# Vulnerabilities published in 2017


- [CVE-2017-8895](https://insights.sbomify.com/CVE-2017-8895/): Use after free in n/a (critical 9.8)
- [CVE-2017-8894](https://insights.sbomify.com/CVE-2017-8894/): Other in n/a (high 8.1)
- [CVE-2017-8893](https://insights.sbomify.com/CVE-2017-8893/): Memory corruption in n/a (high 7.5)
- [CVE-2017-8892](https://insights.sbomify.com/CVE-2017-8892/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-8891](https://insights.sbomify.com/CVE-2017-8891/): Denial of service in n/a (medium 5.5)
- [CVE-2017-8890](https://insights.sbomify.com/CVE-2017-8890/): Use after free in n/a (high 7.8)
- [CVE-2017-8879](https://insights.sbomify.com/CVE-2017-8879/): Dolibarr allows password changes without supplying the current password (medium 6.8)
- [CVE-2017-8878](https://insights.sbomify.com/CVE-2017-8878/): Information disclosure in n/a (medium 6.5)
- [CVE-2017-8877](https://insights.sbomify.com/CVE-2017-8877/): Information disclosure in n/a (medium 6.5)
- [CVE-2017-8876](https://insights.sbomify.com/CVE-2017-8876/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-8875](https://insights.sbomify.com/CVE-2017-8875/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2017-8874](https://insights.sbomify.com/CVE-2017-8874/): Mautic Cross-Site Request Forgery (CSRF) (high 8.8)
- [CVE-2017-8872](https://insights.sbomify.com/CVE-2017-8872/): Information disclosure in n/a (critical 9.1)
- [CVE-2017-8871](https://insights.sbomify.com/CVE-2017-8871/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8870](https://insights.sbomify.com/CVE-2017-8870/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8869](https://insights.sbomify.com/CVE-2017-8869/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8868](https://insights.sbomify.com/CVE-2017-8868/): Path traversal in n/a (high 7.5)
- [CVE-2017-8867](https://insights.sbomify.com/CVE-2017-8867/): Weak cryptography in n/a (medium 5.9)
- [CVE-2017-8866](https://insights.sbomify.com/CVE-2017-8866/): Hardcoded credentials in n/a (medium 5.9)
- [CVE-2017-8865](https://insights.sbomify.com/CVE-2017-8865/): Other in n/a (medium 5.9)
- [CVE-2017-8864](https://insights.sbomify.com/CVE-2017-8864/): Security feature bypass in n/a (critical 9.8)
- [CVE-2017-8863](https://insights.sbomify.com/CVE-2017-8863/): Information disclosure in n/a (high 7.5)
- [CVE-2017-8862](https://insights.sbomify.com/CVE-2017-8862/): File upload in n/a (critical 9.8)
- [CVE-2017-8861](https://insights.sbomify.com/CVE-2017-8861/): Missing authorization in n/a (critical 9.8)
- [CVE-2017-8860](https://insights.sbomify.com/CVE-2017-8860/): Information disclosure in n/a (medium 6.5)
- [CVE-2017-8859](https://insights.sbomify.com/CVE-2017-8859/): Command injection in n/a (critical 9.8)
- [CVE-2017-8858](https://insights.sbomify.com/CVE-2017-8858/): Path traversal in n/a (critical 9.8)
- [CVE-2017-8857](https://insights.sbomify.com/CVE-2017-8857/): Command injection in n/a (critical 9.8)
- [CVE-2017-8856](https://insights.sbomify.com/CVE-2017-8856/): Command injection in n/a (critical 9.8)
- [CVE-2017-8855](https://insights.sbomify.com/CVE-2017-8855/): Other in n/a (high 7.5)
- [CVE-2017-8854](https://insights.sbomify.com/CVE-2017-8854/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8853](https://insights.sbomify.com/CVE-2017-8853/): Path traversal in n/a (high 7.5)
- [CVE-2017-8852](https://insights.sbomify.com/CVE-2017-8852/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8851](https://insights.sbomify.com/CVE-2017-8851/): Security feature bypass in n/a (medium 5.9)
- [CVE-2017-8850](https://insights.sbomify.com/CVE-2017-8850/): Security feature bypass in n/a (medium 5.9)
- [CVE-2017-8849](https://insights.sbomify.com/CVE-2017-8849/): Privilege escalation in n/a (high 7.8)
- [CVE-2017-8848](https://insights.sbomify.com/CVE-2017-8848/): Cross-site request forgery in n/a (medium 6.5)
- [CVE-2017-8847](https://insights.sbomify.com/CVE-2017-8847/): Null dereference in n/a (medium 5.5)
- [CVE-2017-8846](https://insights.sbomify.com/CVE-2017-8846/): Use after free in n/a (medium 5.5)
- [CVE-2017-8845](https://insights.sbomify.com/CVE-2017-8845/): Denial of service in n/a (medium 5.5)
- [CVE-2017-8844](https://insights.sbomify.com/CVE-2017-8844/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8843](https://insights.sbomify.com/CVE-2017-8843/): Null dereference in n/a (medium 5.5)
- [CVE-2017-8842](https://insights.sbomify.com/CVE-2017-8842/): Denial of service in n/a (medium 5.5)
- [CVE-2017-8841](https://insights.sbomify.com/CVE-2017-8841/): Path traversal in n/a (high 8.1)
- [CVE-2017-8840](https://insights.sbomify.com/CVE-2017-8840/): Information disclosure in n/a (medium 5.3)
- [CVE-2017-8839](https://insights.sbomify.com/CVE-2017-8839/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-8838](https://insights.sbomify.com/CVE-2017-8838/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-8837](https://insights.sbomify.com/CVE-2017-8837/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2017-8836](https://insights.sbomify.com/CVE-2017-8836/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-8835](https://insights.sbomify.com/CVE-2017-8835/): SQL injection in n/a (critical 9.8)
- [CVE-2017-8834](https://insights.sbomify.com/CVE-2017-8834/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8833](https://insights.sbomify.com/CVE-2017-8833/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-8832](https://insights.sbomify.com/CVE-2017-8832/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-8831](https://insights.sbomify.com/CVE-2017-8831/): Race condition in n/a (medium 6.4)
- [CVE-2017-8830](https://insights.sbomify.com/CVE-2017-8830/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8829](https://insights.sbomify.com/CVE-2017-8829/): Deserialization in n/a (high 7.8)
- [CVE-2017-8827](https://insights.sbomify.com/CVE-2017-8827/): GeniXCMS Arbitrary User Password Reset Vulnerability (critical 9.1)
- [CVE-2017-8826](https://insights.sbomify.com/CVE-2017-8826/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8825](https://insights.sbomify.com/CVE-2017-8825/): Null dereference in n/a (high 7.5)
- [CVE-2017-8824](https://insights.sbomify.com/CVE-2017-8824/): Use after free in Linux kernel through 4.14.3 (high 7.8)
- [CVE-2017-8823](https://insights.sbomify.com/CVE-2017-8823/): Use after free in Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9 (high 8.1)
- [CVE-2017-8822](https://insights.sbomify.com/CVE-2017-8822/): Other in Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9 (low 3.7)
- [CVE-2017-8821](https://insights.sbomify.com/CVE-2017-8821/): Denial of service in Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9 (high 7.5)
- [CVE-2017-8820](https://insights.sbomify.com/CVE-2017-8820/): Null dereference in Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9 (high 7.5)
- [CVE-2017-8819](https://insights.sbomify.com/CVE-2017-8819/): Denial of service in Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9 (high 7.5)
- [CVE-2017-8818](https://insights.sbomify.com/CVE-2017-8818/): Memory corruption in curl and libcurl before 7.57.0 (critical 9.8)
- [CVE-2017-8817](https://insights.sbomify.com/CVE-2017-8817/): Denial of service in curl and libcurl before 7.57.0 (critical 9.8)
- [CVE-2017-8816](https://insights.sbomify.com/CVE-2017-8816/): Integer overflow in curl and libcurl before 7.57.0 (critical 9.8)
- [CVE-2017-8815](https://insights.sbomify.com/CVE-2017-8815/): Cross-site scripting in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 (high 7.5)
- [CVE-2017-8814](https://insights.sbomify.com/CVE-2017-8814/): Cross-site scripting in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 (high 7.5)
- [CVE-2017-8812](https://insights.sbomify.com/CVE-2017-8812/): Cross-site scripting in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 (medium 5.3)
- [CVE-2017-8811](https://insights.sbomify.com/CVE-2017-8811/): Cross-site scripting in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 (medium 6.1)
- [CVE-2017-8810](https://insights.sbomify.com/CVE-2017-8810/): Information disclosure in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 (high 7.5)
- [CVE-2017-8809](https://insights.sbomify.com/CVE-2017-8809/): Other in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 (critical 9.8)
- [CVE-2017-8808](https://insights.sbomify.com/CVE-2017-8808/): Cross-site scripting in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 (medium 6.1)
- [CVE-2017-8807](https://insights.sbomify.com/CVE-2017-8807/): Information disclosure in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 (critical 9.1)
- [CVE-2017-8806](https://insights.sbomify.com/CVE-2017-8806/): Path traversal in PostgreSQL-related scripts that are specific to Debian and Ubuntu (medium 5.5)
- [CVE-2017-8805](https://insights.sbomify.com/CVE-2017-8805/): Path traversal in Debian ftpsync before 20171017 (critical 9.1)
- [CVE-2017-8804](https://insights.sbomify.com/CVE-2017-8804/): Denial of service in n/a (high 7.5)
- [CVE-2017-8803](https://insights.sbomify.com/CVE-2017-8803/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8802](https://insights.sbomify.com/CVE-2017-8802/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-8801](https://insights.sbomify.com/CVE-2017-8801/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-8799](https://insights.sbomify.com/CVE-2017-8799/): Command injection in n/a (critical 9.8)
- [CVE-2017-8798](https://insights.sbomify.com/CVE-2017-8798/): Integer overflow in n/a (critical 9.8)
- [CVE-2017-8797](https://insights.sbomify.com/CVE-2017-8797/): Null dereference in n/a (high 7.5)
- [CVE-2017-8796](https://insights.sbomify.com/CVE-2017-8796/): SQL injection in n/a (critical 9.8)
- [CVE-2017-8795](https://insights.sbomify.com/CVE-2017-8795/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-8794](https://insights.sbomify.com/CVE-2017-8794/): Server-side request forgery in n/a (critical 10.0)
- [CVE-2017-8793](https://insights.sbomify.com/CVE-2017-8793/): Security feature bypass in n/a (high 8.8)
- [CVE-2017-8792](https://insights.sbomify.com/CVE-2017-8792/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-8791](https://insights.sbomify.com/CVE-2017-8791/): Other in n/a (medium 6.1)
- [CVE-2017-8790](https://insights.sbomify.com/CVE-2017-8790/): Other in n/a (critical 9.8)
- [CVE-2017-8789](https://insights.sbomify.com/CVE-2017-8789/): SQL injection in n/a (critical 9.8)
- [CVE-2017-8788](https://insights.sbomify.com/CVE-2017-8788/): Other in n/a (medium 6.1)
- [CVE-2017-8787](https://insights.sbomify.com/CVE-2017-8787/): Memory corruption in n/a (high 8.8)
- [CVE-2017-8786](https://insights.sbomify.com/CVE-2017-8786/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-8785](https://insights.sbomify.com/CVE-2017-8785/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8783](https://insights.sbomify.com/CVE-2017-8783/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-8782](https://insights.sbomify.com/CVE-2017-8782/): Integer overflow in n/a (medium 6.5)
- [CVE-2017-8781](https://insights.sbomify.com/CVE-2017-8781/): Memory corruption in n/a (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/11/