sbomify.com/CVE-2017-15613/): Command injection in tp-link:er5110g firmware (high 7.2)
- [CVE-2017-15612](https://insights.sbomify.com/CVE-2017-15612/): Cross-site Scripting in Mistune (medium 6.1)
- [CVE-2017-15611](https://insights.sbomify.com/CVE-2017-15611/): Privilege escalation in octopus:octopus deploy (medium 6.5)
- [CVE-2017-15610](https://insights.sbomify.com/CVE-2017-15610/): Information disclosure in octopus:octopus deploy (medium 6.5)
- [CVE-2017-1561](https://insights.sbomify.com/CVE-2017-1561/): Cross-site scripting in Rational Collaborative Lifecycle Management (medium 5.4)
- [CVE-2017-15609](https://insights.sbomify.com/CVE-2017-15609/): Information disclosure in octopus:octopus deploy (high 7.5)
- [CVE-2017-15608](https://insights.sbomify.com/CVE-2017-15608/): Cross-site request forgery in inedo:proget (medium 6.5)
- [CVE-2017-15607](https://insights.sbomify.com/CVE-2017-15607/): Path traversal in inedo:otter (critical 9.8)
- [CVE-2017-15602](https://insights.sbomify.com/CVE-2017-15602/): Integer overflow in gnu:libextractor (high 7.5)
- [CVE-2017-15601](https://insights.sbomify.com/CVE-2017-15601/): Memory corruption in gnu:libextractor (high 7.5)
- [CVE-2017-15600](https://insights.sbomify.com/CVE-2017-15600/): Null dereference in gnu:libextractor (high 7.5)
- [CVE-2017-1560](https://insights.sbomify.com/CVE-2017-1560/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2017-15597](https://insights.sbomify.com/CVE-2017-15597/): Memory corruption in xen:xen (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/91/