# Vulnerabilities published in 2017 - [CVE-2017-15399](https://insights.sbomify.com/CVE-2017-15399/): Use after free in Google Chrome prior to 62.0.3202.89 unknown (high 8.8) - [CVE-2017-15398](https://insights.sbomify.com/CVE-2017-15398/): Memory corruption in Google Chrome prior to 62.0.3202.89 unknown (critical 9.8) - [CVE-2017-15397](https://insights.sbomify.com/CVE-2017-15397/): Information disclosure in Google Chrome OS prior to 62.0.3202.74 (high 7.4) - [CVE-2017-15396](https://insights.sbomify.com/CVE-2017-15396/): Memory corruption in Google Chrome prior to 62.0.3202.75 unknown (medium 6.5) - [CVE-2017-15395](https://insights.sbomify.com/CVE-2017-15395/): Use after free in Google Chrome prior to 62.0.3202.62 (medium 6.5) - [CVE-2017-15394](https://insights.sbomify.com/CVE-2017-15394/): Security feature bypass in Google Chrome prior to 62.0.3202.62 (medium 6.5) - [CVE-2017-15393](https://insights.sbomify.com/CVE-2017-15393/): Security feature bypass in Google Chrome prior to 62.0.3202.62 (high 8.8) - [CVE-2017-15392](https://insights.sbomify.com/CVE-2017-15392/): Memory corruption in Google Chrome prior to 62.0.3202.62 (medium 4.3) - [CVE-2017-15391](https://insights.sbomify.com/CVE-2017-15391/): Security feature bypass in Google Chrome prior to 62.0.3202.62 (medium 6.5) - [CVE-2017-15390](https://insights.sbomify.com/CVE-2017-15390/): Security feature bypass in Google Chrome prior to 62.0.3202.62 (medium 6.5) - [CVE-2017-1539](https://insights.sbomify.com/CVE-2017-1539/): Privilege escalation in Business Process Manager Advanced (high 8.8) - [CVE-2017-15389](https://insights.sbomify.com/CVE-2017-15389/): Security feature bypass in Google Chrome prior to 62.0.3202.62 (medium 6.5) - [CVE-2017-15388](https://insights.sbomify.com/CVE-2017-15388/): Memory corruption in Google Chrome prior to 62.0.3202.62 (high 8.8) - [CVE-2017-15387](https://insights.sbomify.com/CVE-2017-15387/): Security feature bypass in Google Chrome prior to 62.0.3202.62 (high 8.8) - [CVE-2017-15386](https://insights.sbomify.com/CVE-2017-15386/): Other in Google Chrome prior to 62.0.3202.62 (medium 6.5) - [CVE-2017-15385](https://insights.sbomify.com/CVE-2017-15385/): Memory corruption in radare:radare2 (high 7.8) - [CVE-2017-15384](https://insights.sbomify.com/CVE-2017-15384/): Cross-site scripting in phpjabbers:rate me (medium 6.1) - [CVE-2017-15383](https://insights.sbomify.com/CVE-2017-15383/): Privilege escalation in nero:nero (high 7.8) - [CVE-2017-15381](https://insights.sbomify.com/CVE-2017-15381/): SQL injection in softwarepublico:e-sic (critical 9.8) - [CVE-2017-15380](https://insights.sbomify.com/CVE-2017-15380/): Cross-site scripting in softwarepublico:e-sic (medium 6.1) - [CVE-2017-1538](https://insights.sbomify.com/CVE-2017-1538/): Information disclosure in IBM Financial Transaction Manager (medium 6.5) - [CVE-2017-15379](https://insights.sbomify.com/CVE-2017-15379/): SQL injection in softwarepublico:e-sic (critical 9.8) - [CVE-2017-15378](https://insights.sbomify.com/CVE-2017-15378/): SQL injection in softwarepublico:e-sic (high 8.8) - [CVE-2017-15377](https://insights.sbomify.com/CVE-2017-15377/): Denial of service in openinfosecfoundation:suricata (high 7.5) - [CVE-2017-15376](https://insights.sbomify.com/CVE-2017-15376/): Missing authorization in mobatek:mobaxterm (critical 9.8) - [CVE-2017-15375](https://insights.sbomify.com/CVE-2017-15375/): Cross-site scripting in wpjobboard:wpjobboard (medium 6.1) - [CVE-2017-15374](https://insights.sbomify.com/CVE-2017-15374/): Shopware XSS Vulnerability (medium 6.1) - [CVE-2017-15373](https://insights.sbomify.com/CVE-2017-15373/): SQL injection in softwarepublico:e-sic (critical 9.8) - [CVE-2017-15372](https://insights.sbomify.com/CVE-2017-15372/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2017-15371](https://insights.sbomify.com/CVE-2017-15371/): Denial of service in debian:debian linux (medium 5.5) - [CVE-2017-15370](https://insights.sbomify.com/CVE-2017-15370/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2017-15369](https://insights.sbomify.com/CVE-2017-15369/): Use after free in artifex:mupdf (high 7.8) - [CVE-2017-15368](https://insights.sbomify.com/CVE-2017-15368/): Memory corruption in radare:radare2 (high 7.8) - [CVE-2017-15367](https://insights.sbomify.com/CVE-2017-15367/): Bacula-web SQL Injection Vulnerabilities (critical 9.8) - [CVE-2017-15366](https://insights.sbomify.com/CVE-2017-15366/): Hardcoded credentials in ndocsoftware:ndoc (critical 9.8) - [CVE-2017-15365](https://insights.sbomify.com/CVE-2017-15365/): Security feature bypass in fedoraproject:fedora (high 8.8) - [CVE-2017-15364](https://insights.sbomify.com/CVE-2017-15364/): ccsv Double Free vulnerability (medium 5.5) - [CVE-2017-15363](https://insights.sbomify.com/CVE-2017-15363/): Luracast Restler directory traversal vulnerability (high 7.5) - [CVE-2017-15362](https://insights.sbomify.com/CVE-2017-15362/): Cross-site scripting in osticket:osticket (medium 6.1) - [CVE-2017-15361](https://insights.sbomify.com/CVE-2017-15361/): Weak cryptography in infineon:rsa library (medium 5.9) - [CVE-2017-15360](https://insights.sbomify.com/CVE-2017-15360/): Cross-site scripting in paessler:prtg network monitor (medium 5.4) - [CVE-2017-1536](https://insights.sbomify.com/CVE-2017-1536/): Cross-site scripting in WebSphere Portal (medium 5.4) - [CVE-2017-15359](https://insights.sbomify.com/CVE-2017-15359/): Path traversal in 3cx:3cx (medium 6.5) - [CVE-2017-15358](https://insights.sbomify.com/CVE-2017-15358/): Race condition in charlesproxy:charles (high 7.0) - [CVE-2017-15357](https://insights.sbomify.com/CVE-2017-15357/): Privilege escalation in arqbackup:arq (high 7.4) - [CVE-2017-15356](https://insights.sbomify.com/CVE-2017-15356/): Memory corruption in DP300,RP200,TE30,TE40,TE50,TE60,TX50 (medium 5.3) - [CVE-2017-15355](https://insights.sbomify.com/CVE-2017-15355/): Memory corruption in DP300,RP200,TE30,TE40,TE50,TE60,TX50 (medium 5.3) - [CVE-2017-15354](https://insights.sbomify.com/CVE-2017-15354/): Memory corruption in DP300,RP200,TE30,TE40,TE50,TE60,TX50 (medium 5.3) - [CVE-2017-15353](https://insights.sbomify.com/CVE-2017-15353/): Memory corruption in DP300,RP200,RSE6500,TE30,TE40,TE50,TE60,TX50,VP9660,ViewPoint 8660,ViewPoint 9030,Viewpoint 8660, (low 3.7) - [CVE-2017-15352](https://insights.sbomify.com/CVE-2017-15352/): Missing authorization in OceanStor 2800 V3,OceanStor 5300 V3,OceanStor 5500 V3,OceanStor 5600 V3,OceanStor 5800 V3 (low 3.1) - [CVE-2017-15351](https://insights.sbomify.com/CVE-2017-15351/): Auth bypass in Honor V9 play (medium 6.8) - [CVE-2017-15350](https://insights.sbomify.com/CVE-2017-15350/): Memory corruption in DP300,IPS Module,NGFW Module,NIP6300,NIP6600,NIP6800,RP200,SVN5600,SVN5800,SVN5800-C,Secospace USG6300,Secospace USG6500,Secospace USG6600,TE30,TE40,TE50,TE60,TP3206,USG9500, (medium 5.3) - [CVE-2017-1535](https://insights.sbomify.com/CVE-2017-1535/): Cross-site scripting in Cognos Analytics (medium 5.4) - [CVE-2017-15349](https://insights.sbomify.com/CVE-2017-15349/): Denial of service in CloudEngine 12800,CloudEngine 5800,CloudEngine 6800,CloudEngine 7800, (high 7.5) - [CVE-2017-15348](https://insights.sbomify.com/CVE-2017-15348/): Denial of service in IPS Module,NGFW Module,NIP6300,NIP6600,Secospace USG6300,Secospace USG6500,Secospace USG6600,USG9500, (high 7.5) - [CVE-2017-15347](https://insights.sbomify.com/CVE-2017-15347/): Use after free in Mate 9 Pro (medium 5.5) - [CVE-2017-15346](https://insights.sbomify.com/CVE-2017-15346/): Denial of service in S12700, S1700,S3700,S5700,S6700,S7700, S9700, eCNS210 TD (medium 4.7) - [CVE-2017-15345](https://insights.sbomify.com/CVE-2017-15345/): Denial of service in LON-L29D (medium 5.3) - [CVE-2017-15344](https://insights.sbomify.com/CVE-2017-15344/): Integer overflow in AR3200 (high 7.5) - [CVE-2017-15343](https://insights.sbomify.com/CVE-2017-15343/): Integer overflow in AR3200 (high 7.5) - [CVE-2017-15342](https://insights.sbomify.com/CVE-2017-15342/): Memory corruption in DP300,TE60,TP3106,eSpace U1981 (high 7.5) - [CVE-2017-15341](https://insights.sbomify.com/CVE-2017-15341/): Denial of service in AR3200,TE40,TE50,TE60 (high 7.5) - [CVE-2017-15340](https://insights.sbomify.com/CVE-2017-15340/): Information disclosure in TAG-AL00 (medium 5.5) - [CVE-2017-1534](https://insights.sbomify.com/CVE-2017-1534/): Open redirect in Security Access Manager (medium 6.1) - [CVE-2017-15339](https://insights.sbomify.com/CVE-2017-15339/): Memory corruption in DP300,IPS Module,NGFW Module,NIP6300,NIP6600,NIP6800,RP200,SVN5600,SVN5800,SVN5800-C,SeMG9811,Secospace USG6300,Secospace USG6500,Secospace USG6600,TE30,TE40,TE50,TE60,USG9500,USG9520,USG9560,USG9580,VP9660,ViewPoint 8660,ViewPoint 9030,eSpace U1981 (low 3.7) - [CVE-2017-15338](https://insights.sbomify.com/CVE-2017-15338/): Memory corruption in DP300,IPS Module,NGFW Module,NIP6300,NIP6600,NIP6800,RP200,SVN5600,SVN5800,SVN5800-C,SeMG9811,Secospace USG6300,Secospace USG6500,Secospace USG6600,TE30,TE40,TE50,TE60,USG9500,USG9520,USG9560,USG9580,VP9660,ViewPoint 8660,ViewPoint 9030,eSpace U1981 (low 3.7) - [CVE-2017-15337](https://insights.sbomify.com/CVE-2017-15337/): Memory corruption in DP300,IPS Module,NGFW Module,NIP6300,NIP6600,NIP6800,RP200,SVN5600,SVN5800,SVN5800-C,SeMG9811,Secospace USG6300,Secospace USG6500,Secospace USG6600,TE30,TE40,TE50,TE60,USG9500,USG9520,USG9560,USG9580,VP9660,ViewPoint 8660,ViewPoint 9030,eSpace U1981 (low 3.7) - [CVE-2017-15336](https://insights.sbomify.com/CVE-2017-15336/): Memory corruption in DP300,IPS Module,NGFW Module,NIP6300,NIP6600,NIP6800,RP200,SVN5600,SVN5800,SVN5800-C,SeMG9811,Secospace USG6300,Secospace USG6500,Secospace USG6600,TE30,TE40,TE50,TE60,USG9500,USG9520,USG9560,USG9580,VP9660,ViewPoint 8660,ViewPoint 9030,eSpace U1981 (medium 5.3) - [CVE-2017-15335](https://insights.sbomify.com/CVE-2017-15335/): Memory corruption in DP300,IPS Module,NGFW Module,NIP6300,NIP6600,NIP6800,RP200,SVN5600,SVN5800,SVN5800-C,SeMG9811,Secospace USG6300,Secospace USG6500,Secospace USG6600,TE30,TE40,TE50,TE60,USG9500,USG9520,USG9560,USG9580,VP9660,ViewPoint 8660,ViewPoint 9030,eSpace U1981 (medium 5.3) - [CVE-2017-15334](https://insights.sbomify.com/CVE-2017-15334/): Memory corruption in DP300,IPS Module,NGFW Module,NIP6300,NIP6600,NIP6800,RP200,SVN5600,SVN5800,SVN5800-C,SeMG9811,Secospace USG6300,Secospace USG6500,Secospace USG6600,TE30,TE40,TE50,TE60,USG9500,USG9520,USG9560,USG9580,VP9660,ViewPoint 8660,ViewPoint 9030,eSpace U1981 (medium 5.3) - [CVE-2017-15333](https://insights.sbomify.com/CVE-2017-15333/): Denial of service in S12700, S1700,S3700,S5700,S6700,S7700, S9700, eCNS210 TD (medium 4.7) - [CVE-2017-15332](https://insights.sbomify.com/CVE-2017-15332/): Misconfiguration in AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR510,DP300,IPS Module,MAX PRESENCE,NGFW Module,NIP6300,NIP6600,NIP6800,NetEngine16EX,RP200,RSE6500,SMC2.0,SRG1300,SRG2300,SRG3300,SVN5600,SVN5800,SVN5800-C,Secospace USG6300,Secospace USG6500,TE30,TE40,TE50,TE60,TP3106,TP3206,USG9500,USG9520,USG9560,USG9580,ViewPoint 9030 (medium 5.3) - [CVE-2017-15331](https://insights.sbomify.com/CVE-2017-15331/): Memory corruption in AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR510,DP300,IPS Module,MAX PRESENCE,NGFW Module,NIP6300,NIP6600,NIP6800,NetEngine16EX,RP200,RSE6500,SMC2.0,SRG1300,SRG2300,SRG3300,SVN5600,SVN5800,SVN5800-C,Secospace USG6300,Secospace USG6500,TE30,TE40,TE50,TE60,TP3106,TP3206,USG9500,USG9520,USG9560,USG9580,ViewPoint 9030 (medium 5.3) - [CVE-2017-15330](https://insights.sbomify.com/CVE-2017-15330/): Memory corruption in Vicky-AL00A (medium 5.5) - [CVE-2017-1533](https://insights.sbomify.com/CVE-2017-1533/): Cross-site scripting in Security Access Manager (medium 6.1) - [CVE-2017-15329](https://insights.sbomify.com/CVE-2017-15329/): SQL injection in UMA (high 8.8) - [CVE-2017-15328](https://insights.sbomify.com/CVE-2017-15328/): Auth bypass in HG8245H (high 7.5) - [CVE-2017-15327](https://insights.sbomify.com/CVE-2017-15327/): Missing authorization in S12700, S7700, S9700 (medium 4.3) - [CVE-2017-15326](https://insights.sbomify.com/CVE-2017-15326/): Weak cryptography in DBS3900 TDD LTE (medium 4.3) - [CVE-2017-15325](https://insights.sbomify.com/CVE-2017-15325/): Integer overflow in Prague (high 7.8) - [CVE-2017-15324](https://insights.sbomify.com/CVE-2017-15324/): Denial of service in S12700 (high 7.5) - [CVE-2017-15323](https://insights.sbomify.com/CVE-2017-15323/): Denial of service in DP300,NIP6600,Secospace USG6500,TE60,TP3106,VP9660,ViewPoint 8660,ViewPoint 9030,eCNS210 TD,eSpace U1981 (medium 5.5) - [CVE-2017-15322](https://insights.sbomify.com/CVE-2017-15322/): Denial of service in Baggio-L03A (medium 6.5) - [CVE-2017-15321](https://insights.sbomify.com/CVE-2017-15321/): Information disclosure in FusionSphere OpenStack (low 3.7) - [CVE-2017-15320](https://insights.sbomify.com/CVE-2017-15320/): Memory corruption in RP200 (high 7.5) - [CVE-2017-1532](https://insights.sbomify.com/CVE-2017-1532/): Cross-site scripting in Rational DOORS (medium 5.4) - [CVE-2017-15319](https://insights.sbomify.com/CVE-2017-15319/): Memory corruption in RP200 (high 7.5) - [CVE-2017-15318](https://insights.sbomify.com/CVE-2017-15318/): Memory corruption in RP200 (high 7.5) - [CVE-2017-15317](https://insights.sbomify.com/CVE-2017-15317/): Memory corruption in AR120-S (high 7.5) - [CVE-2017-15316](https://insights.sbomify.com/CVE-2017-15316/): Memory corruption in Mate 9 (high 7.8) - [CVE-2017-15315](https://insights.sbomify.com/CVE-2017-15315/): Denial of service in NIP6300,NIP6600,Secospace USG6300,Secospace USG6500 (medium 6.5) - [CVE-2017-15314](https://insights.sbomify.com/CVE-2017-15314/): Denial of service in DP300,RP200,TE30,TE40,TE50,TE60 (medium 5.5) - [CVE-2017-15313](https://insights.sbomify.com/CVE-2017-15313/): Code injection in SmartCare (high 8.8) - [CVE-2017-15312](https://insights.sbomify.com/CVE-2017-15312/): Cross-site scripting in SmartCare (medium 5.4) - [CVE-2017-15311](https://insights.sbomify.com/CVE-2017-15311/): Memory corruption in Mate 10 (high 8.8) - [CVE-2017-15310](https://insights.sbomify.com/CVE-2017-15310/): Path traversal in iReader (medium 6.5) - [CVE-2017-1531](https://insights.sbomify.com/CVE-2017-1531/): Cross-site scripting in Business Process Manager Advanced (medium 5.4) - [CVE-2017-15309](https://insights.sbomify.com/CVE-2017-15309/): Path traversal in iReader (high 7.1) - [CVE-2017-15308](https://insights.sbomify.com/CVE-2017-15308/): Other in iReader (high 8.8) - [CVE-2017-15307](https://insights.sbomify.com/CVE-2017-15307/): Missing authorization in Honor 8 (low 2.3) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/93/