# Vulnerabilities published in 2017


- [CVE-2017-7773](https://insights.sbomify.com/CVE-2017-7773/): Memory corruption in Firefox (high 8.8)
- [CVE-2017-7772](https://insights.sbomify.com/CVE-2017-7772/): Memory corruption in Firefox (high 8.8)
- [CVE-2017-7771](https://insights.sbomify.com/CVE-2017-7771/): Memory corruption in Firefox (high 8.1)
- [CVE-2017-7770](https://insights.sbomify.com/CVE-2017-7770/): Security feature bypass in Firefox (medium 5.9)
- [CVE-2017-7768](https://insights.sbomify.com/CVE-2017-7768/): Information disclosure in Firefox (medium 5.5)
- [CVE-2017-7767](https://insights.sbomify.com/CVE-2017-7767/): Privilege escalation in Firefox (medium 5.5)
- [CVE-2017-7766](https://insights.sbomify.com/CVE-2017-7766/): Privilege escalation in Firefox (high 7.8)
- [CVE-2017-7765](https://insights.sbomify.com/CVE-2017-7765/): Security feature bypass in Firefox (high 7.5)
- [CVE-2017-7764](https://insights.sbomify.com/CVE-2017-7764/): Other in Firefox (medium 5.3)
- [CVE-2017-7763](https://insights.sbomify.com/CVE-2017-7763/): Other in Firefox (medium 5.3)
- [CVE-2017-7762](https://insights.sbomify.com/CVE-2017-7762/): Other in Firefox (high 7.5)
- [CVE-2017-7761](https://insights.sbomify.com/CVE-2017-7761/): Privilege escalation in Firefox (medium 5.5)
- [CVE-2017-7760](https://insights.sbomify.com/CVE-2017-7760/): Path traversal in Firefox (high 7.8)
- [CVE-2017-7759](https://insights.sbomify.com/CVE-2017-7759/): Information disclosure in Firefox (high 7.5)
- [CVE-2017-7758](https://insights.sbomify.com/CVE-2017-7758/): Memory corruption in Firefox (critical 9.1)
- [CVE-2017-7757](https://insights.sbomify.com/CVE-2017-7757/): Use after free in Firefox (critical 9.8)
- [CVE-2017-7756](https://insights.sbomify.com/CVE-2017-7756/): Use after free in Firefox (critical 9.8)
- [CVE-2017-7755](https://insights.sbomify.com/CVE-2017-7755/): Other in Firefox (high 7.8)
- [CVE-2017-7754](https://insights.sbomify.com/CVE-2017-7754/): Memory corruption in Firefox (high 7.5)
- [CVE-2017-7753](https://insights.sbomify.com/CVE-2017-7753/): Memory corruption in Firefox (critical 9.1)
- [CVE-2017-7752](https://insights.sbomify.com/CVE-2017-7752/): Use after free in Firefox (high 8.8)
- [CVE-2017-7751](https://insights.sbomify.com/CVE-2017-7751/): Use after free in Firefox (critical 9.8)
- [CVE-2017-7750](https://insights.sbomify.com/CVE-2017-7750/): Use after free in Firefox (critical 9.8)
- [CVE-2017-7749](https://insights.sbomify.com/CVE-2017-7749/): Use after free in Firefox (critical 9.8)
- [CVE-2017-7748](https://insights.sbomify.com/CVE-2017-7748/): Denial of service in n/a (high 7.5)
- [CVE-2017-7747](https://insights.sbomify.com/CVE-2017-7747/): Denial of service in n/a (high 7.5)
- [CVE-2017-7746](https://insights.sbomify.com/CVE-2017-7746/): Denial of service in n/a (high 7.5)
- [CVE-2017-7745](https://insights.sbomify.com/CVE-2017-7745/): Denial of service in n/a (high 7.5)
- [CVE-2017-7742](https://insights.sbomify.com/CVE-2017-7742/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-7741](https://insights.sbomify.com/CVE-2017-7741/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-7739](https://insights.sbomify.com/CVE-2017-7739/): Cross-site scripting in FortiOS (medium 6.1)
- [CVE-2017-7738](https://insights.sbomify.com/CVE-2017-7738/): Information disclosure in FortiOS (high 7.2)
- [CVE-2017-7737](https://insights.sbomify.com/CVE-2017-7737/): Information disclosure in Fortinet FortiWeb (medium 4.9)
- [CVE-2017-7736](https://insights.sbomify.com/CVE-2017-7736/): Cross-site scripting in Fortinet FortiWeb (medium 5.4)
- [CVE-2017-7735](https://insights.sbomify.com/CVE-2017-7735/): Cross-site scripting in Fortinet FortiOS (medium 5.4)
- [CVE-2017-7734](https://insights.sbomify.com/CVE-2017-7734/): Cross-site scripting in Fortinet FortiOS (medium 5.4)
- [CVE-2017-7733](https://insights.sbomify.com/CVE-2017-7733/): Cross-site scripting in Fortinet FortiOS (medium 6.1)
- [CVE-2017-7732](https://insights.sbomify.com/CVE-2017-7732/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7731](https://insights.sbomify.com/CVE-2017-7731/): Information disclosure in Fortinet FortiPortal (high 7.5)
- [CVE-2017-7730](https://insights.sbomify.com/CVE-2017-7730/): Denial of service in n/a (high 7.5)
- [CVE-2017-7729](https://insights.sbomify.com/CVE-2017-7729/): Information disclosure in n/a (high 7.5)
- [CVE-2017-7728](https://insights.sbomify.com/CVE-2017-7728/): Auth bypass in n/a (critical 9.8)
- [CVE-2017-7726](https://insights.sbomify.com/CVE-2017-7726/): Security feature bypass in n/a (high 7.5)
- [CVE-2017-7725](https://insights.sbomify.com/CVE-2017-7725/): Concrete CMS vulnerable to cross-site scripting (XSS) (medium 6.1)
- [CVE-2017-7723](https://insights.sbomify.com/CVE-2017-7723/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7722](https://insights.sbomify.com/CVE-2017-7722/): Command injection in n/a (critical 10.0)
- [CVE-2017-7721](https://insights.sbomify.com/CVE-2017-7721/): Denial of service in n/a (high 7.8)
- [CVE-2017-7720](https://insights.sbomify.com/CVE-2017-7720/): Memory corruption in n/a (high 7.8)
- [CVE-2017-7719](https://insights.sbomify.com/CVE-2017-7719/): SQL injection in n/a (critical 9.8)
- [CVE-2017-7718](https://insights.sbomify.com/CVE-2017-7718/): Denial of service in n/a (medium 5.5)
- [CVE-2017-7717](https://insights.sbomify.com/CVE-2017-7717/): SQL injection in n/a (high 8.8)
- [CVE-2017-7716](https://insights.sbomify.com/CVE-2017-7716/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-7705](https://insights.sbomify.com/CVE-2017-7705/): Denial of service in n/a (high 7.5)
- [CVE-2017-7704](https://insights.sbomify.com/CVE-2017-7704/): Denial of service in n/a (high 7.5)
- [CVE-2017-7703](https://insights.sbomify.com/CVE-2017-7703/): Denial of service in n/a (high 7.5)
- [CVE-2017-7702](https://insights.sbomify.com/CVE-2017-7702/): Denial of service in n/a (high 7.5)
- [CVE-2017-7701](https://insights.sbomify.com/CVE-2017-7701/): Denial of service in n/a (high 7.5)
- [CVE-2017-7700](https://insights.sbomify.com/CVE-2017-7700/): Denial of service in n/a (medium 6.5)
- [CVE-2017-7698](https://insights.sbomify.com/CVE-2017-7698/): Use after free in n/a (high 7.8)
- [CVE-2017-7697](https://insights.sbomify.com/CVE-2017-7697/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-7696](https://insights.sbomify.com/CVE-2017-7696/): Denial of service in n/a (high 7.5)
- [CVE-2017-7695](https://insights.sbomify.com/CVE-2017-7695/): File upload in n/a (critical 9.8)
- [CVE-2017-7694](https://insights.sbomify.com/CVE-2017-7694/): Code injection in n/a (high 8.8)
- [CVE-2017-7693](https://insights.sbomify.com/CVE-2017-7693/): Path traversal in n/a (medium 6.5)
- [CVE-2017-7692](https://insights.sbomify.com/CVE-2017-7692/): Command injection in n/a (high 8.8)
- [CVE-2017-7691](https://insights.sbomify.com/CVE-2017-7691/): Code injection in n/a (critical 9.8)
- [CVE-2017-7690](https://insights.sbomify.com/CVE-2017-7690/): Privilege escalation in n/a (high 7.8)
- [CVE-2017-7689](https://insights.sbomify.com/CVE-2017-7689/): Command injection in n/a (critical 9.8)
- [CVE-2017-7688](https://insights.sbomify.com/CVE-2017-7688/): Apache OpenMeetings updates user password in insecure manner (high 7.5)
- [CVE-2017-7687](https://insights.sbomify.com/CVE-2017-7687/): Denial of service in Apache Mesos (high 7.5)
- [CVE-2017-7686](https://insights.sbomify.com/CVE-2017-7686/): Apache Ignite communicates to an external PHP server where sensitive information is sent (high 7.5)
- [CVE-2017-7685](https://insights.sbomify.com/CVE-2017-7685/): Apache OpenMeetings responds to insecure HTTP methods (medium 5.3)
- [CVE-2017-7684](https://insights.sbomify.com/CVE-2017-7684/): Apache OpenMeetings vulnerable to Uncontrolled Resource Consumption (high 7.5)
- [CVE-2017-7683](https://insights.sbomify.com/CVE-2017-7683/): Apache OpenMeetings displays Tomcat version and detailed error stack trace (high 7.5)
- [CVE-2017-7682](https://insights.sbomify.com/CVE-2017-7682/): Apache OpenMeetings vulnerable to parameter manipulation attacks (high 8.2)
- [CVE-2017-7681](https://insights.sbomify.com/CVE-2017-7681/): Apache OpenMeetings vulnerable to SQL injection (high 8.8)
- [CVE-2017-7680](https://insights.sbomify.com/CVE-2017-7680/): Apache OpenMeetings allows flash content to be loaded from untrusted domains (high 7.5)
- [CVE-2017-7679](https://insights.sbomify.com/CVE-2017-7679/): Memory corruption in Apache HTTP Server (critical 9.8)
- [CVE-2017-7678](https://insights.sbomify.com/CVE-2017-7678/): Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 (medium 6.1)
- [CVE-2017-7677](https://insights.sbomify.com/CVE-2017-7677/): Moderate severity vulnerability that affects org.apache.ranger:ranger (medium 5.9)
- [CVE-2017-7676](https://insights.sbomify.com/CVE-2017-7676/): Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character (critical 9.8)
- [CVE-2017-7675](https://insights.sbomify.com/CVE-2017-7675/): Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat (high 7.5)
- [CVE-2017-7674](https://insights.sbomify.com/CVE-2017-7674/): Insufficient Verification of Data Authenticity in Apache Tomcat (medium 4.3)
- [CVE-2017-7673](https://insights.sbomify.com/CVE-2017-7673/): Apache OpenMeetings has Inadequate Encryption Strength (critical 9.8)
- [CVE-2017-7672](https://insights.sbomify.com/CVE-2017-7672/): Apache Struts Improper Input Validation vulnerability (medium 5.9)
- [CVE-2017-7671](https://insights.sbomify.com/CVE-2017-7671/): Denial of service in Apache Traffic Server (high 7.5)
- [CVE-2017-7670](https://insights.sbomify.com/CVE-2017-7670/): Apache Traffic Control vulnerable to Slowloris-style Denial of Service attack (high 7.5)
- [CVE-2017-7669](https://insights.sbomify.com/CVE-2017-7669/): Apache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validation (high 7.5)
- [CVE-2017-7668](https://insights.sbomify.com/CVE-2017-7668/): Memory corruption in Apache HTTP Server (high 7.5)
- [CVE-2017-7667](https://insights.sbomify.com/CVE-2017-7667/): Origin Validation Error in Apache NiFi (high 7.5)
- [CVE-2017-7666](https://insights.sbomify.com/CVE-2017-7666/): Apache OpenMeetings vulnerable to Cross-Site Request Forgery (high 8.8)
- [CVE-2017-7665](https://insights.sbomify.com/CVE-2017-7665/): Cross-site Scripting in Apache NiFi (medium 6.1)
- [CVE-2017-7664](https://insights.sbomify.com/CVE-2017-7664/): Apache OpenMeetings does not correctly validate uploaded XML documents (critical 10.0)
- [CVE-2017-7663](https://insights.sbomify.com/CVE-2017-7663/): Apache OpenMeetings Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2017-7662](https://insights.sbomify.com/CVE-2017-7662/): Cross-Site Request Forgery in Apache CXF Fediz (high 8.8)
- [CVE-2017-7661](https://insights.sbomify.com/CVE-2017-7661/): Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, and org.apache.cxf.fediz:fediz-spring2 (high 8.8)
- [CVE-2017-7660](https://insights.sbomify.com/CVE-2017-7660/): Apache Solr insecure inter-node communication (high 7.5)
- [CVE-2017-7659](https://insights.sbomify.com/CVE-2017-7659/): Null dereference in Apache HTTP Server (high 7.5)
- [CVE-2017-7658](https://insights.sbomify.com/CVE-2017-7658/): Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling) (critical 9.8)
- [CVE-2017-7657](https://insights.sbomify.com/CVE-2017-7657/): Critical severity vulnerability that affects org.eclipse.jetty:jetty-server (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/21/