# Vulnerabilities published in 2017


- [CVE-2017-0432](https://insights.sbomify.com/CVE-2017-0432/): Privilege escalation in Android (high 7.0)
- [CVE-2017-0431](https://insights.sbomify.com/CVE-2017-0431/): Privilege escalation in Android (high 7.8)
- [CVE-2017-0430](https://insights.sbomify.com/CVE-2017-0430/): Privilege escalation in Android (high 7.8)
- [CVE-2017-0429](https://insights.sbomify.com/CVE-2017-0429/): Memory corruption in Android (high 7.8)
- [CVE-2017-0428](https://insights.sbomify.com/CVE-2017-0428/): Use after free in Android (high 7.8)
- [CVE-2017-0427](https://insights.sbomify.com/CVE-2017-0427/): Privilege escalation in Android (high 7.8)
- [CVE-2017-0426](https://insights.sbomify.com/CVE-2017-0426/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0425](https://insights.sbomify.com/CVE-2017-0425/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0424](https://insights.sbomify.com/CVE-2017-0424/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0423](https://insights.sbomify.com/CVE-2017-0423/): Privilege escalation in Android (medium 5.3)
- [CVE-2017-0422](https://insights.sbomify.com/CVE-2017-0422/): Denial of service in Android (high 7.5)
- [CVE-2017-0421](https://insights.sbomify.com/CVE-2017-0421/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0420](https://insights.sbomify.com/CVE-2017-0420/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0419](https://insights.sbomify.com/CVE-2017-0419/): Privilege escalation in Android (high 7.8)
- [CVE-2017-0418](https://insights.sbomify.com/CVE-2017-0418/): Memory corruption in Android (high 7.8)
- [CVE-2017-0417](https://insights.sbomify.com/CVE-2017-0417/): Memory corruption in Android (high 7.8)
- [CVE-2017-0416](https://insights.sbomify.com/CVE-2017-0416/): Memory corruption in Android (high 7.8)
- [CVE-2017-0415](https://insights.sbomify.com/CVE-2017-0415/): Privilege escalation in Android (high 7.8)
- [CVE-2017-0414](https://insights.sbomify.com/CVE-2017-0414/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0413](https://insights.sbomify.com/CVE-2017-0413/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0412](https://insights.sbomify.com/CVE-2017-0412/): Race condition in Android (high 7.8)
- [CVE-2017-0411](https://insights.sbomify.com/CVE-2017-0411/): Race condition in Android (high 7.8)
- [CVE-2017-0410](https://insights.sbomify.com/CVE-2017-0410/): Integer overflow in Android (high 7.8)
- [CVE-2017-0409](https://insights.sbomify.com/CVE-2017-0409/): Memory corruption in Android (high 7.8)
- [CVE-2017-0408](https://insights.sbomify.com/CVE-2017-0408/): Memory corruption in Android (high 7.8)
- [CVE-2017-0407](https://insights.sbomify.com/CVE-2017-0407/): Memory corruption in Android (high 7.8)
- [CVE-2017-0406](https://insights.sbomify.com/CVE-2017-0406/): Memory corruption in Android (high 7.8)
- [CVE-2017-0405](https://insights.sbomify.com/CVE-2017-0405/): Memory corruption in Android (high 7.8)
- [CVE-2017-0404](https://insights.sbomify.com/CVE-2017-0404/): Privilege escalation in Android (high 7.0)
- [CVE-2017-0403](https://insights.sbomify.com/CVE-2017-0403/): Privilege escalation in Android (high 7.0)
- [CVE-2017-0402](https://insights.sbomify.com/CVE-2017-0402/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0401](https://insights.sbomify.com/CVE-2017-0401/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0400](https://insights.sbomify.com/CVE-2017-0400/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0399](https://insights.sbomify.com/CVE-2017-0399/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0398](https://insights.sbomify.com/CVE-2017-0398/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0397](https://insights.sbomify.com/CVE-2017-0397/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0396](https://insights.sbomify.com/CVE-2017-0396/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0395](https://insights.sbomify.com/CVE-2017-0395/): Security feature bypass in Android (medium 5.5)
- [CVE-2017-0394](https://insights.sbomify.com/CVE-2017-0394/): Denial of service in Android (high 7.5)
- [CVE-2017-0393](https://insights.sbomify.com/CVE-2017-0393/): Denial of service in Android (medium 5.5)
- [CVE-2017-0392](https://insights.sbomify.com/CVE-2017-0392/): Denial of service in Android (medium 5.5)
- [CVE-2017-0391](https://insights.sbomify.com/CVE-2017-0391/): Denial of service in Android (medium 5.5)
- [CVE-2017-0390](https://insights.sbomify.com/CVE-2017-0390/): Denial of service in Android (medium 5.5)
- [CVE-2017-0389](https://insights.sbomify.com/CVE-2017-0389/): Denial of service in Android (high 7.5)
- [CVE-2017-0388](https://insights.sbomify.com/CVE-2017-0388/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0387](https://insights.sbomify.com/CVE-2017-0387/): Privilege escalation in Android (high 7.8)
- [CVE-2017-0386](https://insights.sbomify.com/CVE-2017-0386/): Privilege escalation in Android (high 7.8)
- [CVE-2017-0385](https://insights.sbomify.com/CVE-2017-0385/): Privilege escalation in Android (high 7.8)
- [CVE-2017-0384](https://insights.sbomify.com/CVE-2017-0384/): Privilege escalation in Android (high 7.8)
- [CVE-2017-0383](https://insights.sbomify.com/CVE-2017-0383/): Integer overflow in Android (high 7.8)
- [CVE-2017-0382](https://insights.sbomify.com/CVE-2017-0382/): Code injection in Android (high 7.8)
- [CVE-2017-0381](https://insights.sbomify.com/CVE-2017-0381/): Information disclosure in Android (high 7.8)
- [CVE-2017-0380](https://insights.sbomify.com/CVE-2017-0380/): Information disclosure in Tor before 0.3.1.7 (medium 5.9)
- [CVE-2017-0379](https://insights.sbomify.com/CVE-2017-0379/): Weak cryptography in libgcrypt (high 7.5)
- [CVE-2017-0378](https://insights.sbomify.com/CVE-2017-0378/): Cross-site scripting in phamm before 0.6.7 (medium 6.1)
- [CVE-2017-0377](https://insights.sbomify.com/CVE-2017-0377/): Weak cryptography in Tor (high 7.5)
- [CVE-2017-0376](https://insights.sbomify.com/CVE-2017-0376/): Denial of service in Tor before 0.3.0.8 (high 7.5)
- [CVE-2017-0375](https://insights.sbomify.com/CVE-2017-0375/): Denial of service in Tor before 0.3.0.8 (high 7.5)
- [CVE-2017-0374](https://insights.sbomify.com/CVE-2017-0374/): Privilege escalation in libconfig-model-perl (high 7.8)
- [CVE-2017-0373](https://insights.sbomify.com/CVE-2017-0373/): Code injection in libconfig-model-perl (high 7.3)
- [CVE-2017-0372](https://insights.sbomify.com/CVE-2017-0372/): Parameters injection in SyntaxHighlight results in multiple vulnerabilities (critical 9.8)
- [CVE-2017-0371](https://insights.sbomify.com/CVE-2017-0371/): Information disclosure in mediawiki:mediawiki (high 7.5)
- [CVE-2017-0370](https://insights.sbomify.com/CVE-2017-0370/): Spam blacklist ineffective on encoded URLs inside file inclusion syntax's link parameter (medium 5.3)
- [CVE-2017-0369](https://insights.sbomify.com/CVE-2017-0369/): Sysops can undelete pages, although the page is protected against it (medium 6.5)
- [CVE-2017-0368](https://insights.sbomify.com/CVE-2017-0368/): Make rawHTML mode not apply to system messages (medium 5.3)
- [CVE-2017-0367](https://insights.sbomify.com/CVE-2017-0367/): Having LocalisationCache directory default to system tmp directory is insecure (high 8.8)
- [CVE-2017-0366](https://insights.sbomify.com/CVE-2017-0366/): SVG filter evasion using default attribute values in DTD declaration (medium 5.4)
- [CVE-2017-0365](https://insights.sbomify.com/CVE-2017-0365/): XSS in SearchHighlighter::highlightText() [requires non-default config] (medium 4.7)
- [CVE-2017-0364](https://insights.sbomify.com/CVE-2017-0364/): Special:Search allows redirects to any interwiki link (medium 6.1)
- [CVE-2017-0363](https://insights.sbomify.com/CVE-2017-0363/): Special:UserLogin?returnto=interwiki:foo will redirect to external sites (medium 6.1)
- [CVE-2017-0362](https://insights.sbomify.com/CVE-2017-0362/): "Mark all pages visited" on the watchlist does not require a CSRF token (high 8.8)
- [CVE-2017-0361](https://insights.sbomify.com/CVE-2017-0361/): api.log contains passwords in plaintext (high 7.8)
- [CVE-2017-0360](https://insights.sbomify.com/CVE-2017-0360/): Tryton Information Disclosure Vulnerability (medium 5.3)
- [CVE-2017-0359](https://insights.sbomify.com/CVE-2017-0359/): diffoscope writes to arbitrary locations on disk based on the contents of an untrusted archive (critical 9.8)
- [CVE-2017-0358](https://insights.sbomify.com/CVE-2017-0358/): ntfs-3g: Modprobe influence vulnerability via environment variables (high 7.8)
- [CVE-2017-0357](https://insights.sbomify.com/CVE-2017-0357/): iucode-tool: heap buffer overflow on -tr loader (critical 9.8)
- [CVE-2017-0356](https://insights.sbomify.com/CVE-2017-0356/): Authentication bypass via repeated parameters (critical 9.8)
- [CVE-2017-0355](https://insights.sbomify.com/CVE-2017-0355/): Denial of service in GPU Display Driver (medium 5.5)
- [CVE-2017-0354](https://insights.sbomify.com/CVE-2017-0354/): Denial of service in GPU Display Driver (medium 4.7)
- [CVE-2017-0353](https://insights.sbomify.com/CVE-2017-0353/): Race condition in GPU Display Driver (medium 5.5)
- [CVE-2017-0352](https://insights.sbomify.com/CVE-2017-0352/): Privilege escalation in GPU Display Driver (high 7.8)
- [CVE-2017-0351](https://insights.sbomify.com/CVE-2017-0351/): Null dereference in GPU Display Driver (high 7.8)
- [CVE-2017-0350](https://insights.sbomify.com/CVE-2017-0350/): Memory corruption in GPU Display Driver (high 7.8)
- [CVE-2017-0349](https://insights.sbomify.com/CVE-2017-0349/): Memory corruption in GPU Display Driver (high 7.8)
- [CVE-2017-0348](https://insights.sbomify.com/CVE-2017-0348/): Null dereference in GPU Display Driver (high 7.8)
- [CVE-2017-0347](https://insights.sbomify.com/CVE-2017-0347/): Memory corruption in GPU Display Driver (high 7.8)
- [CVE-2017-0346](https://insights.sbomify.com/CVE-2017-0346/): Memory corruption in GPU Display Driver (high 7.8)
- [CVE-2017-0345](https://insights.sbomify.com/CVE-2017-0345/): Memory corruption in GPU Display Driver (high 7.8)
- [CVE-2017-0344](https://insights.sbomify.com/CVE-2017-0344/): Privilege escalation in GPU Display Driver (high 7.8)
- [CVE-2017-0343](https://insights.sbomify.com/CVE-2017-0343/): Race condition in GPU Display Driver (high 7.0)
- [CVE-2017-0342](https://insights.sbomify.com/CVE-2017-0342/): Memory corruption in GPU Display Driver (high 7.8)
- [CVE-2017-0341](https://insights.sbomify.com/CVE-2017-0341/): Null dereference in GPU Display Driver (high 7.8)
- [CVE-2017-0340](https://insights.sbomify.com/CVE-2017-0340/): Memory corruption in Android (high 7.8)
- [CVE-2017-0339](https://insights.sbomify.com/CVE-2017-0339/): Privilege escalation in Android (high 7.0)
- [CVE-2017-0338](https://insights.sbomify.com/CVE-2017-0338/): Privilege escalation in Android (high 7.8)
- [CVE-2017-0337](https://insights.sbomify.com/CVE-2017-0337/): Privilege escalation in Android (high 7.8)
- [CVE-2017-0336](https://insights.sbomify.com/CVE-2017-0336/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0335](https://insights.sbomify.com/CVE-2017-0335/): Privilege escalation in Android (high 7.8)
- [CVE-2017-0334](https://insights.sbomify.com/CVE-2017-0334/): Information disclosure in Android (medium 5.5)
- [CVE-2017-0333](https://insights.sbomify.com/CVE-2017-0333/): Privilege escalation in Android (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/145/
