# Vulnerabilities published in 2017


- [CVE-2017-14826](https://insights.sbomify.com/CVE-2017-14826/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2017-14825](https://insights.sbomify.com/CVE-2017-14825/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2017-14824](https://insights.sbomify.com/CVE-2017-14824/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2017-14823](https://insights.sbomify.com/CVE-2017-14823/): Memory corruption in Foxit Reader (high 8.8)
- [CVE-2017-14822](https://insights.sbomify.com/CVE-2017-14822/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2017-14821](https://insights.sbomify.com/CVE-2017-14821/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2017-14820](https://insights.sbomify.com/CVE-2017-14820/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2017-1482](https://insights.sbomify.com/CVE-2017-1482/): Cross-site scripting in Sterling B2B Integrator (medium 5.4)
- [CVE-2017-14819](https://insights.sbomify.com/CVE-2017-14819/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2017-14818](https://insights.sbomify.com/CVE-2017-14818/): Memory corruption in Foxit Reader (medium 6.5)
- [CVE-2017-1481](https://insights.sbomify.com/CVE-2017-1481/): Information disclosure in Sterling B2B Integrator (medium 4.3)
- [CVE-2017-14807](https://insights.sbomify.com/CVE-2017-14807/): SQL injection in ui-server/app/models/diary_entry.rb in SUSE Studio onsite (high 8.1)
- [CVE-2017-14806](https://insights.sbomify.com/CVE-2017-14806/): Insecure handling of repodata and packages in SUSE Studio onlite (low 3.7)
- [CVE-2017-14804](https://insights.sbomify.com/CVE-2017-14804/): package builds could use directory traversal to write outside of target area (critical 9.9)
- [CVE-2017-14803](https://insights.sbomify.com/CVE-2017-14803/): Code injection in NetIQ Access Manager (critical 9.8)
- [CVE-2017-14802](https://insights.sbomify.com/CVE-2017-14802/): Unvalidated Redirect in NetIQ Access Manager after upgrading to NAM 4.3 AC and IDP URLs (medium 5.4)
- [CVE-2017-14801](https://insights.sbomify.com/CVE-2017-14801/): Reflected xss in Admin Console REST interface (medium 4.6)
- [CVE-2017-14800](https://insights.sbomify.com/CVE-2017-14800/): Reflected xss on Access Manager iManager UI (medium 5.4)
- [CVE-2017-1480](https://insights.sbomify.com/CVE-2017-1480/): Information disclosure in Security Access Manager (medium 4.3)
- [CVE-2017-14799](https://insights.sbomify.com/CVE-2017-14799/): XSS Vulnerability with ESP URL (medium 4.6)
- [CVE-2017-14798](https://insights.sbomify.com/CVE-2017-14798/): local privilege escalation in SUSE postgresql init script (high 7.3)
- [CVE-2017-14797](https://insights.sbomify.com/CVE-2017-14797/): Weak cryptography in philips:hue bridge bsb002 firmware (high 7.5)
- [CVE-2017-14796](https://insights.sbomify.com/CVE-2017-14796/): Integer overflow in libbpg project:libbpg (high 8.8)
- [CVE-2017-14795](https://insights.sbomify.com/CVE-2017-14795/): Memory corruption in libbpg project:libbpg (high 8.8)
- [CVE-2017-1478](https://insights.sbomify.com/CVE-2017-1478/): Information disclosure in Security Access Manager (low 3.3)
- [CVE-2017-14775](https://insights.sbomify.com/CVE-2017-14775/): Laravel Sensitive Data Exposure (medium 5.9)
- [CVE-2017-14773](https://insights.sbomify.com/CVE-2017-14773/): Privilege escalation in skyboxsecurity:skybox manager client application (high 7.8)
- [CVE-2017-14772](https://insights.sbomify.com/CVE-2017-14772/): Information disclosure in skyboxsecurity:skybox manager client application (low 3.3)
- [CVE-2017-14771](https://insights.sbomify.com/CVE-2017-14771/): File upload in skyboxsecurity:skybox manager client application (medium 5.5)
- [CVE-2017-14770](https://insights.sbomify.com/CVE-2017-14770/): Information disclosure in skyboxsecurity:skybox manager client application (medium 5.5)
- [CVE-2017-1477](https://insights.sbomify.com/CVE-2017-1477/): XML external entity in Security Access Manager (high 8.1)
- [CVE-2017-14767](https://insights.sbomify.com/CVE-2017-14767/): Memory corruption in ffmpeg:ffmpeg (high 8.8)
- [CVE-2017-14766](https://insights.sbomify.com/CVE-2017-14766/): Auth bypass in saadamin:simple student result (high 7.5)
- [CVE-2017-14765](https://insights.sbomify.com/CVE-2017-14765/): GeniXCMS Cross-site Scripting (XSS) via the Menu ID field (medium 6.1)
- [CVE-2017-14764](https://insights.sbomify.com/CVE-2017-14764/): GeniXCMS arbitrary PHP code execution (high 8.8)
- [CVE-2017-14763](https://insights.sbomify.com/CVE-2017-14763/): GeniXCMS arbitrary PHP code execution (high 8.8)
- [CVE-2017-14762](https://insights.sbomify.com/CVE-2017-14762/): GeniXCMS Cross-site Scripting (XSS) via id parameter (medium 6.1)
- [CVE-2017-14761](https://insights.sbomify.com/CVE-2017-14761/): GeniXCMS Cross-site Scripting (XSS) vulnerability via id parameter (medium 6.1)
- [CVE-2017-14760](https://insights.sbomify.com/CVE-2017-14760/): SQL injection in eventespresso:event espresso lite (critical 9.8)
- [CVE-2017-1476](https://insights.sbomify.com/CVE-2017-1476/): Misconfiguration in Security Access Manager (medium 5.9)
- [CVE-2017-14759](https://insights.sbomify.com/CVE-2017-14759/): XML external entity in opentext:document sciences xpression (critical 9.8)
- [CVE-2017-14758](https://insights.sbomify.com/CVE-2017-14758/): SQL injection in opentext:document sciences xpression (high 8.8)
- [CVE-2017-14757](https://insights.sbomify.com/CVE-2017-14757/): SQL injection in opentext:document sciences xpression (high 8.8)
- [CVE-2017-14756](https://insights.sbomify.com/CVE-2017-14756/): Cross-site scripting in opentext:document sciences xpression (medium 6.1)
- [CVE-2017-14755](https://insights.sbomify.com/CVE-2017-14755/): Cross-site scripting in opentext:document sciences xpression (medium 6.1)
- [CVE-2017-14754](https://insights.sbomify.com/CVE-2017-14754/): Path traversal in opentext:document sciences xpression (medium 6.5)
- [CVE-2017-14753](https://insights.sbomify.com/CVE-2017-14753/): Cross-site scripting in eyesofnetwork:eyesofnetwork (medium 5.4)
- [CVE-2017-14752](https://insights.sbomify.com/CVE-2017-14752/): Cross-site scripting in mahara:mahara (medium 5.4)
- [CVE-2017-14751](https://insights.sbomify.com/CVE-2017-14751/): Cross-site scripting in intensewp:wp jobs (medium 6.1)
- [CVE-2017-14749](https://insights.sbomify.com/CVE-2017-14749/): Memory corruption in jerryscript:jerryscript (high 7.8)
- [CVE-2017-14748](https://insights.sbomify.com/CVE-2017-14748/): Race condition in blizzard:overwatch (medium 5.3)
- [CVE-2017-14746](https://insights.sbomify.com/CVE-2017-14746/): Use after free in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-14745](https://insights.sbomify.com/CVE-2017-14745/): Integer overflow in gnu:binutils (high 7.8)
- [CVE-2017-14744](https://insights.sbomify.com/CVE-2017-14744/): Cross-site scripting in baidu:ueditor (medium 6.1)
- [CVE-2017-14743](https://insights.sbomify.com/CVE-2017-14743/): SQL injection in faleemi:fsc-880 firmware (high 8.1)
- [CVE-2017-14742](https://insights.sbomify.com/CVE-2017-14742/): Memory corruption in labf:nfsaxe (critical 9.8)
- [CVE-2017-14741](https://insights.sbomify.com/CVE-2017-14741/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-14740](https://insights.sbomify.com/CVE-2017-14740/): GeniXCMS Cross-site scripting (XSS) vulnerability (medium 4.8)
- [CVE-2017-1474](https://insights.sbomify.com/CVE-2017-1474/): Information disclosure in Security Access Manager (medium 5.3)
- [CVE-2017-14739](https://insights.sbomify.com/CVE-2017-14739/): Null dereference in imagemagick:imagemagick (high 7.5)
- [CVE-2017-14738](https://insights.sbomify.com/CVE-2017-14738/): SQL injection in filerun:filerun (critical 9.8)
- [CVE-2017-14737](https://insights.sbomify.com/CVE-2017-14737/): Weak cryptography in botan project:botan (medium 5.5)
- [CVE-2017-14735](https://insights.sbomify.com/CVE-2017-14735/): OWASP AntiSamy Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2017-14734](https://insights.sbomify.com/CVE-2017-14734/): Memory corruption in libbpg project:libbpg (high 8.8)
- [CVE-2017-14733](https://insights.sbomify.com/CVE-2017-14733/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2017-14731](https://insights.sbomify.com/CVE-2017-14731/): Memory corruption in libofx project:libofx (medium 6.5)
- [CVE-2017-14730](https://insights.sbomify.com/CVE-2017-14730/): Privilege escalation in elasticsearch:logstash (high 7.8)
- [CVE-2017-1473](https://insights.sbomify.com/CVE-2017-1473/): Weak cryptography in Security Access Manager (high 7.5)
- [CVE-2017-14729](https://insights.sbomify.com/CVE-2017-14729/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2017-14728](https://insights.sbomify.com/CVE-2017-14728/): Hardcoded credentials in orpak:siteomat (critical 9.8)
- [CVE-2017-14727](https://insights.sbomify.com/CVE-2017-14727/): Memory corruption in weechat:logger (high 7.5)
- [CVE-2017-14726](https://insights.sbomify.com/CVE-2017-14726/): Cross-site scripting in wordpress:wordpress (medium 6.1)
- [CVE-2017-14725](https://insights.sbomify.com/CVE-2017-14725/): Open redirect in wordpress:wordpress (medium 5.4)
- [CVE-2017-14724](https://insights.sbomify.com/CVE-2017-14724/): Cross-site scripting in wordpress:wordpress (medium 6.1)
- [CVE-2017-14723](https://insights.sbomify.com/CVE-2017-14723/): SQL injection in wordpress:wordpress (critical 9.8)
- [CVE-2017-14722](https://insights.sbomify.com/CVE-2017-14722/): Path traversal in wordpress:wordpress (high 7.5)
- [CVE-2017-14721](https://insights.sbomify.com/CVE-2017-14721/): Cross-site scripting in wordpress:wordpress (medium 6.1)
- [CVE-2017-14720](https://insights.sbomify.com/CVE-2017-14720/): Cross-site scripting in wordpress:wordpress (medium 6.1)
- [CVE-2017-14719](https://insights.sbomify.com/CVE-2017-14719/): Path traversal in wordpress:wordpress (high 7.5)
- [CVE-2017-14718](https://insights.sbomify.com/CVE-2017-14718/): Cross-site scripting in wordpress:wordpress (medium 6.1)
- [CVE-2017-14717](https://insights.sbomify.com/CVE-2017-14717/): Cross-site scripting in telaxius:epesi (medium 5.4)
- [CVE-2017-14716](https://insights.sbomify.com/CVE-2017-14716/): Cross-site scripting in telaxius:epesi (medium 5.4)
- [CVE-2017-14715](https://insights.sbomify.com/CVE-2017-14715/): Cross-site scripting in telaxius:epesi (medium 5.4)
- [CVE-2017-14714](https://insights.sbomify.com/CVE-2017-14714/): Cross-site scripting in telaxius:epesi (medium 5.4)
- [CVE-2017-14713](https://insights.sbomify.com/CVE-2017-14713/): Cross-site scripting in telaxius:epesi (medium 5.4)
- [CVE-2017-14712](https://insights.sbomify.com/CVE-2017-14712/): Cross-site scripting in telaxius:epesi (medium 5.4)
- [CVE-2017-14711](https://insights.sbomify.com/CVE-2017-14711/): Information disclosure in kickbase:bundesliga manager (high 8.1)
- [CVE-2017-14710](https://insights.sbomify.com/CVE-2017-14710/): Weak cryptography in shein:shein-fashion shopping online (medium 5.9)
- [CVE-2017-14709](https://insights.sbomify.com/CVE-2017-14709/): Security feature bypass in komoot:komoot (high 7.4)
- [CVE-2017-14706](https://insights.sbomify.com/CVE-2017-14706/): Information disclosure in denyall:i-suite (critical 9.8)
- [CVE-2017-14705](https://insights.sbomify.com/CVE-2017-14705/): Command injection in denyall:i-suite (high 8.1)
- [CVE-2017-14704](https://insights.sbomify.com/CVE-2017-14704/): File upload in claydip:airbnb clone (high 8.8)
- [CVE-2017-14703](https://insights.sbomify.com/CVE-2017-14703/): SQL injection in cashbackcomparisonscript:cash back comparison (critical 9.8)
- [CVE-2017-14702](https://insights.sbomify.com/CVE-2017-14702/): Deserialization in branaghgroup:ers data system (critical 9.8)
- [CVE-2017-14699](https://insights.sbomify.com/CVE-2017-14699/): XML external entity in asus:dsl-ac51 firmware (medium 6.5)
- [CVE-2017-14698](https://insights.sbomify.com/CVE-2017-14698/): Auth bypass in asus:dsl-ac51 firmware (critical 9.8)
- [CVE-2017-14696](https://insights.sbomify.com/CVE-2017-14696/): SaltStack Salt Denial of Service via a crafted authentication request (high 7.5)
- [CVE-2017-14695](https://insights.sbomify.com/CVE-2017-14695/): SaltStack Salt Directory traversal vulnerability in minion id validation (critical 9.8)
- [CVE-2017-14694](https://insights.sbomify.com/CVE-2017-14694/): Memory corruption in foxitsoftware:foxit reader (high 7.8)
- [CVE-2017-14693](https://insights.sbomify.com/CVE-2017-14693/): Memory corruption in irfanview:irfanview (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/98/