# Vulnerabilities published in 2017


- [CVE-2017-8452](https://insights.sbomify.com/CVE-2017-8452/): Denial of service in Kibana (high 7.5)
- [CVE-2017-8451](https://insights.sbomify.com/CVE-2017-8451/): Open redirect in Elastic X-Pack Security (medium 6.1)
- [CVE-2017-8450](https://insights.sbomify.com/CVE-2017-8450/): Missing authorization in Elastic X-Pack Security (high 7.5)
- [CVE-2017-8449](https://insights.sbomify.com/CVE-2017-8449/): Information disclosure in Elastic X-Pack Security (medium 5.9)
- [CVE-2017-8448](https://insights.sbomify.com/CVE-2017-8448/): Privilege escalation in Elastic X-Pack Alerting (high 8.8)
- [CVE-2017-8447](https://insights.sbomify.com/CVE-2017-8447/): Privilege escalation in Elastic X-Pack Security (medium 6.5)
- [CVE-2017-8446](https://insights.sbomify.com/CVE-2017-8446/): Improper Privilege Management in X-Pack (medium 5.3)
- [CVE-2017-8445](https://insights.sbomify.com/CVE-2017-8445/): Security feature bypass in Elastic X-Pack Security (medium 5.5)
- [CVE-2017-8444](https://insights.sbomify.com/CVE-2017-8444/): Weak cryptography in Elastic Cloud Enterprise (medium 5.9)
- [CVE-2017-8443](https://insights.sbomify.com/CVE-2017-8443/): Information disclosure in Kibana X-Pack Security (medium 6.5)
- [CVE-2017-8442](https://insights.sbomify.com/CVE-2017-8442/): Information disclosure in Elasticsearch X-Pack Security (medium 6.5)
- [CVE-2017-8441](https://insights.sbomify.com/CVE-2017-8441/): Missing authorization in X-Pack Security (medium 4.3)
- [CVE-2017-8440](https://insights.sbomify.com/CVE-2017-8440/): Cross-site scripting in Kibana (medium 6.1)
- [CVE-2017-8439](https://insights.sbomify.com/CVE-2017-8439/): Cross-site scripting in Kibana (medium 6.1)
- [CVE-2017-8438](https://insights.sbomify.com/CVE-2017-8438/): Privilege escalation in X-Pack Security (high 8.8)
- [CVE-2017-8422](https://insights.sbomify.com/CVE-2017-8422/): Auth bypass in n/a (high 7.8)
- [CVE-2017-8421](https://insights.sbomify.com/CVE-2017-8421/): Denial of service in n/a (medium 5.5)
- [CVE-2017-8420](https://insights.sbomify.com/CVE-2017-8420/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8419](https://insights.sbomify.com/CVE-2017-8419/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8418](https://insights.sbomify.com/CVE-2017-8418/): RuboCop gem Insecure use of /tmp (low 3.3)
- [CVE-2017-8417](https://insights.sbomify.com/CVE-2017-8417/): Auth bypass in n/a (high 8.8)
- [CVE-2017-8416](https://insights.sbomify.com/CVE-2017-8416/): Memory corruption in n/a (high 8.8)
- [CVE-2017-8415](https://insights.sbomify.com/CVE-2017-8415/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2017-8414](https://insights.sbomify.com/CVE-2017-8414/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8413](https://insights.sbomify.com/CVE-2017-8413/): Command injection in n/a (high 8.8)
- [CVE-2017-8412](https://insights.sbomify.com/CVE-2017-8412/): Memory corruption in n/a (high 8.8)
- [CVE-2017-8411](https://insights.sbomify.com/CVE-2017-8411/): Command injection in n/a (high 8.8)
- [CVE-2017-8410](https://insights.sbomify.com/CVE-2017-8410/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-8409](https://insights.sbomify.com/CVE-2017-8409/): Missing authorization in n/a (high 7.5)
- [CVE-2017-8408](https://insights.sbomify.com/CVE-2017-8408/): Command injection in n/a (critical 9.8)
- [CVE-2017-8407](https://insights.sbomify.com/CVE-2017-8407/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-8406](https://insights.sbomify.com/CVE-2017-8406/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-8405](https://insights.sbomify.com/CVE-2017-8405/): Auth bypass in n/a (high 7.5)
- [CVE-2017-8404](https://insights.sbomify.com/CVE-2017-8404/): Command injection in n/a (critical 9.8)
- [CVE-2017-8403](https://insights.sbomify.com/CVE-2017-8403/): Auth bypass in n/a (high 8.8)
- [CVE-2017-8402](https://insights.sbomify.com/CVE-2017-8402/): File upload in n/a (high 8.8)
- [CVE-2017-8401](https://insights.sbomify.com/CVE-2017-8401/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8400](https://insights.sbomify.com/CVE-2017-8400/): Memory corruption in n/a (high 8.8)
- [CVE-2017-8399](https://insights.sbomify.com/CVE-2017-8399/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-8398](https://insights.sbomify.com/CVE-2017-8398/): Denial of service in n/a (high 7.5)
- [CVE-2017-8397](https://insights.sbomify.com/CVE-2017-8397/): Memory corruption in n/a (high 7.5)
- [CVE-2017-8396](https://insights.sbomify.com/CVE-2017-8396/): Denial of service in n/a (high 7.5)
- [CVE-2017-8395](https://insights.sbomify.com/CVE-2017-8395/): Null dereference in n/a (high 7.5)
- [CVE-2017-8394](https://insights.sbomify.com/CVE-2017-8394/): Null dereference in n/a (high 7.5)
- [CVE-2017-8393](https://insights.sbomify.com/CVE-2017-8393/): Memory corruption in n/a (high 7.5)
- [CVE-2017-8392](https://insights.sbomify.com/CVE-2017-8392/): Null dereference in n/a (high 7.5)
- [CVE-2017-8391](https://insights.sbomify.com/CVE-2017-8391/): Information disclosure in n/a (medium 5.5)
- [CVE-2017-8390](https://insights.sbomify.com/CVE-2017-8390/): Command injection in n/a (critical 9.8)
- [CVE-2017-8388](https://insights.sbomify.com/CVE-2017-8388/): GeniXCMS Mailbox validation logic vulnerability (medium 5.3)
- [CVE-2017-8387](https://insights.sbomify.com/CVE-2017-8387/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-8386](https://insights.sbomify.com/CVE-2017-8386/): Command injection in n/a (high 8.8)
- [CVE-2017-8385](https://insights.sbomify.com/CVE-2017-8385/): Craft CMS subject to URL forgery (medium 5.3)
- [CVE-2017-8384](https://insights.sbomify.com/CVE-2017-8384/): Craft CMS XSS Vulnerability (medium 6.1)
- [CVE-2017-8383](https://insights.sbomify.com/CVE-2017-8383/): Craft CMS Unauthorized View (medium 5.3)
- [CVE-2017-8382](https://insights.sbomify.com/CVE-2017-8382/): admidio CSRF Vulnerability (medium 4.5)
- [CVE-2017-8381](https://insights.sbomify.com/CVE-2017-8381/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8380](https://insights.sbomify.com/CVE-2017-8380/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-8379](https://insights.sbomify.com/CVE-2017-8379/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8378](https://insights.sbomify.com/CVE-2017-8378/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-8377](https://insights.sbomify.com/CVE-2017-8377/): GeniXCMS SQL Injection (high 8.8)
- [CVE-2017-8376](https://insights.sbomify.com/CVE-2017-8376/): GeniXCMS Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2017-8374](https://insights.sbomify.com/CVE-2017-8374/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-8373](https://insights.sbomify.com/CVE-2017-8373/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8372](https://insights.sbomify.com/CVE-2017-8372/): Denial of service in n/a (medium 4.7)
- [CVE-2017-8371](https://insights.sbomify.com/CVE-2017-8371/): Information disclosure in n/a (medium 6.8)
- [CVE-2017-8370](https://insights.sbomify.com/CVE-2017-8370/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8369](https://insights.sbomify.com/CVE-2017-8369/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8368](https://insights.sbomify.com/CVE-2017-8368/): Denial of service in n/a (high 7.8)
- [CVE-2017-8367](https://insights.sbomify.com/CVE-2017-8367/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8366](https://insights.sbomify.com/CVE-2017-8366/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-8365](https://insights.sbomify.com/CVE-2017-8365/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8364](https://insights.sbomify.com/CVE-2017-8364/): Memory corruption in n/a (high 7.8)
- [CVE-2017-8363](https://insights.sbomify.com/CVE-2017-8363/): Memory corruption in n/a (medium 6.5)
- [CVE-2017-8362](https://insights.sbomify.com/CVE-2017-8362/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8361](https://insights.sbomify.com/CVE-2017-8361/): Memory corruption in n/a (high 8.8)
- [CVE-2017-8360](https://insights.sbomify.com/CVE-2017-8360/): Information disclosure in n/a (medium 5.5)
- [CVE-2017-8359](https://insights.sbomify.com/CVE-2017-8359/): Use after free in n/a (critical 9.8)
- [CVE-2017-8358](https://insights.sbomify.com/CVE-2017-8358/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-8357](https://insights.sbomify.com/CVE-2017-8357/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8356](https://insights.sbomify.com/CVE-2017-8356/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8355](https://insights.sbomify.com/CVE-2017-8355/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8354](https://insights.sbomify.com/CVE-2017-8354/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8353](https://insights.sbomify.com/CVE-2017-8353/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8352](https://insights.sbomify.com/CVE-2017-8352/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8351](https://insights.sbomify.com/CVE-2017-8351/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8350](https://insights.sbomify.com/CVE-2017-8350/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8349](https://insights.sbomify.com/CVE-2017-8349/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8348](https://insights.sbomify.com/CVE-2017-8348/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8347](https://insights.sbomify.com/CVE-2017-8347/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8346](https://insights.sbomify.com/CVE-2017-8346/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8345](https://insights.sbomify.com/CVE-2017-8345/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8344](https://insights.sbomify.com/CVE-2017-8344/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8343](https://insights.sbomify.com/CVE-2017-8343/): Denial of service in n/a (medium 6.5)
- [CVE-2017-8342](https://insights.sbomify.com/CVE-2017-8342/): Radicale is vulnerable to timing oracles and simple bruteforce attacks (high 8.1)
- [CVE-2017-8341](https://insights.sbomify.com/CVE-2017-8341/): Cross-site scripting in n/a (medium 5.3)
- [CVE-2017-8340](https://insights.sbomify.com/CVE-2017-8340/): Missing authorization in n/a (high 8.8)
- [CVE-2017-8339](https://insights.sbomify.com/CVE-2017-8339/): Denial of service in n/a (medium 5.5)
- [CVE-2017-8338](https://insights.sbomify.com/CVE-2017-8338/): Denial of service in n/a (high 7.5)
- [CVE-2017-8337](https://insights.sbomify.com/CVE-2017-8337/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-8336](https://insights.sbomify.com/CVE-2017-8336/): Memory corruption in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/15/