# Vulnerabilities published in 2017 - [CVE-2017-1000023](https://insights.sbomify.com/CVE-2017-1000023/): Cross-site scripting in logicaldoc:logicaldoc (medium 5.4) - [CVE-2017-1000022](https://insights.sbomify.com/CVE-2017-1000022/): Privilege escalation in logicaldoc:logicaldoc (high 8.8) - [CVE-2017-1000021](https://insights.sbomify.com/CVE-2017-1000021/): XML external entity in logicaldoc:logicaldoc (high 8.8) - [CVE-2017-1000020](https://insights.sbomify.com/CVE-2017-1000020/): Auth bypass in ecos:embedded web servers (critical 9.8) - [CVE-2017-1000018](https://insights.sbomify.com/CVE-2017-1000018/): phpMyAdmin DoS Vulnerability (high 7.5) - [CVE-2017-1000017](https://insights.sbomify.com/CVE-2017-1000017/): phpMyAdmin SSRF in replication (high 8.8) - [CVE-2017-1000016](https://insights.sbomify.com/CVE-2017-1000016/): phpMyAdmin Cookie attribute injection attack (high 7.5) - [CVE-2017-1000015](https://insights.sbomify.com/CVE-2017-1000015/): phpMyAdmin CSS Injection Vulnerability (medium 6.1) - [CVE-2017-1000014](https://insights.sbomify.com/CVE-2017-1000014/): phpMyAdmin DoS Vulnerability (high 7.5) - [CVE-2017-1000013](https://insights.sbomify.com/CVE-2017-1000013/): phpMyAdmin Open Redirect (medium 6.1) - [CVE-2017-1000012](https://insights.sbomify.com/CVE-2017-1000012/): Cross-site scripting in mysqldumper:mysqldumper (medium 6.1) - [CVE-2017-1000011](https://insights.sbomify.com/CVE-2017-1000011/): Cross-site scripting in mywebsql:mywebsql (medium 6.1) - [CVE-2017-1000010](https://insights.sbomify.com/CVE-2017-1000010/): Other in audacityteam:audacity (high 7.8) - [CVE-2017-1000009](https://insights.sbomify.com/CVE-2017-1000009/): Akeneo PIM vulnerable to shell injection in the mass edition (critical 9.8) - [CVE-2017-1000008](https://insights.sbomify.com/CVE-2017-1000008/): Cross-site request forgery in chyrp-lite project:chyrp lite (high 8.8) - [CVE-2017-1000007](https://insights.sbomify.com/CVE-2017-1000007/): txAWS AWSServiceEndpoint defaults to not verifying server certificates (medium 5.9) - [CVE-2017-1000006](https://insights.sbomify.com/CVE-2017-1000006/): Cross Site Scripting (XSS) in plotly.js (medium 6.1) - [CVE-2017-1000005](https://insights.sbomify.com/CVE-2017-1000005/): Cross-site scripting in phpminiadmin project:phpminiadmin (medium 6.1) - [CVE-2017-1000004](https://insights.sbomify.com/CVE-2017-1000004/): SQL injection in atutor:atutor (critical 9.8) - [CVE-2017-1000003](https://insights.sbomify.com/CVE-2017-1000003/): Privilege escalation in atutor:atutor (critical 9.8) - [CVE-2017-1000002](https://insights.sbomify.com/CVE-2017-1000002/): Path traversal in atutor:atutor (critical 9.8) - [CVE-2017-1000001](https://insights.sbomify.com/CVE-2017-1000001/): FedMsg not properly completing message validation (high 7.5) - [CVE-2017-10000](https://insights.sbomify.com/CVE-2017-10000/): Denial of service in Hospitality Reporting and Analytics (high 7.7) - [CVE-2017-0938](https://insights.sbomify.com/CVE-2017-0938/): Denial of service in airMAX, EdgeMAX (high 7.5) - [CVE-2017-0936](https://insights.sbomify.com/CVE-2017-0936/): Missing authorization in Nextcloud Server (medium 5.7) - [CVE-2017-0935](https://insights.sbomify.com/CVE-2017-0935/): Privilege escalation in EdgeRouter X (high 8.8) - [CVE-2017-0934](https://insights.sbomify.com/CVE-2017-0934/): Privilege escalation in EdgeRouter X (high 8.8) - [CVE-2017-0933](https://insights.sbomify.com/CVE-2017-0933/): Cross-site request forgery in EdgeRouter X (high 8.0) - [CVE-2017-0932](https://insights.sbomify.com/CVE-2017-0932/): Privilege escalation in EdgeRouter X (high 8.8) - [CVE-2017-0931](https://insights.sbomify.com/CVE-2017-0931/): Cross-Site Scripting in html-janitor (medium 6.1) - [CVE-2017-0930](https://insights.sbomify.com/CVE-2017-0930/): Directory Traversal in augustine (medium 6.5) - [CVE-2017-0929](https://insights.sbomify.com/CVE-2017-0929/): High severity vulnerability that affects DotNetNuke.Core (high 7.5) - [CVE-2017-0928](https://insights.sbomify.com/CVE-2017-0928/): Bypassing Sanitization using DOM clobbering in html-janitor (medium 6.1) - [CVE-2017-0927](https://insights.sbomify.com/CVE-2017-0927/): Missing authorization in GitLab Community and Enterprise Editions (medium 6.5) - [CVE-2017-0926](https://insights.sbomify.com/CVE-2017-0926/): Auth bypass in GitLab Community and Enterprise Editions (high 8.8) - [CVE-2017-0925](https://insights.sbomify.com/CVE-2017-0925/): Information disclosure in GitLab Community and Enterprise Editions (high 7.2) - [CVE-2017-0924](https://insights.sbomify.com/CVE-2017-0924/): Cross-site scripting in GitLab Community and Enterprise Editions (medium 6.1) - [CVE-2017-0923](https://insights.sbomify.com/CVE-2017-0923/): Cross-site scripting in GitLab Community and Enterprise Editions (medium 6.1) - [CVE-2017-0922](https://insights.sbomify.com/CVE-2017-0922/): Missing authorization in GitLab Community and Enterprise Editions (high 7.5) - [CVE-2017-0921](https://insights.sbomify.com/CVE-2017-0921/): Auth bypass in gitlab:gitlab (high 8.1) - [CVE-2017-0920](https://insights.sbomify.com/CVE-2017-0920/): Missing authorization in GitLab Community and Enterprise Editions (medium 4.3) - [CVE-2017-0919](https://insights.sbomify.com/CVE-2017-0919/): Auth bypass in gitlab:gitlab (high 7.5) - [CVE-2017-0918](https://insights.sbomify.com/CVE-2017-0918/): Path traversal in GitLab Community and Enterprise Editions (high 8.8) - [CVE-2017-0917](https://insights.sbomify.com/CVE-2017-0917/): Cross-site scripting in GitLab Community and Enterprise Editions (medium 6.1) - [CVE-2017-0916](https://insights.sbomify.com/CVE-2017-0916/): Command injection in GitLab Community and Enterprise Editions (critical 9.8) - [CVE-2017-0915](https://insights.sbomify.com/CVE-2017-0915/): Command injection in GitLab Community and Enterprise Editions (critical 9.8) - [CVE-2017-0914](https://insights.sbomify.com/CVE-2017-0914/): SQL injection in GitLab Community and Enterprise Editions (high 7.5) - [CVE-2017-0913](https://insights.sbomify.com/CVE-2017-0913/): Path traversal in ubnt:ucrm (medium 4.7) - [CVE-2017-0912](https://insights.sbomify.com/CVE-2017-0912/): Cross-site scripting in ui:ucrm (medium 5.4) - [CVE-2017-0911](https://insights.sbomify.com/CVE-2017-0911/): Auth bypass in Twitter Kit for iOS (medium 5.4) - [CVE-2017-0910](https://insights.sbomify.com/CVE-2017-0910/): Auth bypass in Zulip Server (high 8.8) - [CVE-2017-0909](https://insights.sbomify.com/CVE-2017-0909/): private_address_check contains Incomplete List of Disallowed Inputs (critical 9.8) - [CVE-2017-0907](https://insights.sbomify.com/CVE-2017-0907/): Critical severity vulnerability that affects recurly-api-client (critical 9.8) - [CVE-2017-0906](https://insights.sbomify.com/CVE-2017-0906/): Recurly vulnerable to SSRF (critical 9.8) - [CVE-2017-0905](https://insights.sbomify.com/CVE-2017-0905/): Recurly gem Server-Side Request Forgery in Resource#find method (critical 9.8) - [CVE-2017-0904](https://insights.sbomify.com/CVE-2017-0904/): private_address_check vulnerable to bypass of Resolv.getaddresses method (high 8.1) - [CVE-2017-0903](https://insights.sbomify.com/CVE-2017-0903/): RubyGems vulnerable to Deserialization of Untrusted Data (critical 9.8) - [CVE-2017-0902](https://insights.sbomify.com/CVE-2017-0902/): RubyGems has Origin Validation Error vulnerability (high 8.1) - [CVE-2017-0901](https://insights.sbomify.com/CVE-2017-0901/): RubyGems may allow a maliciously crafted gem to overwrite files (high 7.5) - [CVE-2017-0900](https://insights.sbomify.com/CVE-2017-0900/): RubyGems Improper Input Validation vulnerability (high 7.5) - [CVE-2017-0899](https://insights.sbomify.com/CVE-2017-0899/): RubyGems Code Injection vulnerability (critical 9.8) - [CVE-2017-0898](https://insights.sbomify.com/CVE-2017-0898/): Memory corruption in Ruby (critical 9.1) - [CVE-2017-0897](https://insights.sbomify.com/CVE-2017-0897/): Weak cryptography in ExpressionEngine (high 7.5) - [CVE-2017-0896](https://insights.sbomify.com/CVE-2017-0896/): Missing authorization in Zulip Server (medium 6.5) - [CVE-2017-0895](https://insights.sbomify.com/CVE-2017-0895/): Information disclosure in Nextcloud Server (low 3.5) - [CVE-2017-0894](https://insights.sbomify.com/CVE-2017-0894/): Information disclosure in Nextcloud Server (medium 4.3) - [CVE-2017-0893](https://insights.sbomify.com/CVE-2017-0893/): Cross-site scripting in Nextcloud Server (medium 5.4) - [CVE-2017-0892](https://insights.sbomify.com/CVE-2017-0892/): Missing authorization in Nextcloud Server (low 3.5) - [CVE-2017-0891](https://insights.sbomify.com/CVE-2017-0891/): Cross-site scripting in Nextcloud Server (medium 5.4) - [CVE-2017-0890](https://insights.sbomify.com/CVE-2017-0890/): Cross-site scripting in Nextcloud Server (medium 5.4) - [CVE-2017-0889](https://insights.sbomify.com/CVE-2017-0889/): paperclip Server-Side Request Forgery vulnerability (critical 9.8) - [CVE-2017-0888](https://insights.sbomify.com/CVE-2017-0888/): Other in Nextcloud Server (medium 4.3) - [CVE-2017-0887](https://insights.sbomify.com/CVE-2017-0887/): Security feature bypass in Nextcloud Server (medium 4.3) - [CVE-2017-0886](https://insights.sbomify.com/CVE-2017-0886/): Denial of service in Nextcloud Server (medium 6.5) - [CVE-2017-0885](https://insights.sbomify.com/CVE-2017-0885/): Information disclosure in Nextcloud Server (medium 4.3) - [CVE-2017-0884](https://insights.sbomify.com/CVE-2017-0884/): Missing authorization in Nextcloud Server (medium 4.3) - [CVE-2017-0883](https://insights.sbomify.com/CVE-2017-0883/): Privilege escalation in Nextcloud Server (medium 6.4) - [CVE-2017-0882](https://insights.sbomify.com/CVE-2017-0882/): Information disclosure in GitLab Community Edition and GitLab Enterprise Edition 8.7.0 through 8.15.7, 8.16.0 through 8.16.7, 8.17.0 through 8.17.3 (medium 6.3) - [CVE-2017-0881](https://insights.sbomify.com/CVE-2017-0881/): Missing authorization in Zulip Server Versions 1.4.2 and below (medium 4.3) - [CVE-2017-0880](https://insights.sbomify.com/CVE-2017-0880/): Denial of service in Android (medium 6.5) - [CVE-2017-0879](https://insights.sbomify.com/CVE-2017-0879/): Information disclosure in Android (critical 9.1) - [CVE-2017-0878](https://insights.sbomify.com/CVE-2017-0878/): Memory corruption in Android (high 8.8) - [CVE-2017-0877](https://insights.sbomify.com/CVE-2017-0877/): Memory corruption in Android (high 8.8) - [CVE-2017-0876](https://insights.sbomify.com/CVE-2017-0876/): Memory corruption in Android (high 8.8) - [CVE-2017-0874](https://insights.sbomify.com/CVE-2017-0874/): Denial of service in Android (medium 6.5) - [CVE-2017-0873](https://insights.sbomify.com/CVE-2017-0873/): Denial of service in Android (medium 6.5) - [CVE-2017-0872](https://insights.sbomify.com/CVE-2017-0872/): Memory corruption in Android (high 8.8) - [CVE-2017-0871](https://insights.sbomify.com/CVE-2017-0871/): Privilege escalation in Android (high 7.8) - [CVE-2017-0870](https://insights.sbomify.com/CVE-2017-0870/): Privilege escalation in Android (high 7.8) - [CVE-2017-0869](https://insights.sbomify.com/CVE-2017-0869/): Integer overflow in Android (high 7.8) - [CVE-2017-0866](https://insights.sbomify.com/CVE-2017-0866/): Memory corruption in nvidia:tegra x1 firmware (high 7.8) - [CVE-2017-0865](https://insights.sbomify.com/CVE-2017-0865/): Privilege escalation in Android (high 7.8) - [CVE-2017-0864](https://insights.sbomify.com/CVE-2017-0864/): Privilege escalation in Android (high 7.8) - [CVE-2017-0863](https://insights.sbomify.com/CVE-2017-0863/): Privilege escalation in Android (high 7.8) - [CVE-2017-0862](https://insights.sbomify.com/CVE-2017-0862/): Privilege escalation in Android (high 7.8) - [CVE-2017-0861](https://insights.sbomify.com/CVE-2017-0861/): Use after free in Android (high 7.8) - [CVE-2017-0860](https://insights.sbomify.com/CVE-2017-0860/): Privilege escalation in Android (medium 5.3) - [CVE-2017-0859](https://insights.sbomify.com/CVE-2017-0859/): Other in Android (high 7.5) - [CVE-2017-0858](https://insights.sbomify.com/CVE-2017-0858/): Other in Android (high 7.5) - [CVE-2017-0857](https://insights.sbomify.com/CVE-2017-0857/): Other in Android (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/140/