# Vulnerabilities published in 2017


- [CVE-2017-14692](https://insights.sbomify.com/CVE-2017-14692/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14691](https://insights.sbomify.com/CVE-2017-14691/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14690](https://insights.sbomify.com/CVE-2017-14690/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-1469](https://insights.sbomify.com/CVE-2017-1469/): Privilege escalation in InfoSphere Information Server (high 7.8)
- [CVE-2017-14689](https://insights.sbomify.com/CVE-2017-14689/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14688](https://insights.sbomify.com/CVE-2017-14688/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14687](https://insights.sbomify.com/CVE-2017-14687/): Memory corruption in artifex:mupdf (high 7.8)
- [CVE-2017-14686](https://insights.sbomify.com/CVE-2017-14686/): Memory corruption in artifex:mupdf (high 7.8)
- [CVE-2017-14685](https://insights.sbomify.com/CVE-2017-14685/): Memory corruption in artifex:mupdf (high 7.8)
- [CVE-2017-14684](https://insights.sbomify.com/CVE-2017-14684/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-14683](https://insights.sbomify.com/CVE-2017-14683/): Gem in a Box vulnerable to Cross-site Request Forgery (high 8.8)
- [CVE-2017-14682](https://insights.sbomify.com/CVE-2017-14682/): Memory corruption in imagemagick:imagemagick (high 8.8)
- [CVE-2017-14681](https://insights.sbomify.com/CVE-2017-14681/): Privilege escalation in p3scan project:p3scan (medium 5.5)
- [CVE-2017-14680](https://insights.sbomify.com/CVE-2017-14680/): Information disclosure in zkteco:zktime web (high 7.5)
- [CVE-2017-1468](https://insights.sbomify.com/CVE-2017-1468/): Privilege escalation in InfoSphere Information Server (high 7.8)
- [CVE-2017-1467](https://insights.sbomify.com/CVE-2017-1467/): Privilege escalation in InfoSphere Information Server (high 8.1)
- [CVE-2017-14653](https://insights.sbomify.com/CVE-2017-14653/): Missing authorization in asp4cms:aspcms (medium 6.5)
- [CVE-2017-14652](https://insights.sbomify.com/CVE-2017-14652/): SQL injection in tapatalk:tapatalk (critical 9.8)
- [CVE-2017-14651](https://insights.sbomify.com/CVE-2017-14651/): Cross-site scripting in wso2:api manager (medium 4.8)
- [CVE-2017-14650](https://insights.sbomify.com/CVE-2017-14650/): Command injection in horde:horde image api (high 8.1)
- [CVE-2017-1465](https://insights.sbomify.com/CVE-2017-1465/): Other in TRIRIGA Application Platform (medium 5.4)
- [CVE-2017-14649](https://insights.sbomify.com/CVE-2017-14649/): Denial of service in graphicsmagick:graphicsmagick (medium 5.5)
- [CVE-2017-14648](https://insights.sbomify.com/CVE-2017-14648/): Memory corruption in bladeenc:bladeenc (critical 9.8)
- [CVE-2017-14647](https://insights.sbomify.com/CVE-2017-14647/): Memory corruption in bento4:bento4 (high 8.8)
- [CVE-2017-14646](https://insights.sbomify.com/CVE-2017-14646/): Memory corruption in axiosys:bento4 (high 7.5)
- [CVE-2017-14645](https://insights.sbomify.com/CVE-2017-14645/): Memory corruption in bento4:bento4 (medium 6.5)
- [CVE-2017-14644](https://insights.sbomify.com/CVE-2017-14644/): Memory corruption in bento4:bento4 (high 8.8)
- [CVE-2017-14643](https://insights.sbomify.com/CVE-2017-14643/): Memory corruption in bento4:bento4 (medium 6.5)
- [CVE-2017-14642](https://insights.sbomify.com/CVE-2017-14642/): Null dereference in bento4:bento4 (medium 6.5)
- [CVE-2017-14641](https://insights.sbomify.com/CVE-2017-14641/): Null dereference in bento4:bento4 (medium 6.5)
- [CVE-2017-14640](https://insights.sbomify.com/CVE-2017-14640/): Null dereference in bento4:bento4 (medium 6.5)
- [CVE-2017-14639](https://insights.sbomify.com/CVE-2017-14639/): Memory corruption in bento4:bento4 (high 8.8)
- [CVE-2017-14638](https://insights.sbomify.com/CVE-2017-14638/): Null dereference in bento4:bento4 (medium 6.5)
- [CVE-2017-14637](https://insights.sbomify.com/CVE-2017-14637/): Memory corruption in sam2p project:sam2p (critical 9.8)
- [CVE-2017-14636](https://insights.sbomify.com/CVE-2017-14636/): Integer overflow in sam2p project:sam2p (critical 9.8)
- [CVE-2017-14635](https://insights.sbomify.com/CVE-2017-14635/): Code injection in otrs:otrs (high 8.8)
- [CVE-2017-14634](https://insights.sbomify.com/CVE-2017-14634/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2017-14633](https://insights.sbomify.com/CVE-2017-14633/): Memory corruption in canonical:ubuntu linux (medium 6.5)
- [CVE-2017-14632](https://insights.sbomify.com/CVE-2017-14632/): Memory corruption in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-14631](https://insights.sbomify.com/CVE-2017-14631/): Integer overflow in sam2p project:sam2p (critical 9.8)
- [CVE-2017-14630](https://insights.sbomify.com/CVE-2017-14630/): Integer overflow in sam2p project:sam2p (critical 9.8)
- [CVE-2017-14629](https://insights.sbomify.com/CVE-2017-14629/): Integer overflow in sam2p project:sam2p (high 7.5)
- [CVE-2017-14628](https://insights.sbomify.com/CVE-2017-14628/): Memory corruption in sam2p project:sam2p (critical 9.8)
- [CVE-2017-14627](https://insights.sbomify.com/CVE-2017-14627/): Memory corruption in cyberlink:labelprint (high 7.8)
- [CVE-2017-14626](https://insights.sbomify.com/CVE-2017-14626/): Null dereference in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-14625](https://insights.sbomify.com/CVE-2017-14625/): Null dereference in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-14624](https://insights.sbomify.com/CVE-2017-14624/): Null dereference in canonical:ubuntu linux (critical 9.8)
- [CVE-2017-14623](https://insights.sbomify.com/CVE-2017-14623/): Access Restriction Bypass in go-ldap (high 8.1)
- [CVE-2017-14622](https://insights.sbomify.com/CVE-2017-14622/): Cross-site scripting in 2kblater:2kb amazon affiliates store (medium 6.1)
- [CVE-2017-14621](https://insights.sbomify.com/CVE-2017-14621/): Cross-site scripting in suse:portus (medium 5.4)
- [CVE-2017-14620](https://insights.sbomify.com/CVE-2017-14620/): Cross-site scripting in smartertools:smarterstats (medium 6.1)
- [CVE-2017-1462](https://insights.sbomify.com/CVE-2017-1462/): Cross-site scripting in Rational Rhapsody Design Manager (medium 5.4)
- [CVE-2017-14619](https://insights.sbomify.com/CVE-2017-14619/): Cross-site scripting in phpmyfaq:phpmyfaq (medium 6.1)
- [CVE-2017-14618](https://insights.sbomify.com/CVE-2017-14618/): Cross-site scripting in phpmyfaq:phpmyfaq (medium 4.8)
- [CVE-2017-14617](https://insights.sbomify.com/CVE-2017-14617/): Denial of service in freedesktop:poppler (high 7.8)
- [CVE-2017-14616](https://insights.sbomify.com/CVE-2017-14616/): Denial of service in watchguard:fireware (high 7.5)
- [CVE-2017-14615](https://insights.sbomify.com/CVE-2017-14615/): Cross-site scripting in watchguard:fireware (medium 6.1)
- [CVE-2017-14614](https://insights.sbomify.com/CVE-2017-14614/): Path traversal in gridgain:gridgain (medium 6.5)
- [CVE-2017-14612](https://insights.sbomify.com/CVE-2017-14612/): Security feature bypass in shpock:shpock (medium 5.9)
- [CVE-2017-14611](https://insights.sbomify.com/CVE-2017-14611/): Server-side request forgery in agentejo:cockpit (critical 9.1)
- [CVE-2017-14610](https://insights.sbomify.com/CVE-2017-14610/): Privilege escalation in bareos:bareos (high 7.8)
- [CVE-2017-1461](https://insights.sbomify.com/CVE-2017-1461/): Cross-site scripting in Rational DOORS Next Generation (medium 5.4)
- [CVE-2017-14609](https://insights.sbomify.com/CVE-2017-14609/): Privilege escalation in kannel:kannel (high 7.8)
- [CVE-2017-14608](https://insights.sbomify.com/CVE-2017-14608/): Memory corruption in libraw:libraw (critical 9.1)
- [CVE-2017-14607](https://insights.sbomify.com/CVE-2017-14607/): Memory corruption in canonical:ubuntu linux (high 8.1)
- [CVE-2017-14604](https://insights.sbomify.com/CVE-2017-14604/): Security feature bypass in debian:debian linux (medium 6.5)
- [CVE-2017-14603](https://insights.sbomify.com/CVE-2017-14603/): Information disclosure in digium:asterisk (high 7.5)
- [CVE-2017-14602](https://insights.sbomify.com/CVE-2017-14602/): Auth bypass in citrix:application delivery controller firmware (high 7.2)
- [CVE-2017-14601](https://insights.sbomify.com/CVE-2017-14601/): SQL injection in pragyan cms project:pragyan cms (medium 4.9)
- [CVE-2017-14600](https://insights.sbomify.com/CVE-2017-14600/): SQL injection in pragyan cms project:pragyan cms (medium 4.9)
- [CVE-2017-1460](https://insights.sbomify.com/CVE-2017-1460/): Other in i (high 7.5)
- [CVE-2017-14597](https://insights.sbomify.com/CVE-2017-14597/): Cross-site scripting in afterlogic:aurora (medium 4.8)
- [CVE-2017-14596](https://insights.sbomify.com/CVE-2017-14596/): Information disclosure in joomla:joomla\! (critical 9.8)
- [CVE-2017-14595](https://insights.sbomify.com/CVE-2017-14595/): Information disclosure in joomla:joomla\! (low 3.7)
- [CVE-2017-14594](https://insights.sbomify.com/CVE-2017-14594/): Cross-site scripting in Jira (medium 6.1)
- [CVE-2017-14593](https://insights.sbomify.com/CVE-2017-14593/): Command injection in Sourcetree for Windows (high 8.8)
- [CVE-2017-14592](https://insights.sbomify.com/CVE-2017-14592/): Command injection in Sourcetree for macOS (high 8.8)
- [CVE-2017-14591](https://insights.sbomify.com/CVE-2017-14591/): Command injection in Fisheye and Crucible (critical 9.0)
- [CVE-2017-14590](https://insights.sbomify.com/CVE-2017-14590/): Command injection in Bamboo (critical 9.1)
- [CVE-2017-1459](https://insights.sbomify.com/CVE-2017-1459/): Misconfiguration in Security Access Manager (medium 4.2)
- [CVE-2017-14589](https://insights.sbomify.com/CVE-2017-14589/): Code injection in Bamboo (critical 9.6)
- [CVE-2017-14588](https://insights.sbomify.com/CVE-2017-14588/): Cross-site scripting in Atlassian Fisheye and Crucible (medium 6.1)
- [CVE-2017-14587](https://insights.sbomify.com/CVE-2017-14587/): Cross-site scripting in Atlassian Fisheye and Crucible (medium 5.4)
- [CVE-2017-14586](https://insights.sbomify.com/CVE-2017-14586/): Memory corruption in Hipchat for Mac desktop client (critical 9.8)
- [CVE-2017-14585](https://insights.sbomify.com/CVE-2017-14585/): Server-side request forgery in Hipchat Data Center (high 7.2)
- [CVE-2017-14583](https://insights.sbomify.com/CVE-2017-14583/): Denial of service in netapp:clustered data ontap (medium 6.5)
- [CVE-2017-14582](https://insights.sbomify.com/CVE-2017-14582/): Security feature bypass in zohocorp:site24x7 mobile network poller (medium 5.9)
- [CVE-2017-14581](https://insights.sbomify.com/CVE-2017-14581/): Denial of service in sap:netweaver application server java (high 7.5)
- [CVE-2017-14580](https://insights.sbomify.com/CVE-2017-14580/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2017-1458](https://insights.sbomify.com/CVE-2017-1458/): XML external entity in QRadar Network Security (high 8.1)
- [CVE-2017-14579](https://insights.sbomify.com/CVE-2017-14579/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14578](https://insights.sbomify.com/CVE-2017-14578/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2017-14577](https://insights.sbomify.com/CVE-2017-14577/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14576](https://insights.sbomify.com/CVE-2017-14576/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14575](https://insights.sbomify.com/CVE-2017-14575/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14574](https://insights.sbomify.com/CVE-2017-14574/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14573](https://insights.sbomify.com/CVE-2017-14573/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14572](https://insights.sbomify.com/CVE-2017-14572/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14571](https://insights.sbomify.com/CVE-2017-14571/): Memory corruption in stdutility:stdu viewer (high 7.8)
- [CVE-2017-14570](https://insights.sbomify.com/CVE-2017-14570/): Memory corruption in stdutility:stdu viewer (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/99/