# Vulnerabilities published in 2017


- [CVE-2017-7551](https://insights.sbomify.com/CVE-2017-7551/): Information disclosure in 389-ds-base (critical 9.8)
- [CVE-2017-7550](https://insights.sbomify.com/CVE-2017-7550/): Ansible Insertion of Sensitive Information into Log File vulnerability (critical 9.8)
- [CVE-2017-7549](https://insights.sbomify.com/CVE-2017-7549/): instack-undercloud vulnerable to symlink attack on tmp files (medium 6.4)
- [CVE-2017-7548](https://insights.sbomify.com/CVE-2017-7548/): Missing authorization in postgresql (high 7.5)
- [CVE-2017-7547](https://insights.sbomify.com/CVE-2017-7547/): Information disclosure in postgresql (high 8.8)
- [CVE-2017-7546](https://insights.sbomify.com/CVE-2017-7546/): Auth bypass in postgresql (critical 9.8)
- [CVE-2017-7545](https://insights.sbomify.com/CVE-2017-7545/): XML External Entity Reference in jbpmmigration (medium 6.5)
- [CVE-2017-7544](https://insights.sbomify.com/CVE-2017-7544/): Information disclosure in libexif (critical 9.1)
- [CVE-2017-7543](https://insights.sbomify.com/CVE-2017-7543/): OpenStack Neutron Race Condition vulnerability (medium 5.3)
- [CVE-2017-7542](https://insights.sbomify.com/CVE-2017-7542/): Integer overflow in Linux kernel versions up to and including 4.12 (medium 5.5)
- [CVE-2017-7541](https://insights.sbomify.com/CVE-2017-7541/): Memory corruption in Linux kernel before 4.12.3 (high 7.8)
- [CVE-2017-7540](https://insights.sbomify.com/CVE-2017-7540/): Safemode Gem Has Incomplete List of Disallowed Inputs (critical 9.8)
- [CVE-2017-7539](https://insights.sbomify.com/CVE-2017-7539/): Denial of service in Qemu (medium 5.3)
- [CVE-2017-7538](https://insights.sbomify.com/CVE-2017-7538/): Cross-site scripting in Satellite (low 3.5)
- [CVE-2017-7537](https://insights.sbomify.com/CVE-2017-7537/): Hardcoded credentials in pki-core (medium 5.9)
- [CVE-2017-7536](https://insights.sbomify.com/CVE-2017-7536/): Privilege Escalation in Hibernate Validator (high 7.0)
- [CVE-2017-7535](https://insights.sbomify.com/CVE-2017-7535/): Cross-site scripting in foreman (medium 6.1)
- [CVE-2017-7534](https://insights.sbomify.com/CVE-2017-7534/): Cross-site scripting in Openshift (medium 5.4)
- [CVE-2017-7533](https://insights.sbomify.com/CVE-2017-7533/): Race condition in Linux kernel through 4.12.4 (high 7.0)
- [CVE-2017-7532](https://insights.sbomify.com/CVE-2017-7532/): Moodle Improper Privilege Management (medium 6.5)
- [CVE-2017-7531](https://insights.sbomify.com/CVE-2017-7531/): Moodle Information Disclosure (medium 4.3)
- [CVE-2017-7530](https://insights.sbomify.com/CVE-2017-7530/): Missing authorization in cfme (high 8.8)
- [CVE-2017-7529](https://insights.sbomify.com/CVE-2017-7529/): Integer overflow in nginx (high 7.5)
- [CVE-2017-7528](https://insights.sbomify.com/CVE-2017-7528/): Other in Ansible Tower (medium 5.2)
- [CVE-2017-7526](https://insights.sbomify.com/CVE-2017-7526/): Information disclosure in libgcrypt (medium 6.1)
- [CVE-2017-7525](https://insights.sbomify.com/CVE-2017-7525/): jackson-databind is vulnerable to a deserialization flaw (critical 9.8)
- [CVE-2017-7524](https://insights.sbomify.com/CVE-2017-7524/): tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC. (high 7.5)
- [CVE-2017-7523](https://insights.sbomify.com/CVE-2017-7523/): Memory corruption in cygwin (high 7.5)
- [CVE-2017-7522](https://insights.sbomify.com/CVE-2017-7522/): Null dereference in OpenVPN (medium 6.5)
- [CVE-2017-7521](https://insights.sbomify.com/CVE-2017-7521/): Denial of service in OpenVPN (medium 5.9)
- [CVE-2017-7520](https://insights.sbomify.com/CVE-2017-7520/): Denial of service in OpenVPN (high 7.4)
- [CVE-2017-7519](https://insights.sbomify.com/CVE-2017-7519/): Denial of service in ceph (low 2.3)
- [CVE-2017-7518](https://insights.sbomify.com/CVE-2017-7518/): Privilege escalation in Kernel: (medium 5.5)
- [CVE-2017-7517](https://insights.sbomify.com/CVE-2017-7517/): Information disclosure in Hawkular Metrics (low 3.5)
- [CVE-2017-7515](https://insights.sbomify.com/CVE-2017-7515/): Denial of service in poppler (medium 5.5)
- [CVE-2017-7514](https://insights.sbomify.com/CVE-2017-7514/): Cross-site scripting in Red Hat Satellite (medium 4.3)
- [CVE-2017-7513](https://insights.sbomify.com/CVE-2017-7513/): Security feature bypass in Red Hat Satellite (medium 5.4)
- [CVE-2017-7512](https://insights.sbomify.com/CVE-2017-7512/): Auth bypass in 3scale AMP before 2.0.0 (critical 9.8)
- [CVE-2017-7511](https://insights.sbomify.com/CVE-2017-7511/): Null dereference in poppler (medium 5.5)
- [CVE-2017-7510](https://insights.sbomify.com/CVE-2017-7510/): Information disclosure in RHV (high 8.8)
- [CVE-2017-7509](https://insights.sbomify.com/CVE-2017-7509/): Denial of service in Certificate System (low 3.5)
- [CVE-2017-7508](https://insights.sbomify.com/CVE-2017-7508/): Denial of service in OpenVPN (high 7.5)
- [CVE-2017-7507](https://insights.sbomify.com/CVE-2017-7507/): Null dereference in gnutls (high 7.5)
- [CVE-2017-7506](https://insights.sbomify.com/CVE-2017-7506/): Memory corruption in spice (high 8.8)
- [CVE-2017-7505](https://insights.sbomify.com/CVE-2017-7505/): Missing authorization in foreman (high 8.8)
- [CVE-2017-7504](https://insights.sbomify.com/CVE-2017-7504/): Deserialization in JBoss (critical 9.8)
- [CVE-2017-7503](https://insights.sbomify.com/CVE-2017-7503/): XML external entity in JBoss Enterprise Application Platform (critical 9.8)
- [CVE-2017-7502](https://insights.sbomify.com/CVE-2017-7502/): Null dereference in nss (high 7.5)
- [CVE-2017-7501](https://insights.sbomify.com/CVE-2017-7501/): Path traversal in rpm (high 7.8)
- [CVE-2017-7500](https://insights.sbomify.com/CVE-2017-7500/): Path traversal in rpm (high 7.3)
- [CVE-2017-7497](https://insights.sbomify.com/CVE-2017-7497/): Missing authorization in CFME (medium 4.1)
- [CVE-2017-7496](https://insights.sbomify.com/CVE-2017-7496/): Privilege escalation in fedora-arm-installer (high 7.0)
- [CVE-2017-7495](https://insights.sbomify.com/CVE-2017-7495/): Information disclosure in Linux kernel before 4.6.2 (medium 5.5)
- [CVE-2017-7494](https://insights.sbomify.com/CVE-2017-7494/): Samba Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-7493](https://insights.sbomify.com/CVE-2017-7493/): Privilege escalation in qemu (high 7.8)
- [CVE-2017-7491](https://insights.sbomify.com/CVE-2017-7491/): Moodle Cross-Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2017-7490](https://insights.sbomify.com/CVE-2017-7490/): Moodle Unauthorized searching of arbitrary blogs by typing full url (medium 5.3)
- [CVE-2017-7489](https://insights.sbomify.com/CVE-2017-7489/): Moodle External blog editing takeover (medium 6.3)
- [CVE-2017-7488](https://insights.sbomify.com/CVE-2017-7488/): Information disclosure in authconfig (medium 4.3)
- [CVE-2017-7487](https://insights.sbomify.com/CVE-2017-7487/): Use after free in Linux kernel through 4.11.1 (high 7.8)
- [CVE-2017-7486](https://insights.sbomify.com/CVE-2017-7486/): Information disclosure in PostgreSQL (high 7.5)
- [CVE-2017-7485](https://insights.sbomify.com/CVE-2017-7485/): Security feature bypass in PostgreSQL (medium 5.9)
- [CVE-2017-7484](https://insights.sbomify.com/CVE-2017-7484/): Information disclosure in PostgreSQL (high 7.5)
- [CVE-2017-7483](https://insights.sbomify.com/CVE-2017-7483/): Integer overflow in rxvt (high 7.5)
- [CVE-2017-7482](https://insights.sbomify.com/CVE-2017-7482/): Integer overflow in kernel: (high 7.1)
- [CVE-2017-7481](https://insights.sbomify.com/CVE-2017-7481/): Ansible fails to properly mark lookup-plugin results as unsafe (medium 5.3)
- [CVE-2017-7480](https://insights.sbomify.com/CVE-2017-7480/): Supply chain in rkhunter (critical 9.8)
- [CVE-2017-7479](https://insights.sbomify.com/CVE-2017-7479/): Denial of service in openvpn (medium 6.5)
- [CVE-2017-7478](https://insights.sbomify.com/CVE-2017-7478/): Denial of service in openvpn (high 7.5)
- [CVE-2017-7477](https://insights.sbomify.com/CVE-2017-7477/): Memory corruption in Linux kernel (high 7.0)
- [CVE-2017-7476](https://insights.sbomify.com/CVE-2017-7476/): Memory corruption in Gnulib before 2017-04-26 (critical 9.8)
- [CVE-2017-7475](https://insights.sbomify.com/CVE-2017-7475/): cairo is vulnerable to denial of service due to a null pointer dereference (medium 5.5)
- [CVE-2017-7474](https://insights.sbomify.com/CVE-2017-7474/): keycloak-connect and keycloak-js improperly handle invalid tokens (critical 9.8)
- [CVE-2017-7472](https://insights.sbomify.com/CVE-2017-7472/): Denial of service in Linux kernel before 4.10.13 (medium 5.5)
- [CVE-2017-7471](https://insights.sbomify.com/CVE-2017-7471/): Path traversal in n/a (critical 9.0)
- [CVE-2017-7470](https://insights.sbomify.com/CVE-2017-7470/): Missing authorization in spacewalk-backend (medium 6.5)
- [CVE-2017-7468](https://insights.sbomify.com/CVE-2017-7468/): Security feature bypass in curl (medium 4.8)
- [CVE-2017-7467](https://insights.sbomify.com/CVE-2017-7467/): Memory corruption in minicom (high 7.0)
- [CVE-2017-7466](https://insights.sbomify.com/CVE-2017-7466/): Ansible Arbitrary Code Execution (high 8.0)
- [CVE-2017-7465](https://insights.sbomify.com/CVE-2017-7465/): Code injection in jboss (critical 9.0)
- [CVE-2017-7464](https://insights.sbomify.com/CVE-2017-7464/): XML external entity in JBoss (high 8.7)
- [CVE-2017-7463](https://insights.sbomify.com/CVE-2017-7463/): Cross-site scripting in business-central (medium 6.1)
- [CVE-2017-7462](https://insights.sbomify.com/CVE-2017-7462/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2017-7461](https://insights.sbomify.com/CVE-2017-7461/): Path traversal in n/a (medium 4.9)
- [CVE-2017-7459](https://insights.sbomify.com/CVE-2017-7459/): Other in n/a (high 7.5)
- [CVE-2017-7458](https://insights.sbomify.com/CVE-2017-7458/): Null dereference in n/a (high 7.5)
- [CVE-2017-7457](https://insights.sbomify.com/CVE-2017-7457/): XML external entity in n/a (medium 5.0)
- [CVE-2017-7456](https://insights.sbomify.com/CVE-2017-7456/): Denial of service in n/a (high 7.5)
- [CVE-2017-7455](https://insights.sbomify.com/CVE-2017-7455/): Information disclosure in n/a (high 7.5)
- [CVE-2017-7454](https://insights.sbomify.com/CVE-2017-7454/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-7453](https://insights.sbomify.com/CVE-2017-7453/): Null dereference in n/a (medium 5.5)
- [CVE-2017-7452](https://insights.sbomify.com/CVE-2017-7452/): Null dereference in n/a (medium 5.5)
- [CVE-2017-7450](https://insights.sbomify.com/CVE-2017-7450/): Auth bypass in n/a (critical 9.8)
- [CVE-2017-7448](https://insights.sbomify.com/CVE-2017-7448/): Denial of service in n/a (medium 5.5)
- [CVE-2017-7447](https://insights.sbomify.com/CVE-2017-7447/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-7446](https://insights.sbomify.com/CVE-2017-7446/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-7444](https://insights.sbomify.com/CVE-2017-7444/): Other in n/a (high 7.8)
- [CVE-2017-7443](https://insights.sbomify.com/CVE-2017-7443/): Other in n/a (medium 6.1)
- [CVE-2017-7442](https://insights.sbomify.com/CVE-2017-7442/): Path traversal in n/a (high 8.8)
- [CVE-2017-7441](https://insights.sbomify.com/CVE-2017-7441/): Information disclosure in n/a (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/23/