# Vulnerabilities published in 2017


- [CVE-2017-15201](https://insights.sbomify.com/CVE-2017-15201/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15200](https://insights.sbomify.com/CVE-2017-15200/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-1520](https://insights.sbomify.com/CVE-2017-1520/): Auth bypass in DB2 for Linux, UNIX and Windows (low 3.7)
- [CVE-2017-15199](https://insights.sbomify.com/CVE-2017-15199/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15198](https://insights.sbomify.com/CVE-2017-15198/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15197](https://insights.sbomify.com/CVE-2017-15197/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15196](https://insights.sbomify.com/CVE-2017-15196/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15195](https://insights.sbomify.com/CVE-2017-15195/): Missing authorization in kanboard:kanboard (medium 4.3)
- [CVE-2017-15194](https://insights.sbomify.com/CVE-2017-15194/): Cross-site scripting in cacti:cacti (medium 6.1)
- [CVE-2017-15193](https://insights.sbomify.com/CVE-2017-15193/): Denial of service in wireshark:wireshark (high 7.5)
- [CVE-2017-15192](https://insights.sbomify.com/CVE-2017-15192/): Denial of service in wireshark:wireshark (high 7.5)
- [CVE-2017-15191](https://insights.sbomify.com/CVE-2017-15191/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2017-15190](https://insights.sbomify.com/CVE-2017-15190/): Denial of service in wireshark:wireshark (high 7.5)
- [CVE-2017-1519](https://insights.sbomify.com/CVE-2017-1519/): Denial of service in DB2 for Linux, UNIX and Windows (medium 5.9)
- [CVE-2017-15189](https://insights.sbomify.com/CVE-2017-15189/): Denial of service in wireshark:wireshark (high 7.5)
- [CVE-2017-15188](https://insights.sbomify.com/CVE-2017-15188/): Cross-site scripting in eyesofnetwork:eyesofnetwork (medium 4.8)
- [CVE-2017-15186](https://insights.sbomify.com/CVE-2017-15186/): Memory corruption in ffmpeg:ffmpeg (medium 6.5)
- [CVE-2017-15185](https://insights.sbomify.com/CVE-2017-15185/): Memory corruption in libmp3splt project:libmp3splt (medium 5.0)
- [CVE-2017-1516](https://insights.sbomify.com/CVE-2017-1516/): Other in Rational DOORS (medium 5.4)
- [CVE-2017-1515](https://insights.sbomify.com/CVE-2017-1515/): Information disclosure in Rational DOORS (medium 4.3)
- [CVE-2017-15139](https://insights.sbomify.com/CVE-2017-15139/): Information disclosure in openstack-cinder (medium 5.1)
- [CVE-2017-15138](https://insights.sbomify.com/CVE-2017-15138/): Information disclosure in atomic-openshift (medium 5.0)
- [CVE-2017-15137](https://insights.sbomify.com/CVE-2017-15137/): Security feature bypass in atomic-openshift (medium 4.3)
- [CVE-2017-15136](https://insights.sbomify.com/CVE-2017-15136/): Business logic in Satellite 6 (low 2.7)
- [CVE-2017-15135](https://insights.sbomify.com/CVE-2017-15135/): Auth bypass in 389-ds-base (high 8.1)
- [CVE-2017-15134](https://insights.sbomify.com/CVE-2017-15134/): Memory corruption in 389-ds-base (high 7.5)
- [CVE-2017-15133](https://insights.sbomify.com/CVE-2017-15133/): Denial of Service in miekg-dns (high 7.5)
- [CVE-2017-15132](https://insights.sbomify.com/CVE-2017-15132/): Denial of service in dovecot (high 7.5)
- [CVE-2017-15131](https://insights.sbomify.com/CVE-2017-15131/): Misconfiguration in RHEL shipped xdg-user-dirs and gnome-session (high 7.8)
- [CVE-2017-15130](https://insights.sbomify.com/CVE-2017-15130/): Denial of service in dovecot (medium 5.9)
- [CVE-2017-15129](https://insights.sbomify.com/CVE-2017-15129/): Use after free in Linux kernel v4.0-rc1 through v4.15-rc5 (medium 4.7)
- [CVE-2017-15128](https://insights.sbomify.com/CVE-2017-15128/): Denial of service in Linux kernel before 4.13.12 (medium 5.5)
- [CVE-2017-15127](https://insights.sbomify.com/CVE-2017-15127/): Denial of service in Linux kernel before 4.13 (medium 5.5)
- [CVE-2017-15126](https://insights.sbomify.com/CVE-2017-15126/): Use after free in Linux Kernel before 4.13.6 (high 8.1)
- [CVE-2017-15125](https://insights.sbomify.com/CVE-2017-15125/): Cross-site scripting in cloudforms (medium 6.5)
- [CVE-2017-15124](https://insights.sbomify.com/CVE-2017-15124/): Denial of service in Qemu (high 7.5)
- [CVE-2017-15123](https://insights.sbomify.com/CVE-2017-15123/): Missing authorization in CloudForms (medium 5.3)
- [CVE-2017-15121](https://insights.sbomify.com/CVE-2017-15121/): Denial of service in Red Hat Enterprise Linux (medium 5.5)
- [CVE-2017-15120](https://insights.sbomify.com/CVE-2017-15120/): Null dereference in pdns-recursor (high 7.5)
- [CVE-2017-15119](https://insights.sbomify.com/CVE-2017-15119/): Denial of service in qemu (medium 5.8)
- [CVE-2017-15118](https://insights.sbomify.com/CVE-2017-15118/): Memory corruption in Qemu (high 8.3)
- [CVE-2017-15116](https://insights.sbomify.com/CVE-2017-15116/): Null dereference in Linux kernel (medium 5.5)
- [CVE-2017-15115](https://insights.sbomify.com/CVE-2017-15115/): Use after free in Linux kernel before 4.14-rc6 (high 7.8)
- [CVE-2017-15114](https://insights.sbomify.com/CVE-2017-15114/): Misconfiguration in redhat:openstack platform (high 8.1)
- [CVE-2017-15113](https://insights.sbomify.com/CVE-2017-15113/): Information disclosure in ovirt-engine (high 7.2)
- [CVE-2017-15112](https://insights.sbomify.com/CVE-2017-15112/): keycloak-httpd-client-install Insecure Secrets (high 7.8)
- [CVE-2017-15111](https://insights.sbomify.com/CVE-2017-15111/): keycloak-httpd-client-install symlink attack vulnerability (medium 5.5)
- [CVE-2017-15110](https://insights.sbomify.com/CVE-2017-15110/): Moodle Exposure of Sensitive Information to an Unauthorized Actor (medium 4.3)
- [CVE-2017-15108](https://insights.sbomify.com/CVE-2017-15108/): Command injection in spice-vdagent (high 7.8)
- [CVE-2017-15107](https://insights.sbomify.com/CVE-2017-15107/): Security feature bypass in dnsmasq (high 7.5)
- [CVE-2017-15105](https://insights.sbomify.com/CVE-2017-15105/): Security feature bypass in unbound (medium 5.3)
- [CVE-2017-15104](https://insights.sbomify.com/CVE-2017-15104/): Information Exposure in Heketi (high 7.8)
- [CVE-2017-15103](https://insights.sbomify.com/CVE-2017-15103/): Heketi Arbitrary Code Execution (high 8.8)
- [CVE-2017-15102](https://insights.sbomify.com/CVE-2017-15102/): Race condition in Linux kernel through version 4.9-rc1 (medium 6.3)
- [CVE-2017-15101](https://insights.sbomify.com/CVE-2017-15101/): Memory corruption in liblouis (high 7.8)
- [CVE-2017-15100](https://insights.sbomify.com/CVE-2017-15100/): Cross-site scripting in Foreman (medium 6.1)
- [CVE-2017-15099](https://insights.sbomify.com/CVE-2017-15099/): Information disclosure in postgresql (medium 6.5)
- [CVE-2017-15098](https://insights.sbomify.com/CVE-2017-15098/): Information disclosure in postgresql (high 8.1)
- [CVE-2017-15097](https://insights.sbomify.com/CVE-2017-15097/): Privilege escalation in postgresql init script (medium 6.5)
- [CVE-2017-15096](https://insights.sbomify.com/CVE-2017-15096/): Null dereference in GlusterFS (low 3.3)
- [CVE-2017-15095](https://insights.sbomify.com/CVE-2017-15095/): jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution (critical 9.8)
- [CVE-2017-15094](https://insights.sbomify.com/CVE-2017-15094/): Denial of service in PowerDNS Recursor (medium 5.9)
- [CVE-2017-15093](https://insights.sbomify.com/CVE-2017-15093/): Code injection in PowerDNS Recursor (medium 5.3)
- [CVE-2017-15092](https://insights.sbomify.com/CVE-2017-15092/): Cross-site scripting in PowerDNS Recursor (medium 6.1)
- [CVE-2017-15091](https://insights.sbomify.com/CVE-2017-15091/): Missing authorization in PowerDNS Authoritative (high 7.1)
- [CVE-2017-15090](https://insights.sbomify.com/CVE-2017-15090/): Security feature bypass in PowerDNS (medium 5.9)
- [CVE-2017-1509](https://insights.sbomify.com/CVE-2017-1509/): Information disclosure in Rational Collaborative Lifecycle Management (medium 4.3)
- [CVE-2017-15089](https://insights.sbomify.com/CVE-2017-15089/): Deserialization of Untrusted Data in Infinispan (high 8.8)
- [CVE-2017-15088](https://insights.sbomify.com/CVE-2017-15088/): Memory corruption in krb5 1.5 (critical 9.8)
- [CVE-2017-15087](https://insights.sbomify.com/CVE-2017-15087/): Information disclosure in Gluster Storage for RHEL 6 (high 7.5)
- [CVE-2017-15086](https://insights.sbomify.com/CVE-2017-15086/): Other in Gluster Storage for RHEL 6 (high 7.4)
- [CVE-2017-15085](https://insights.sbomify.com/CVE-2017-15085/): Other in Gluster Storage for RHEL 6 (medium 5.9)
- [CVE-2017-15084](https://insights.sbomify.com/CVE-2017-15084/): Cross-site request forgery in rapid7:metasploit (medium 6.5)
- [CVE-2017-15081](https://insights.sbomify.com/CVE-2017-15081/): SQL injection in phpsugar:php melody (critical 9.8)
- [CVE-2017-1508](https://insights.sbomify.com/CVE-2017-1508/): Privilege escalation in Informix Servers (medium 6.7)
- [CVE-2017-15079](https://insights.sbomify.com/CVE-2017-15079/): Path traversal in wpmudev:smush image compression and optimization (high 7.5)
- [CVE-2017-1507](https://insights.sbomify.com/CVE-2017-1507/): Information disclosure in ibm:rational collaborative lifecycle management (medium 4.3)
- [CVE-2017-15063](https://insights.sbomify.com/CVE-2017-15063/): Subrion CMS CSRF Vulnerability (high 8.8)
- [CVE-2017-1506](https://insights.sbomify.com/CVE-2017-1506/): Cross-site scripting in Cognos TM1 (medium 6.1)
- [CVE-2017-15056](https://insights.sbomify.com/CVE-2017-15056/): Null dereference in upx:upx (high 7.8)
- [CVE-2017-15055](https://insights.sbomify.com/CVE-2017-15055/): TeamPass Improper Privilege Management (high 8.1)
- [CVE-2017-15054](https://insights.sbomify.com/CVE-2017-15054/): TeamPass arbitrary file upload vulnerability (high 7.5)
- [CVE-2017-15053](https://insights.sbomify.com/CVE-2017-15053/): TeamPass Improper Privilege Management (medium 4.9)
- [CVE-2017-15052](https://insights.sbomify.com/CVE-2017-15052/): TeamPass Improper Privilege Management (medium 4.9)
- [CVE-2017-15051](https://insights.sbomify.com/CVE-2017-15051/): TeamPass stored cross-site scripting (XSS) vulnerability (medium 5.4)
- [CVE-2017-15049](https://insights.sbomify.com/CVE-2017-15049/): Command injection in zoom:zoom (high 8.8)
- [CVE-2017-15048](https://insights.sbomify.com/CVE-2017-15048/): Memory corruption in zoom:zoom (high 8.8)
- [CVE-2017-15047](https://insights.sbomify.com/CVE-2017-15047/): Memory corruption in redislabs:redis (critical 9.8)
- [CVE-2017-15046](https://insights.sbomify.com/CVE-2017-15046/): Memory corruption in lame project:lame (medium 5.5)
- [CVE-2017-15045](https://insights.sbomify.com/CVE-2017-15045/): Memory corruption in lame project:lame (medium 5.5)
- [CVE-2017-15044](https://insights.sbomify.com/CVE-2017-15044/): Misconfiguration in docuware:fulltext server (high 8.8)
- [CVE-2017-15043](https://insights.sbomify.com/CVE-2017-15043/): Code injection in sierrawireless:es440 firmware (high 8.8)
- [CVE-2017-15042](https://insights.sbomify.com/CVE-2017-15042/): Information disclosure in golang:go (medium 5.9)
- [CVE-2017-15041](https://insights.sbomify.com/CVE-2017-15041/): Command injection in debian:debian linux (critical 9.8)
- [CVE-2017-1504](https://insights.sbomify.com/CVE-2017-1504/): Weak cryptography in WebSphere Application Server (medium 6.5)
- [CVE-2017-15039](https://insights.sbomify.com/CVE-2017-15039/): Cross-site scripting in zurmo:zurmo crm (medium 4.8)
- [CVE-2017-15038](https://insights.sbomify.com/CVE-2017-15038/): Race condition in qemu:qemu (medium 5.6)
- [CVE-2017-15037](https://insights.sbomify.com/CVE-2017-15037/): Race condition in freebsd:freebsd (high 8.1)
- [CVE-2017-15035](https://insights.sbomify.com/CVE-2017-15035/): Memory corruption in emtec:pyrobatchftp (high 7.5)
- [CVE-2017-15033](https://insights.sbomify.com/CVE-2017-15033/): Denial of service in canonical:ubuntu linux (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/95/