# Vulnerabilities published in 2017


- [CVE-2017-11833](https://insights.sbomify.com/CVE-2017-11833/): Information disclosure in Microsoft Edge (low 3.1)
- [CVE-2017-11832](https://insights.sbomify.com/CVE-2017-11832/): Information disclosure in Microsoft Graphics Component (medium 4.7)
- [CVE-2017-11831](https://insights.sbomify.com/CVE-2017-11831/): Information disclosure in Windows kernel (medium 4.7)
- [CVE-2017-11830](https://insights.sbomify.com/CVE-2017-11830/): Security feature bypass in Device Guard (medium 5.3)
- [CVE-2017-1183](https://insights.sbomify.com/CVE-2017-1183/): SQL injection in Tivoli Monitoring V6 (high 7.5)
- [CVE-2017-11829](https://insights.sbomify.com/CVE-2017-11829/): Privilege escalation in Microsoft Windows 10 (medium 5.5)
- [CVE-2017-11827](https://insights.sbomify.com/CVE-2017-11827/): Memory corruption in Internet Explorer, Microsoft Edge (high 7.5)
- [CVE-2017-11826](https://insights.sbomify.com/CVE-2017-11826/): Microsoft Office Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2017-11825](https://insights.sbomify.com/CVE-2017-11825/): Memory corruption in Microsoft Office 2016, Microsoft Office 2016 for Mac (high 7.8)
- [CVE-2017-11824](https://insights.sbomify.com/CVE-2017-11824/): Privilege escalation in Microsoft Graphics Component (high 7.0)
- [CVE-2017-11823](https://insights.sbomify.com/CVE-2017-11823/): Security feature bypass in Device Guard (medium 6.7)
- [CVE-2017-11822](https://insights.sbomify.com/CVE-2017-11822/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-11821](https://insights.sbomify.com/CVE-2017-11821/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2017-11820](https://insights.sbomify.com/CVE-2017-11820/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2017-1182](https://insights.sbomify.com/CVE-2017-1182/): Command injection in Tivoli Monitoring V6 (high 7.5)
- [CVE-2017-11819](https://insights.sbomify.com/CVE-2017-11819/): Memory corruption in Microsoft Windows 7 SP1 (high 7.5)
- [CVE-2017-11818](https://insights.sbomify.com/CVE-2017-11818/): Security feature bypass in Microsoft Windows Storage (medium 4.5)
- [CVE-2017-11817](https://insights.sbomify.com/CVE-2017-11817/): Information disclosure in Windows Kernel (medium 4.7)
- [CVE-2017-11816](https://insights.sbomify.com/CVE-2017-11816/): Information disclosure in Microsoft Windows Graphics Device Interface (GDI) (medium 5.5)
- [CVE-2017-11815](https://insights.sbomify.com/CVE-2017-11815/): Information disclosure in Server Block Message (SMB) (medium 5.3)
- [CVE-2017-11814](https://insights.sbomify.com/CVE-2017-11814/): Information disclosure in Windows Kernel (medium 5.5)
- [CVE-2017-11813](https://insights.sbomify.com/CVE-2017-11813/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-11812](https://insights.sbomify.com/CVE-2017-11812/): Memory corruption in ChakraCore, Microsoft Edge (high 7.5)
- [CVE-2017-11811](https://insights.sbomify.com/CVE-2017-11811/): Memory corruption in microsoft:chakracore (high 7.5)
- [CVE-2017-11810](https://insights.sbomify.com/CVE-2017-11810/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-1181](https://insights.sbomify.com/CVE-2017-1181/): Weak cryptography in Tivoli Monitoring V6 (high 7.0)
- [CVE-2017-11809](https://insights.sbomify.com/CVE-2017-11809/): Memory corruption in ChakraCore, Microsoft Edge (high 7.5)
- [CVE-2017-11808](https://insights.sbomify.com/CVE-2017-11808/): Memory corruption in ChakraCore, Microsoft Edge (high 7.5)
- [CVE-2017-11807](https://insights.sbomify.com/CVE-2017-11807/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2017-11806](https://insights.sbomify.com/CVE-2017-11806/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2017-11805](https://insights.sbomify.com/CVE-2017-11805/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2017-11804](https://insights.sbomify.com/CVE-2017-11804/): Memory corruption in ChakraCore, Microsoft Edge (high 7.5)
- [CVE-2017-11803](https://insights.sbomify.com/CVE-2017-11803/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2017-11802](https://insights.sbomify.com/CVE-2017-11802/): Memory corruption in ChakraCore, Microsoft Edge (high 7.5)
- [CVE-2017-11801](https://insights.sbomify.com/CVE-2017-11801/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2017-11800](https://insights.sbomify.com/CVE-2017-11800/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-1180](https://insights.sbomify.com/CVE-2017-1180/): Missing authorization in TRIRIGA Application Platform (medium 5.3)
- [CVE-2017-11799](https://insights.sbomify.com/CVE-2017-11799/): Memory corruption in ChakraCore, Microsoft Edge (high 7.5)
- [CVE-2017-11798](https://insights.sbomify.com/CVE-2017-11798/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-11797](https://insights.sbomify.com/CVE-2017-11797/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2017-11796](https://insights.sbomify.com/CVE-2017-11796/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2017-11794](https://insights.sbomify.com/CVE-2017-11794/): Information disclosure in Microsoft Edge (medium 4.3)
- [CVE-2017-11793](https://insights.sbomify.com/CVE-2017-11793/): Memory corruption in Internet Explorer (high 7.5)
- [CVE-2017-11792](https://insights.sbomify.com/CVE-2017-11792/): ChakraCore RCE Vulnerability (high 7.5)
- [CVE-2017-11791](https://insights.sbomify.com/CVE-2017-11791/): Information disclosure in ChakraCore, Microsoft Edge, Internet Explorer (low 3.1)
- [CVE-2017-11790](https://insights.sbomify.com/CVE-2017-11790/): Information disclosure in Internet Explorer (medium 4.3)
- [CVE-2017-1179](https://insights.sbomify.com/CVE-2017-1179/): Weak cryptography in BigFix Compliance Analytics (medium 5.9)
- [CVE-2017-11788](https://insights.sbomify.com/CVE-2017-11788/): Denial of service in Windows search (high 7.5)
- [CVE-2017-11786](https://insights.sbomify.com/CVE-2017-11786/): Auth bypass in Skype for Business (high 8.8)
- [CVE-2017-11785](https://insights.sbomify.com/CVE-2017-11785/): Information disclosure in Windows Kernel (medium 5.5)
- [CVE-2017-11784](https://insights.sbomify.com/CVE-2017-11784/): Information disclosure in Windows Kernel (medium 5.5)
- [CVE-2017-11783](https://insights.sbomify.com/CVE-2017-11783/): Privilege escalation in Windows (high 7.0)
- [CVE-2017-11782](https://insights.sbomify.com/CVE-2017-11782/): Privilege escalation in Server Block Message (SMB) (high 7.8)
- [CVE-2017-11781](https://insights.sbomify.com/CVE-2017-11781/): Denial of service in Server Block Message (SMB) (high 7.5)
- [CVE-2017-11780](https://insights.sbomify.com/CVE-2017-11780/): Other in Server Message Block 1.0 (SMBv1) (high 7.0)
- [CVE-2017-1178](https://insights.sbomify.com/CVE-2017-1178/): Cross-site scripting in Endpoint Manager for Security and Compliance (medium 6.1)
- [CVE-2017-11779](https://insights.sbomify.com/CVE-2017-11779/): Memory corruption in Windows Domain Name System (DNS) (high 8.1)
- [CVE-2017-11777](https://insights.sbomify.com/CVE-2017-11777/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2017-11776](https://insights.sbomify.com/CVE-2017-11776/): Information disclosure in Microsoft Outlook (high 7.5)
- [CVE-2017-11775](https://insights.sbomify.com/CVE-2017-11775/): Cross-site scripting in Microsoft SharePoint Enterprise Server (medium 5.4)
- [CVE-2017-11774](https://insights.sbomify.com/CVE-2017-11774/): Microsoft Office Outlook Security Feature Bypass (high 7.8, exploited in the wild)
- [CVE-2017-11772](https://insights.sbomify.com/CVE-2017-11772/): Information disclosure in Windows Search (high 7.5)
- [CVE-2017-11771](https://insights.sbomify.com/CVE-2017-11771/): Memory corruption in Windows Search (critical 9.8)
- [CVE-2017-11770](https://insights.sbomify.com/CVE-2017-11770/): Improper Certificate Validation (high 7.5)
- [CVE-2017-1177](https://insights.sbomify.com/CVE-2017-1177/): Information disclosure in BigFix Compliance (medium 5.3)
- [CVE-2017-11769](https://insights.sbomify.com/CVE-2017-11769/): Code injection in Microsoft Windows TRIE (high 7.8)
- [CVE-2017-11768](https://insights.sbomify.com/CVE-2017-11768/): Information disclosure in Windows Media Player (low 2.5)
- [CVE-2017-11767](https://insights.sbomify.com/CVE-2017-11767/): ChakraCore vulnerable to privilege escalation (critical 9.8)
- [CVE-2017-11766](https://insights.sbomify.com/CVE-2017-11766/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-11765](https://insights.sbomify.com/CVE-2017-11765/): Information disclosure in Windows Kernel (medium 5.5)
- [CVE-2017-11764](https://insights.sbomify.com/CVE-2017-11764/): Memory corruption in Microsoft Edge (high 7.5)
- [CVE-2017-11763](https://insights.sbomify.com/CVE-2017-11763/): Memory corruption in Microsoft Graphics Component (high 8.8)
- [CVE-2017-11762](https://insights.sbomify.com/CVE-2017-11762/): Memory corruption in Microsoft Graphics Component (high 8.8)
- [CVE-2017-11761](https://insights.sbomify.com/CVE-2017-11761/): Information disclosure in Microsoft Exchange Server (medium 5.3)
- [CVE-2017-11760](https://insights.sbomify.com/CVE-2017-11760/): File upload in projeqtor:projeqtor (high 8.8)
- [CVE-2017-1176](https://insights.sbomify.com/CVE-2017-1176/): Information disclosure in Maximo Asset Management (low 3.3)
- [CVE-2017-11757](https://insights.sbomify.com/CVE-2017-11757/): Integer overflow in actian:pervasive psql (critical 9.8)
- [CVE-2017-11756](https://insights.sbomify.com/CVE-2017-11756/): File upload in earcms:ear music (high 7.0)
- [CVE-2017-11755](https://insights.sbomify.com/CVE-2017-11755/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11754](https://insights.sbomify.com/CVE-2017-11754/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11753](https://insights.sbomify.com/CVE-2017-11753/): Memory corruption in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11752](https://insights.sbomify.com/CVE-2017-11752/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11751](https://insights.sbomify.com/CVE-2017-11751/): Denial of service in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-11750](https://insights.sbomify.com/CVE-2017-11750/): Null dereference in imagemagick:imagemagick (medium 6.5)
- [CVE-2017-1175](https://insights.sbomify.com/CVE-2017-1175/): SQL injection in Maximo Asset Management (critical 9.8)
- [CVE-2017-11749](https://insights.sbomify.com/CVE-2017-11749/): Other in internet-soft:ftp commander (high 7.8)
- [CVE-2017-11748](https://insights.sbomify.com/CVE-2017-11748/): Other in softonic:spider player (high 7.8)
- [CVE-2017-11747](https://insights.sbomify.com/CVE-2017-11747/): Privilege escalation in tinyproxy project:tinyproxy (medium 5.5)
- [CVE-2017-11746](https://insights.sbomify.com/CVE-2017-11746/): Privilege escalation in inversepath:tenshi (high 7.5)
- [CVE-2017-11744](https://insights.sbomify.com/CVE-2017-11744/): Cross-site scripting in modx:modx revolution (medium 6.1)
- [CVE-2017-11743](https://insights.sbomify.com/CVE-2017-11743/): Hardcoded credentials in medhost:connex (critical 9.8)
- [CVE-2017-11742](https://insights.sbomify.com/CVE-2017-11742/): Privilege escalation in libexpat project:libexpat (high 7.8)
- [CVE-2017-11741](https://insights.sbomify.com/CVE-2017-11741/): Misconfiguration in hashicorp:vagrant vmware fusion (high 8.8)
- [CVE-2017-11740](https://insights.sbomify.com/CVE-2017-11740/): File upload in zohocorp:manageengine applications manager (high 8.8)
- [CVE-2017-1174](https://insights.sbomify.com/CVE-2017-1174/): SQL injection in Sterling B2B Integrator (high 8.8)
- [CVE-2017-11739](https://insights.sbomify.com/CVE-2017-11739/): Cross-site scripting in zohocorp:manageengine applications manager (medium 6.1)
- [CVE-2017-11738](https://insights.sbomify.com/CVE-2017-11738/): SQL injection in zohocorp:manageengine applications manager (high 8.1)
- [CVE-2017-11737](https://insights.sbomify.com/CVE-2017-11737/): Cross-site scripting in rspamd project:rspamd (medium 6.1)
- [CVE-2017-11736](https://insights.sbomify.com/CVE-2017-11736/): SQL injection in bigtreecms:bigtree cms (high 8.8)
- [CVE-2017-11734](https://insights.sbomify.com/CVE-2017-11734/): Memory corruption in libming:ming (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/121/