# Vulnerabilities published in 2017


- [CVE-2017-14921](https://insights.sbomify.com/CVE-2017-14921/): Cross-site scripting in tine20:tine 2.0 (medium 5.4)
- [CVE-2017-14920](https://insights.sbomify.com/CVE-2017-14920/): eGroupware Community Edition Stored XSS vulnerability (medium 6.1)
- [CVE-2017-14919](https://insights.sbomify.com/CVE-2017-14919/): Denial of service in nodejs:node.js (high 7.5)
- [CVE-2017-14918](https://insights.sbomify.com/CVE-2017-14918/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-14917](https://insights.sbomify.com/CVE-2017-14917/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-14916](https://insights.sbomify.com/CVE-2017-14916/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-14915](https://insights.sbomify.com/CVE-2017-14915/): Use after free in Snapdragon Mobile (critical 9.8)
- [CVE-2017-14914](https://insights.sbomify.com/CVE-2017-14914/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-14913](https://insights.sbomify.com/CVE-2017-14913/): Other in Snapdragon IoT, Snapdragon Mobile (critical 9.8)
- [CVE-2017-14912](https://insights.sbomify.com/CVE-2017-14912/): Memory corruption in Snapdragon IoT, Snapdragon Mobile (critical 9.8)
- [CVE-2017-14911](https://insights.sbomify.com/CVE-2017-14911/): Auth bypass in Snapdragon IoT, Snapdragon Mobile, Snapdragon Automobile (critical 9.8)
- [CVE-2017-14910](https://insights.sbomify.com/CVE-2017-14910/): Memory corruption in Snapdragon Automobile, Snapdragon IoT, Snapdragon Mobile (critical 9.8)
- [CVE-2017-1491](https://insights.sbomify.com/CVE-2017-1491/): Weak cryptography in QRadar Network Security (high 7.5)
- [CVE-2017-14909](https://insights.sbomify.com/CVE-2017-14909/): Other in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-14908](https://insights.sbomify.com/CVE-2017-14908/): Other in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-14907](https://insights.sbomify.com/CVE-2017-14907/): Weak cryptography in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-14906](https://insights.sbomify.com/CVE-2017-14906/): Weak cryptography in Snapdragon IoT, Snapdragon Mobile (critical 9.8)
- [CVE-2017-14905](https://insights.sbomify.com/CVE-2017-14905/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.3)
- [CVE-2017-14904](https://insights.sbomify.com/CVE-2017-14904/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-14903](https://insights.sbomify.com/CVE-2017-14903/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.3)
- [CVE-2017-14902](https://insights.sbomify.com/CVE-2017-14902/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.0)
- [CVE-2017-14901](https://insights.sbomify.com/CVE-2017-14901/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-14900](https://insights.sbomify.com/CVE-2017-14900/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-1490](https://insights.sbomify.com/CVE-2017-1490/): Information disclosure in Jazz Reporting Service (medium 5.3)
- [CVE-2017-14899](https://insights.sbomify.com/CVE-2017-14899/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-14898](https://insights.sbomify.com/CVE-2017-14898/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-14897](https://insights.sbomify.com/CVE-2017-14897/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-14896](https://insights.sbomify.com/CVE-2017-14896/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-14895](https://insights.sbomify.com/CVE-2017-14895/): Other in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-14894](https://insights.sbomify.com/CVE-2017-14894/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.3)
- [CVE-2017-14893](https://insights.sbomify.com/CVE-2017-14893/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.5)
- [CVE-2017-14892](https://insights.sbomify.com/CVE-2017-14892/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-14891](https://insights.sbomify.com/CVE-2017-14891/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.3)
- [CVE-2017-14890](https://insights.sbomify.com/CVE-2017-14890/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.3)
- [CVE-2017-1489](https://insights.sbomify.com/CVE-2017-1489/): Open redirect in Security Access Manager for Web (medium 6.1)
- [CVE-2017-14889](https://insights.sbomify.com/CVE-2017-14889/): Memory corruption in google:android (high 7.8)
- [CVE-2017-14888](https://insights.sbomify.com/CVE-2017-14888/): Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-14887](https://insights.sbomify.com/CVE-2017-14887/): Integer overflow in google:android (high 7.8)
- [CVE-2017-14885](https://insights.sbomify.com/CVE-2017-14885/): Memory corruption in google:android (high 7.8)
- [CVE-2017-14884](https://insights.sbomify.com/CVE-2017-14884/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-14883](https://insights.sbomify.com/CVE-2017-14883/): Integer overflow in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-14882](https://insights.sbomify.com/CVE-2017-14882/): Memory corruption in google:android (high 7.5)
- [CVE-2017-14881](https://insights.sbomify.com/CVE-2017-14881/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-14880](https://insights.sbomify.com/CVE-2017-14880/): Race condition in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-1488](https://insights.sbomify.com/CVE-2017-1488/): Information disclosure in Rational Collaborative Lifecycle Management (low 3.7)
- [CVE-2017-14879](https://insights.sbomify.com/CVE-2017-14879/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 8.8)
- [CVE-2017-14878](https://insights.sbomify.com/CVE-2017-14878/): Integer overflow in google:android (high 7.5)
- [CVE-2017-14877](https://insights.sbomify.com/CVE-2017-14877/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-14876](https://insights.sbomify.com/CVE-2017-14876/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-14875](https://insights.sbomify.com/CVE-2017-14875/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.5)
- [CVE-2017-14873](https://insights.sbomify.com/CVE-2017-14873/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-14872](https://insights.sbomify.com/CVE-2017-14872/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (medium 5.5)
- [CVE-2017-14870](https://insights.sbomify.com/CVE-2017-14870/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (high 7.5)
- [CVE-2017-1487](https://insights.sbomify.com/CVE-2017-1487/): Information disclosure in Sterling File Gateway (medium 6.5)
- [CVE-2017-14869](https://insights.sbomify.com/CVE-2017-14869/): Information disclosure in Android for MSM, Firefox OS for MSM, QRD Android (high 7.5)
- [CVE-2017-14868](https://insights.sbomify.com/CVE-2017-14868/): Restlet Framework Ja-rs extension is vulnerable to XXE when using SimpleXMLProvider (high 7.5)
- [CVE-2017-14867](https://insights.sbomify.com/CVE-2017-14867/): Command injection in debian:debian linux (high 8.8)
- [CVE-2017-14866](https://insights.sbomify.com/CVE-2017-14866/): Memory corruption in exiv2:exiv2 (medium 5.5)
- [CVE-2017-14865](https://insights.sbomify.com/CVE-2017-14865/): Memory corruption in exiv2:exiv2 (medium 5.5)
- [CVE-2017-14864](https://insights.sbomify.com/CVE-2017-14864/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-14863](https://insights.sbomify.com/CVE-2017-14863/): Null dereference in exiv2:exiv2 (medium 5.5)
- [CVE-2017-14862](https://insights.sbomify.com/CVE-2017-14862/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-14861](https://insights.sbomify.com/CVE-2017-14861/): Denial of service in exiv2:exiv2 (medium 5.5)
- [CVE-2017-14860](https://insights.sbomify.com/CVE-2017-14860/): Memory corruption in exiv2:exiv2 (medium 5.5)
- [CVE-2017-1486](https://insights.sbomify.com/CVE-2017-1486/): Cross-site scripting in Cognos Business Intelligence (medium 6.1)
- [CVE-2017-14859](https://insights.sbomify.com/CVE-2017-14859/): Memory corruption in canonical:ubuntu linux (medium 5.5)
- [CVE-2017-14858](https://insights.sbomify.com/CVE-2017-14858/): Memory corruption in exiv2:exiv2 (medium 5.5)
- [CVE-2017-14857](https://insights.sbomify.com/CVE-2017-14857/): Memory corruption in exiv2:exiv2 (medium 5.5)
- [CVE-2017-14855](https://insights.sbomify.com/CVE-2017-14855/): Denial of service in redlion:hmi panel firmware (high 8.6)
- [CVE-2017-14854](https://insights.sbomify.com/CVE-2017-14854/): Memory corruption in orpak:siteomat (critical 9.1)
- [CVE-2017-14853](https://insights.sbomify.com/CVE-2017-14853/): Command injection in orpak:siteomat (high 8.6)
- [CVE-2017-14852](https://insights.sbomify.com/CVE-2017-14852/): Weak cryptography in orpak:siteomat (high 8.6)
- [CVE-2017-14851](https://insights.sbomify.com/CVE-2017-14851/): SQL injection in orpak:siteomat (critical 9.8)
- [CVE-2017-14850](https://insights.sbomify.com/CVE-2017-14850/): Cross-site scripting in orpak:siteomat (medium 6.1)
- [CVE-2017-1485](https://insights.sbomify.com/CVE-2017-1485/): Cross-site scripting in Cognos Analytics (medium 5.4)
- [CVE-2017-14849](https://insights.sbomify.com/CVE-2017-14849/): Path traversal in nodejs:node.js (high 7.5)
- [CVE-2017-14848](https://insights.sbomify.com/CVE-2017-14848/): SQL injection in dasinfomedia:wphrm human resource management system (high 8.8)
- [CVE-2017-14847](https://insights.sbomify.com/CVE-2017-14847/): SQL injection in dasinfomedia:wpams apartment management system (high 8.8)
- [CVE-2017-14846](https://insights.sbomify.com/CVE-2017-14846/): SQL injection in dasinfomedia:hospital management system (high 8.8)
- [CVE-2017-14845](https://insights.sbomify.com/CVE-2017-14845/): SQL injection in dasinfomedia:wpchurch church management system (high 8.8)
- [CVE-2017-14844](https://insights.sbomify.com/CVE-2017-14844/): SQL injection in dasinfomedia:wpgym gym management system (high 8.8)
- [CVE-2017-14843](https://insights.sbomify.com/CVE-2017-14843/): SQL injection in dasinfomedia:school management system (high 8.8)
- [CVE-2017-14842](https://insights.sbomify.com/CVE-2017-14842/): SQL injection in dasinfomedia:smsmaster multipurpose sms gateway (high 8.8)
- [CVE-2017-14841](https://insights.sbomify.com/CVE-2017-14841/): File upload in dasinfomedia:annual maintenance contract management system (medium 6.5)
- [CVE-2017-14840](https://insights.sbomify.com/CVE-2017-14840/): File upload in teamworktec:ticketplus (high 8.8)
- [CVE-2017-1484](https://insights.sbomify.com/CVE-2017-1484/): Information disclosure in WebSphere Commerce Enterprise (medium 4.3)
- [CVE-2017-14839](https://insights.sbomify.com/CVE-2017-14839/): File upload in teamworktec:photo fusion (high 8.8)
- [CVE-2017-14838](https://insights.sbomify.com/CVE-2017-14838/): File upload in teamworktec:job links (high 8.8)
- [CVE-2017-14837](https://insights.sbomify.com/CVE-2017-14837/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2017-14836](https://insights.sbomify.com/CVE-2017-14836/): Use after free in Foxit Reader (high 8.8)
- [CVE-2017-14835](https://insights.sbomify.com/CVE-2017-14835/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2017-14834](https://insights.sbomify.com/CVE-2017-14834/): Use after free in Foxit Reader (high 8.8)
- [CVE-2017-14833](https://insights.sbomify.com/CVE-2017-14833/): Use after free in Foxit Reader (high 8.8)
- [CVE-2017-14832](https://insights.sbomify.com/CVE-2017-14832/): Use after free in Foxit Reader (high 8.8)
- [CVE-2017-14831](https://insights.sbomify.com/CVE-2017-14831/): Use after free in Foxit Reader (high 8.8)
- [CVE-2017-14830](https://insights.sbomify.com/CVE-2017-14830/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2017-1483](https://insights.sbomify.com/CVE-2017-1483/): Auth bypass in Security Identity Manager (high 8.6)
- [CVE-2017-14829](https://insights.sbomify.com/CVE-2017-14829/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2017-14828](https://insights.sbomify.com/CVE-2017-14828/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2017-14827](https://insights.sbomify.com/CVE-2017-14827/): Memory corruption in Foxit Reader (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/97/