# Vulnerabilities published in 2017


- [CVE-2017-15032](https://insights.sbomify.com/CVE-2017-15032/): Denial of service in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-15031](https://insights.sbomify.com/CVE-2017-15031/): Information disclosure in trustedfirmware:trusted firmware-a (high 7.5)
- [CVE-2017-15030](https://insights.sbomify.com/CVE-2017-15030/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2017-1503](https://insights.sbomify.com/CVE-2017-1503/): Cross-site scripting in IBM WebSphere Application Server (medium 6.1)
- [CVE-2017-15029](https://insights.sbomify.com/CVE-2017-15029/): Server-side request forgery in open-xchange:open-xchange appsuite (medium 4.3)
- [CVE-2017-15025](https://insights.sbomify.com/CVE-2017-15025/): Denial of service in gnu:binutils (medium 5.5)
- [CVE-2017-15024](https://insights.sbomify.com/CVE-2017-15024/): Denial of service in gnu:binutils (medium 5.5)
- [CVE-2017-15023](https://insights.sbomify.com/CVE-2017-15023/): Null dereference in gnu:binutils (medium 5.5)
- [CVE-2017-15022](https://insights.sbomify.com/CVE-2017-15022/): Null dereference in gnu:binutils (medium 5.5)
- [CVE-2017-15021](https://insights.sbomify.com/CVE-2017-15021/): Memory corruption in gnu:binutils (medium 5.5)
- [CVE-2017-15020](https://insights.sbomify.com/CVE-2017-15020/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-1502](https://insights.sbomify.com/CVE-2017-1502/): Cross-site scripting in ibm:content navigator (medium 5.4)
- [CVE-2017-15019](https://insights.sbomify.com/CVE-2017-15019/): Null dereference in lame project:lame (high 7.8)
- [CVE-2017-15018](https://insights.sbomify.com/CVE-2017-15018/): Memory corruption in lame project:lame (medium 5.5)
- [CVE-2017-15017](https://insights.sbomify.com/CVE-2017-15017/): Null dereference in canonical:ubuntu linux (high 8.8)
- [CVE-2017-15016](https://insights.sbomify.com/CVE-2017-15016/): Null dereference in canonical:ubuntu linux (high 8.8)
- [CVE-2017-15015](https://insights.sbomify.com/CVE-2017-15015/): Null dereference in canonical:ubuntu linux (high 8.8)
- [CVE-2017-15014](https://insights.sbomify.com/CVE-2017-15014/): Missing authorization in opentext:documentum content server (medium 4.3)
- [CVE-2017-15013](https://insights.sbomify.com/CVE-2017-15013/): Privilege escalation in opentext:documentum content server (high 8.8)
- [CVE-2017-15012](https://insights.sbomify.com/CVE-2017-15012/): Path traversal in opentext:documentum content server (high 8.8)
- [CVE-2017-15011](https://insights.sbomify.com/CVE-2017-15011/): Memory corruption in qt:qt (high 7.5)
- [CVE-2017-15010](https://insights.sbomify.com/CVE-2017-15010/): Regular Expression Denial of Service in tough-cookie (high 7.5)
- [CVE-2017-1501](https://insights.sbomify.com/CVE-2017-1501/): Information disclosure in WebSphere Application Server (medium 5.9)
- [CVE-2017-15009](https://insights.sbomify.com/CVE-2017-15009/): Cross-site scripting in paessler:prtg network monitor (medium 6.1)
- [CVE-2017-15008](https://insights.sbomify.com/CVE-2017-15008/): Cross-site scripting in paessler:prtg network monitor (medium 4.8)
- [CVE-2017-1500](https://insights.sbomify.com/CVE-2017-1500/): Cross-site scripting in Worklight (medium 6.1)
- [CVE-2017-14997](https://insights.sbomify.com/CVE-2017-14997/): Integer overflow in debian:debian linux (medium 6.5)
- [CVE-2017-14995](https://insights.sbomify.com/CVE-2017-14995/): Cross-site scripting in wso2:application server (medium 6.1)
- [CVE-2017-14994](https://insights.sbomify.com/CVE-2017-14994/): Null dereference in debian:debian linux (medium 6.5)
- [CVE-2017-14993](https://insights.sbomify.com/CVE-2017-14993/): Denial of service in oxid-esales:eshop (high 7.5)
- [CVE-2017-14992](https://insights.sbomify.com/CVE-2017-14992/): tar-split memory exhaustion (medium 6.5)
- [CVE-2017-14991](https://insights.sbomify.com/CVE-2017-14991/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2017-14990](https://insights.sbomify.com/CVE-2017-14990/): Weak cryptography in debian:debian linux (medium 6.5)
- [CVE-2017-1499](https://insights.sbomify.com/CVE-2017-1499/): File upload in Maximo Asset Management (high 8.8)
- [CVE-2017-14989](https://insights.sbomify.com/CVE-2017-14989/): Use after free in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-14988](https://insights.sbomify.com/CVE-2017-14988/): Denial of service in openexr:openexr (medium 5.5)
- [CVE-2017-14985](https://insights.sbomify.com/CVE-2017-14985/): Cross-site scripting in eyesofnetwork:eyesofnetwork (medium 5.4)
- [CVE-2017-14984](https://insights.sbomify.com/CVE-2017-14984/): Cross-site scripting in eyesofnetwork:eyesofnetwork (medium 5.4)
- [CVE-2017-14983](https://insights.sbomify.com/CVE-2017-14983/): Cross-site scripting in eyesofnetwork:eyesofnetwork (medium 4.8)
- [CVE-2017-14981](https://insights.sbomify.com/CVE-2017-14981/): Cross-site scripting in atutor:atutor (medium 5.4)
- [CVE-2017-14980](https://insights.sbomify.com/CVE-2017-14980/): Memory corruption in flexense:syncbreeze (critical 9.8)
- [CVE-2017-1498](https://insights.sbomify.com/CVE-2017-1498/): Cross-site scripting in Connections (medium 5.4)
- [CVE-2017-14979](https://insights.sbomify.com/CVE-2017-14979/): Path traversal in gxlcms:gxlcms (high 7.5)
- [CVE-2017-14977](https://insights.sbomify.com/CVE-2017-14977/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2017-14976](https://insights.sbomify.com/CVE-2017-14976/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2017-14975](https://insights.sbomify.com/CVE-2017-14975/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2017-14974](https://insights.sbomify.com/CVE-2017-14974/): Null dereference in gnu:binutils (medium 5.5)
- [CVE-2017-14973](https://insights.sbomify.com/CVE-2017-14973/): Cross-site scripting in identicard:two-reader controller configuration manager (medium 5.4)
- [CVE-2017-14972](https://insights.sbomify.com/CVE-2017-14972/): Auth bypass in infocus:mondopad (high 7.5)
- [CVE-2017-14971](https://insights.sbomify.com/CVE-2017-14971/): Information disclosure in infocuscorp:infocus mondopad (medium 5.5)
- [CVE-2017-14970](https://insights.sbomify.com/CVE-2017-14970/): Denial of service in openvswitch:openvswitch (medium 5.9)
- [CVE-2017-1497](https://insights.sbomify.com/CVE-2017-1497/): Information disclosure in Sterling File Gateway (low 3.7)
- [CVE-2017-14969](https://insights.sbomify.com/CVE-2017-14969/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-14968](https://insights.sbomify.com/CVE-2017-14968/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-14967](https://insights.sbomify.com/CVE-2017-14967/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-14966](https://insights.sbomify.com/CVE-2017-14966/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-14965](https://insights.sbomify.com/CVE-2017-14965/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-14964](https://insights.sbomify.com/CVE-2017-14964/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-14963](https://insights.sbomify.com/CVE-2017-14963/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-14962](https://insights.sbomify.com/CVE-2017-14962/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-14961](https://insights.sbomify.com/CVE-2017-14961/): Memory corruption in ikarussecurity:anti.virus (high 7.8)
- [CVE-2017-14960](https://insights.sbomify.com/CVE-2017-14960/): SQL injection in opentext:document sciences xpression (high 7.5)
- [CVE-2017-1496](https://insights.sbomify.com/CVE-2017-1496/): Cross-site scripting in Sterling B2B Integrator (medium 5.4)
- [CVE-2017-14958](https://insights.sbomify.com/CVE-2017-14958/): File upload in pivotx:pivotx (high 7.2)
- [CVE-2017-14957](https://insights.sbomify.com/CVE-2017-14957/): Cross-site scripting in blogotext project:blogotext (medium 6.1)
- [CVE-2017-14956](https://insights.sbomify.com/CVE-2017-14956/): Cross-site request forgery in alienvault:unified security management (medium 5.7)
- [CVE-2017-14955](https://insights.sbomify.com/CVE-2017-14955/): Race condition in checkmk:checkmk (medium 5.9)
- [CVE-2017-14954](https://insights.sbomify.com/CVE-2017-14954/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2017-14953](https://insights.sbomify.com/CVE-2017-14953/): Weak cryptography in hikvision:ds-2cd2432f-iw firmware (medium 6.5)
- [CVE-2017-14952](https://insights.sbomify.com/CVE-2017-14952/): Memory corruption in icu-project:international components for unicode (critical 9.8)
- [CVE-2017-1495](https://insights.sbomify.com/CVE-2017-1495/): Information disclosure in InfoSphere Information Server (medium 4.9)
- [CVE-2017-14949](https://insights.sbomify.com/CVE-2017-14949/): Restlet Framework allows remote attackers to access arbitrary files via a crafted REST API HTTP request (high 7.5)
- [CVE-2017-14948](https://insights.sbomify.com/CVE-2017-14948/): Memory corruption in dlink:dir-868l firmware (critical 9.8)
- [CVE-2017-14947](https://insights.sbomify.com/CVE-2017-14947/): Memory corruption in artifex:gsview (high 7.8)
- [CVE-2017-14946](https://insights.sbomify.com/CVE-2017-14946/): Memory corruption in artifex:gsview (high 7.8)
- [CVE-2017-14945](https://insights.sbomify.com/CVE-2017-14945/): Memory corruption in artifex:gsview (high 7.8)
- [CVE-2017-14944](https://insights.sbomify.com/CVE-2017-14944/): Other in inedo:proget (high 7.5)
- [CVE-2017-14943](https://insights.sbomify.com/CVE-2017-14943/): Information disclosure in trapezegroup:transitmaster (high 7.5)
- [CVE-2017-14942](https://insights.sbomify.com/CVE-2017-14942/): Information disclosure in intelbras:wrn 150 firmware (critical 9.8)
- [CVE-2017-14941](https://insights.sbomify.com/CVE-2017-14941/): Information disclosure in jaspersoft:jasperreports (medium 6.5)
- [CVE-2017-14940](https://insights.sbomify.com/CVE-2017-14940/): Null dereference in gnu:binutils (medium 5.5)
- [CVE-2017-1494](https://insights.sbomify.com/CVE-2017-1494/): Cross-site scripting in Business Process Manager Advanced (medium 5.4)
- [CVE-2017-14939](https://insights.sbomify.com/CVE-2017-14939/): Memory corruption in gnu:binutils (medium 5.5)
- [CVE-2017-14938](https://insights.sbomify.com/CVE-2017-14938/): Denial of service in gnu:binutils (medium 5.5)
- [CVE-2017-14937](https://insights.sbomify.com/CVE-2017-14937/): Weak cryptography in pcu:pcu (medium 4.7)
- [CVE-2017-14935](https://insights.sbomify.com/CVE-2017-14935/): Information disclosure in pulsesecure:pulse one on-premise (high 7.5)
- [CVE-2017-14934](https://insights.sbomify.com/CVE-2017-14934/): Denial of service in gnu:binutils (medium 5.5)
- [CVE-2017-14933](https://insights.sbomify.com/CVE-2017-14933/): Denial of service in gnu:binutils (medium 5.5)
- [CVE-2017-14932](https://insights.sbomify.com/CVE-2017-14932/): Denial of service in gnu:binutils (medium 5.5)
- [CVE-2017-14931](https://insights.sbomify.com/CVE-2017-14931/): Memory corruption in openexif project:openexif (medium 5.5)
- [CVE-2017-14930](https://insights.sbomify.com/CVE-2017-14930/): Denial of service in gnu:binutils (medium 5.5)
- [CVE-2017-1493](https://insights.sbomify.com/CVE-2017-1493/): Missing authorization in UrbanCode Deploy (medium 5.4)
- [CVE-2017-14929](https://insights.sbomify.com/CVE-2017-14929/): Memory corruption in freedesktop:poppler (high 7.5)
- [CVE-2017-14928](https://insights.sbomify.com/CVE-2017-14928/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2017-14927](https://insights.sbomify.com/CVE-2017-14927/): Null dereference in freedesktop:poppler (medium 5.5)
- [CVE-2017-14926](https://insights.sbomify.com/CVE-2017-14926/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2017-14925](https://insights.sbomify.com/CVE-2017-14925/): Cross-site request forgery in tiki:tikiwiki cms\/groupware (high 8.0)
- [CVE-2017-14924](https://insights.sbomify.com/CVE-2017-14924/): Cross-site request forgery in tiki:tikiwiki cms\/groupware (high 8.0)
- [CVE-2017-14923](https://insights.sbomify.com/CVE-2017-14923/): Cross-site scripting in tine20:tine 2.0 (medium 5.4)
- [CVE-2017-14922](https://insights.sbomify.com/CVE-2017-14922/): Cross-site scripting in tine20:tine 2.0 (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/96/