# Vulnerabilities published in 2017


- [CVE-2017-15596](https://insights.sbomify.com/CVE-2017-15596/): Denial of service in xen:xen (medium 6.0)
- [CVE-2017-15595](https://insights.sbomify.com/CVE-2017-15595/): Denial of service in xen:xen (high 8.8)
- [CVE-2017-15594](https://insights.sbomify.com/CVE-2017-15594/): Privilege escalation in xen:xen (high 8.8)
- [CVE-2017-15593](https://insights.sbomify.com/CVE-2017-15593/): Denial of service in xen:xen (medium 6.5)
- [CVE-2017-15592](https://insights.sbomify.com/CVE-2017-15592/): Privilege escalation in xen:xen (high 8.8)
- [CVE-2017-15591](https://insights.sbomify.com/CVE-2017-15591/): Denial of service in xen:xen (medium 6.5)
- [CVE-2017-15590](https://insights.sbomify.com/CVE-2017-15590/): Memory corruption in xen:xen (high 8.8)
- [CVE-2017-1559](https://insights.sbomify.com/CVE-2017-1559/): Information disclosure in Rational Collaborative Lifecycle Management (low 3.1)
- [CVE-2017-15589](https://insights.sbomify.com/CVE-2017-15589/): Information disclosure in xen:xen (medium 6.5)
- [CVE-2017-15588](https://insights.sbomify.com/CVE-2017-15588/): Race condition in xen:xen (high 7.8)
- [CVE-2017-15587](https://insights.sbomify.com/CVE-2017-15587/): Integer overflow in artifex:mupdf (high 7.8)
- [CVE-2017-15583](https://insights.sbomify.com/CVE-2017-15583/): Path traversal in hitachienergy:fox515t firmware (medium 6.5)
- [CVE-2017-15582](https://insights.sbomify.com/CVE-2017-15582/): Hardcoded credentials in writediary:diary with lock (high 7.5)
- [CVE-2017-15581](https://insights.sbomify.com/CVE-2017-15581/): Information disclosure in writediary:diary with lock (high 7.5)
- [CVE-2017-15580](https://insights.sbomify.com/CVE-2017-15580/): File upload in osticket:osticket (critical 9.8)
- [CVE-2017-1558](https://insights.sbomify.com/CVE-2017-1558/): Open redirect in Maximo Asset Management (medium 6.1)
- [CVE-2017-15579](https://insights.sbomify.com/CVE-2017-15579/): SQL injection in phpsugar:php melody (critical 9.8)
- [CVE-2017-15578](https://insights.sbomify.com/CVE-2017-15578/): SQL injection in phpsugar:php melody (high 8.8)
- [CVE-2017-15577](https://insights.sbomify.com/CVE-2017-15577/): Information disclosure in debian:debian linux (high 7.5)
- [CVE-2017-15576](https://insights.sbomify.com/CVE-2017-15576/): Information disclosure in debian:debian linux (high 7.5)
- [CVE-2017-15575](https://insights.sbomify.com/CVE-2017-15575/): Missing authorization in debian:debian linux (high 7.3)
- [CVE-2017-15574](https://insights.sbomify.com/CVE-2017-15574/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2017-15573](https://insights.sbomify.com/CVE-2017-15573/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2017-15572](https://insights.sbomify.com/CVE-2017-15572/): Information disclosure in debian:debian linux (high 7.5)
- [CVE-2017-15571](https://insights.sbomify.com/CVE-2017-15571/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2017-15570](https://insights.sbomify.com/CVE-2017-15570/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2017-1557](https://insights.sbomify.com/CVE-2017-1557/): Denial of service in MQ (medium 4.3)
- [CVE-2017-15569](https://insights.sbomify.com/CVE-2017-15569/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2017-15568](https://insights.sbomify.com/CVE-2017-15568/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2017-15567](https://insights.sbomify.com/CVE-2017-15567/): Privilege escalation in idemia:mso 1300 firmware (high 7.8)
- [CVE-2017-15566](https://insights.sbomify.com/CVE-2017-15566/): Privilege escalation in schedmd:slurm (high 7.8)
- [CVE-2017-15565](https://insights.sbomify.com/CVE-2017-15565/): Null dereference in debian:debian linux (high 8.8)
- [CVE-2017-1556](https://insights.sbomify.com/CVE-2017-1556/): Denial of service in API Connect (medium 6.5)
- [CVE-2017-15550](https://insights.sbomify.com/CVE-2017-15550/): Path traversal in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x, EMC Integrated Data Protection Appliance 2.0 (high 8.8)
- [CVE-2017-1555](https://insights.sbomify.com/CVE-2017-1555/): Business logic in API Connect (medium 4.3)
- [CVE-2017-15549](https://insights.sbomify.com/CVE-2017-15549/): File upload in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x, EMC Integrated Data Protection Appliance 2.0 (high 8.8)
- [CVE-2017-15548](https://insights.sbomify.com/CVE-2017-15548/): Auth bypass in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x, EMC Integrated Data Protection Appliance 2.0 (critical 9.8)
- [CVE-2017-15546](https://insights.sbomify.com/CVE-2017-15546/): SQL injection in EMC RSA Authentication Manager 8.2 SP1 P6 and earlier (medium 4.3)
- [CVE-2017-1554](https://insights.sbomify.com/CVE-2017-1554/): Other in BigInsights (medium 5.4)
- [CVE-2017-15539](https://insights.sbomify.com/CVE-2017-15539/): SQL injection in zorovavi\/blog project:zorovavi\/blog (critical 9.8)
- [CVE-2017-15538](https://insights.sbomify.com/CVE-2017-15538/): Cross-site scripting in ilias:ilias (medium 5.4)
- [CVE-2017-15537](https://insights.sbomify.com/CVE-2017-15537/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2017-15536](https://insights.sbomify.com/CVE-2017-15536/): Privilege escalation in cloudera:data science workbench (high 8.8)
- [CVE-2017-15535](https://insights.sbomify.com/CVE-2017-15535/): Memory corruption in mongodb:mongodb (critical 9.1)
- [CVE-2017-15534](https://insights.sbomify.com/CVE-2017-15534/): Auth bypass in Norton App Lock (medium 6.7)
- [CVE-2017-15533](https://insights.sbomify.com/CVE-2017-15533/): Weak cryptography in SSL Visibility (SSLV) (medium 5.9)
- [CVE-2017-15532](https://insights.sbomify.com/CVE-2017-15532/): Path traversal in Messaging Gateway (medium 5.7)
- [CVE-2017-15531](https://insights.sbomify.com/CVE-2017-15531/): Auth bypass in Reporter (critical 9.8)
- [CVE-2017-15530](https://insights.sbomify.com/CVE-2017-15530/): Information disclosure in Norton Family Android App (low 3.3)
- [CVE-2017-1553](https://insights.sbomify.com/CVE-2017-1553/): Cross-site scripting in BigInsights (medium 5.4)
- [CVE-2017-15529](https://insights.sbomify.com/CVE-2017-15529/): Denial of service in Norton Family Android App (medium 6.2)
- [CVE-2017-15528](https://insights.sbomify.com/CVE-2017-15528/): Security feature bypass in norton:install norton security (low 3.7)
- [CVE-2017-15527](https://insights.sbomify.com/CVE-2017-15527/): Path traversal in Symantec Management Console (medium 6.8)
- [CVE-2017-15526](https://insights.sbomify.com/CVE-2017-15526/): Null dereference in Symantec Endpoint Encryption (medium 6.8)
- [CVE-2017-15525](https://insights.sbomify.com/CVE-2017-15525/): Denial of service in Symantec Endpoint Encryption (medium 4.5)
- [CVE-2017-15524](https://insights.sbomify.com/CVE-2017-15524/): Security feature bypass in kemptechnologies:web application firewall (critical 9.1)
- [CVE-2017-1552](https://insights.sbomify.com/CVE-2017-1552/): Cross-site scripting in BigInsights (medium 5.4)
- [CVE-2017-15519](https://insights.sbomify.com/CVE-2017-15519/): Auth bypass in SnapCenter (high 7.2)
- [CVE-2017-15518](https://insights.sbomify.com/CVE-2017-15518/): Information disclosure in OnCommand API Services and NetApp Service Level Manager (high 7.8)
- [CVE-2017-15517](https://insights.sbomify.com/CVE-2017-15517/): Information disclosure in AltaVault OST Plug-in (medium 5.5)
- [CVE-2017-15516](https://insights.sbomify.com/CVE-2017-15516/): Cross-site request forgery in SnapCenter Server (high 8.8)
- [CVE-2017-15515](https://insights.sbomify.com/CVE-2017-15515/): Cross-site scripting in SnapCenter Server (medium 4.8)
- [CVE-2017-1551](https://insights.sbomify.com/CVE-2017-1551/): Other in API Connect (medium 6.1)
- [CVE-2017-1550](https://insights.sbomify.com/CVE-2017-1550/): Missing authorization in Sterling File Gateway (medium 6.5)
- [CVE-2017-1549](https://insights.sbomify.com/CVE-2017-1549/): Cross-site scripting in Sterling File Gateway (medium 5.4)
- [CVE-2017-1548](https://insights.sbomify.com/CVE-2017-1548/): Path traversal in Sterling File Gateway (medium 5.3)
- [CVE-2017-1546](https://insights.sbomify.com/CVE-2017-1546/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2017-1545](https://insights.sbomify.com/CVE-2017-1545/): Auth bypass in Rational DOORS (medium 6.8)
- [CVE-2017-1544](https://insights.sbomify.com/CVE-2017-1544/): Information disclosure in Sterling File Gateway (low 2.4)
- [CVE-2017-15430](https://insights.sbomify.com/CVE-2017-15430/): Cross-site scripting in Chrome (medium 4.3)
- [CVE-2017-15429](https://insights.sbomify.com/CVE-2017-15429/): Cross-site scripting in Google Chrome prior to 63.0.3239.108 unknown (medium 6.1)
- [CVE-2017-15428](https://insights.sbomify.com/CVE-2017-15428/): Memory corruption in Chrome (high 8.8)
- [CVE-2017-15427](https://insights.sbomify.com/CVE-2017-15427/): Cross-site scripting in Google Chrome prior to 63.0.3239.84 unknown (medium 6.1)
- [CVE-2017-15426](https://insights.sbomify.com/CVE-2017-15426/): Security feature bypass in Google Chrome prior to 63.0.3239.84 unknown (medium 6.5)
- [CVE-2017-15425](https://insights.sbomify.com/CVE-2017-15425/): Security feature bypass in Google Chrome prior to 63.0.3239.84 unknown (medium 6.5)
- [CVE-2017-15424](https://insights.sbomify.com/CVE-2017-15424/): Security feature bypass in Google Chrome prior to 63.0.3239.84 unknown (medium 6.5)
- [CVE-2017-15423](https://insights.sbomify.com/CVE-2017-15423/): Weak cryptography in Google Chrome prior to 63.0.3239.84 unknown (medium 5.3)
- [CVE-2017-15422](https://insights.sbomify.com/CVE-2017-15422/): Integer overflow in Google Chrome prior to 63.0.3239.84 unknown (medium 6.5)
- [CVE-2017-15420](https://insights.sbomify.com/CVE-2017-15420/): Other in Chrome (medium 6.5)
- [CVE-2017-15419](https://insights.sbomify.com/CVE-2017-15419/): Information disclosure in Google Chrome prior to 63.0.3239.84 unknown (medium 6.5)
- [CVE-2017-15418](https://insights.sbomify.com/CVE-2017-15418/): Information disclosure in Google Chrome prior to 63.0.3239.84 unknown (medium 4.3)
- [CVE-2017-15417](https://insights.sbomify.com/CVE-2017-15417/): Information disclosure in Google Chrome prior to 63.0.3239.84 unknown (medium 5.3)
- [CVE-2017-15416](https://insights.sbomify.com/CVE-2017-15416/): Memory corruption in Google Chrome prior to 63.0.3239.84 unknown (medium 6.5)
- [CVE-2017-15415](https://insights.sbomify.com/CVE-2017-15415/): Information disclosure in Google Chrome prior to 63.0.3239.84 unknown (medium 6.5)
- [CVE-2017-15413](https://insights.sbomify.com/CVE-2017-15413/): Memory corruption in Google Chrome prior to 63.0.3239.84 unknown (high 8.8)
- [CVE-2017-15412](https://insights.sbomify.com/CVE-2017-15412/): Nokogiri gem, via libxml, is affected by DoS vulnerabilities (high 8.8)
- [CVE-2017-15411](https://insights.sbomify.com/CVE-2017-15411/): Use after free in Google Chrome prior to 63.0.3239.84 unknown (high 8.8)
- [CVE-2017-15410](https://insights.sbomify.com/CVE-2017-15410/): Use after free in Google Chrome prior to 63.0.3239.84 unknown (high 8.8)
- [CVE-2017-1541](https://insights.sbomify.com/CVE-2017-1541/): Misconfiguration in AIX (high 7.3)
- [CVE-2017-15409](https://insights.sbomify.com/CVE-2017-15409/): Memory corruption in Google Chrome prior to 63.0.3239.84 unknown (high 8.8)
- [CVE-2017-15408](https://insights.sbomify.com/CVE-2017-15408/): Memory corruption in Google Chrome prior to 63.0.3239.84 unknown (high 8.8)
- [CVE-2017-15407](https://insights.sbomify.com/CVE-2017-15407/): Memory corruption in Google Chrome prior to 63.0.3239.84 unknown (high 8.8)
- [CVE-2017-15406](https://insights.sbomify.com/CVE-2017-15406/): Memory corruption in Google Chrome prior to 62.0.3202.75 unknown (high 8.8)
- [CVE-2017-15405](https://insights.sbomify.com/CVE-2017-15405/): Race condition in Chrome (high 7.0)
- [CVE-2017-15404](https://insights.sbomify.com/CVE-2017-15404/): Race condition in Chrome (high 7.8)
- [CVE-2017-15403](https://insights.sbomify.com/CVE-2017-15403/): Command injection in Chrome (high 7.3)
- [CVE-2017-15402](https://insights.sbomify.com/CVE-2017-15402/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2017-15401](https://insights.sbomify.com/CVE-2017-15401/): Memory corruption in Chrome (high 8.8)
- [CVE-2017-15400](https://insights.sbomify.com/CVE-2017-15400/): Command injection in Google Chrome OS prior to 62.0.3202.74 (high 7.8)
- [CVE-2017-1540](https://insights.sbomify.com/CVE-2017-1540/): Cross-site scripting in Rational DOORS (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/92/