# Vulnerabilities published in 2017


- [CVE-2017-7322](https://insights.sbomify.com/CVE-2017-7322/): Weak cryptography in n/a (high 8.1)
- [CVE-2017-7321](https://insights.sbomify.com/CVE-2017-7321/): Code injection in n/a (critical 9.8)
- [CVE-2017-7320](https://insights.sbomify.com/CVE-2017-7320/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7318](https://insights.sbomify.com/CVE-2017-7318/): Command injection in n/a (critical 9.8)
- [CVE-2017-7317](https://insights.sbomify.com/CVE-2017-7317/): Information disclosure in n/a (critical 9.8)
- [CVE-2017-7316](https://insights.sbomify.com/CVE-2017-7316/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7315](https://insights.sbomify.com/CVE-2017-7315/): Information disclosure in n/a (critical 9.8)
- [CVE-2017-7314](https://insights.sbomify.com/CVE-2017-7314/): Information disclosure in n/a (high 7.5)
- [CVE-2017-7313](https://insights.sbomify.com/CVE-2017-7313/): Information disclosure in n/a (high 7.5)
- [CVE-2017-7312](https://insights.sbomify.com/CVE-2017-7312/): Missing authorization in n/a (critical 9.8)
- [CVE-2017-7310](https://insights.sbomify.com/CVE-2017-7310/): Memory corruption in n/a (high 7.8)
- [CVE-2017-7309](https://insights.sbomify.com/CVE-2017-7309/): MantisBT vulnerable to XSS through config_option parameter in adm_config_report.php (medium 4.8)
- [CVE-2017-7308](https://insights.sbomify.com/CVE-2017-7308/): Integer overflow in n/a (high 7.8)
- [CVE-2017-7307](https://insights.sbomify.com/CVE-2017-7307/): Privilege escalation in n/a (medium 6.8)
- [CVE-2017-7306](https://insights.sbomify.com/CVE-2017-7306/): Hardcoded credentials in n/a (medium 6.4)
- [CVE-2017-7305](https://insights.sbomify.com/CVE-2017-7305/): Security feature bypass in n/a (medium 4.6)
- [CVE-2017-7304](https://insights.sbomify.com/CVE-2017-7304/): Null dereference in n/a (high 7.5)
- [CVE-2017-7303](https://insights.sbomify.com/CVE-2017-7303/): Null dereference in n/a (high 7.5)
- [CVE-2017-7302](https://insights.sbomify.com/CVE-2017-7302/): Denial of service in n/a (high 7.5)
- [CVE-2017-7301](https://insights.sbomify.com/CVE-2017-7301/): Integer overflow in n/a (high 7.5)
- [CVE-2017-7300](https://insights.sbomify.com/CVE-2017-7300/): Memory corruption in n/a (high 7.5)
- [CVE-2017-7299](https://insights.sbomify.com/CVE-2017-7299/): Denial of service in n/a (medium 5.5)
- [CVE-2017-7298](https://insights.sbomify.com/CVE-2017-7298/): Moodle Cross-site Scripting in the Course summary filter of the Add a new course (medium 5.4)
- [CVE-2017-7297](https://insights.sbomify.com/CVE-2017-7297/): Rancher Access Control Vulnerability (high 8.8)
- [CVE-2017-7296](https://insights.sbomify.com/CVE-2017-7296/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7295](https://insights.sbomify.com/CVE-2017-7295/): Use after free in n/a (high 7.5)
- [CVE-2017-7294](https://insights.sbomify.com/CVE-2017-7294/): Integer overflow in n/a (high 7.8)
- [CVE-2017-7293](https://insights.sbomify.com/CVE-2017-7293/): Deserialization in n/a (high 7.8)
- [CVE-2017-7290](https://insights.sbomify.com/CVE-2017-7290/): SQL injection in n/a (high 7.2)
- [CVE-2017-7288](https://insights.sbomify.com/CVE-2017-7288/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7285](https://insights.sbomify.com/CVE-2017-7285/): Denial of service in n/a (high 7.5)
- [CVE-2017-7284](https://insights.sbomify.com/CVE-2017-7284/): Auth bypass in n/a (high 8.8)
- [CVE-2017-7283](https://insights.sbomify.com/CVE-2017-7283/): Command injection in n/a (high 8.8)
- [CVE-2017-7282](https://insights.sbomify.com/CVE-2017-7282/): Path traversal in n/a (medium 5.5)
- [CVE-2017-7281](https://insights.sbomify.com/CVE-2017-7281/): File upload in n/a (high 8.8)
- [CVE-2017-7280](https://insights.sbomify.com/CVE-2017-7280/): Command injection in n/a (critical 9.8)
- [CVE-2017-7279](https://insights.sbomify.com/CVE-2017-7279/): Privilege escalation in n/a (critical 9.8)
- [CVE-2017-7278](https://insights.sbomify.com/CVE-2017-7278/): Other in n/a (critical 9.8)
- [CVE-2017-7277](https://insights.sbomify.com/CVE-2017-7277/): Information disclosure in n/a (high 7.1)
- [CVE-2017-7276](https://insights.sbomify.com/CVE-2017-7276/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7275](https://insights.sbomify.com/CVE-2017-7275/): Denial of service in n/a (medium 5.5)
- [CVE-2017-7274](https://insights.sbomify.com/CVE-2017-7274/): Null dereference in n/a (medium 5.5)
- [CVE-2017-7273](https://insights.sbomify.com/CVE-2017-7273/): Integer overflow in n/a (medium 6.6)
- [CVE-2017-7272](https://insights.sbomify.com/CVE-2017-7272/): Server-side request forgery in n/a (high 7.4)
- [CVE-2017-7271](https://insights.sbomify.com/CVE-2017-7271/): Yii Framework Reflected XSS (medium 6.1)
- [CVE-2017-7269](https://insights.sbomify.com/CVE-2017-7269/): Microsoft Windows Server Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2017-7266](https://insights.sbomify.com/CVE-2017-7266/): Netflix Security Monkey Open Redirect vulnerability (medium 6.1)
- [CVE-2017-7264](https://insights.sbomify.com/CVE-2017-7264/): Use after free in n/a (medium 5.3)
- [CVE-2017-7263](https://insights.sbomify.com/CVE-2017-7263/): Memory corruption in n/a (high 7.8)
- [CVE-2017-7262](https://insights.sbomify.com/CVE-2017-7262/): Denial of service in n/a (medium 5.5)
- [CVE-2017-7261](https://insights.sbomify.com/CVE-2017-7261/): Null dereference in n/a (medium 5.5)
- [CVE-2017-7258](https://insights.sbomify.com/CVE-2017-7258/): Path traversal in n/a (high 7.5)
- [CVE-2017-7257](https://insights.sbomify.com/CVE-2017-7257/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-7256](https://insights.sbomify.com/CVE-2017-7256/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-7255](https://insights.sbomify.com/CVE-2017-7255/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-7253](https://insights.sbomify.com/CVE-2017-7253/): Auth bypass in n/a (high 8.8)
- [CVE-2017-7252](https://insights.sbomify.com/CVE-2017-7252/): Weak cryptography in n/a (high 7.5)
- [CVE-2017-7251](https://insights.sbomify.com/CVE-2017-7251/): Pi Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2017-7250](https://insights.sbomify.com/CVE-2017-7250/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7249](https://insights.sbomify.com/CVE-2017-7249/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7248](https://insights.sbomify.com/CVE-2017-7248/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7247](https://insights.sbomify.com/CVE-2017-7247/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7246](https://insights.sbomify.com/CVE-2017-7246/): Memory corruption in n/a (high 7.8)
- [CVE-2017-7245](https://insights.sbomify.com/CVE-2017-7245/): Memory corruption in n/a (high 7.8)
- [CVE-2017-7244](https://insights.sbomify.com/CVE-2017-7244/): Denial of service in n/a (medium 5.5)
- [CVE-2017-7243](https://insights.sbomify.com/CVE-2017-7243/): Null dereference in n/a (high 7.5)
- [CVE-2017-7242](https://insights.sbomify.com/CVE-2017-7242/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7241](https://insights.sbomify.com/CVE-2017-7241/): MantisBT XSS via move_attachments_page.php (medium 4.8)
- [CVE-2017-7240](https://insights.sbomify.com/CVE-2017-7240/): Path traversal in n/a (high 7.5)
- [CVE-2017-7239](https://insights.sbomify.com/CVE-2017-7239/): Other in n/a (critical 9.8)
- [CVE-2017-7237](https://insights.sbomify.com/CVE-2017-7237/): Path traversal in n/a (critical 9.8)
- [CVE-2017-7236](https://insights.sbomify.com/CVE-2017-7236/): SQL injection in n/a (high 7.5)
- [CVE-2017-7235](https://insights.sbomify.com/CVE-2017-7235/): cfscrape Improper Input Validation vulnerability (high 8.8)
- [CVE-2017-7234](https://insights.sbomify.com/CVE-2017-7234/): Django open redirect (medium 6.1)
- [CVE-2017-7233](https://insights.sbomify.com/CVE-2017-7233/): Django open redirect and possible XSS attack via user-supplied numeric redirect URLs (medium 6.1)
- [CVE-2017-7231](https://insights.sbomify.com/CVE-2017-7231/): Memory corruption in n/a (high 7.8)
- [CVE-2017-7230](https://insights.sbomify.com/CVE-2017-7230/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-7229](https://insights.sbomify.com/CVE-2017-7229/): Information disclosure in n/a (critical 9.1)
- [CVE-2017-7228](https://insights.sbomify.com/CVE-2017-7228/): Memory corruption in n/a (high 8.2)
- [CVE-2017-7227](https://insights.sbomify.com/CVE-2017-7227/): Memory corruption in n/a (high 7.5)
- [CVE-2017-7226](https://insights.sbomify.com/CVE-2017-7226/): Information disclosure in n/a (critical 9.1)
- [CVE-2017-7225](https://insights.sbomify.com/CVE-2017-7225/): Null dereference in n/a (high 7.5)
- [CVE-2017-7224](https://insights.sbomify.com/CVE-2017-7224/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-7223](https://insights.sbomify.com/CVE-2017-7223/): Memory corruption in n/a (high 7.5)
- [CVE-2017-7222](https://insights.sbomify.com/CVE-2017-7222/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7221](https://insights.sbomify.com/CVE-2017-7221/): SQL injection in n/a (high 8.8)
- [CVE-2017-7220](https://insights.sbomify.com/CVE-2017-7220/): Privilege escalation in n/a (high 8.8)
- [CVE-2017-7219](https://insights.sbomify.com/CVE-2017-7219/): Memory corruption in n/a (high 8.8)
- [CVE-2017-7218](https://insights.sbomify.com/CVE-2017-7218/): Privilege escalation in n/a (high 7.8)
- [CVE-2017-7217](https://insights.sbomify.com/CVE-2017-7217/): Other in n/a (medium 4.3)
- [CVE-2017-7216](https://insights.sbomify.com/CVE-2017-7216/): Information disclosure in n/a (medium 6.5)
- [CVE-2017-7215](https://insights.sbomify.com/CVE-2017-7215/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-7214](https://insights.sbomify.com/CVE-2017-7214/): OpenStack Nova logs sensitive context from notification exceptions (critical 9.8)
- [CVE-2017-7213](https://insights.sbomify.com/CVE-2017-7213/): Auth bypass in n/a (critical 10.0)
- [CVE-2017-7210](https://insights.sbomify.com/CVE-2017-7210/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-7209](https://insights.sbomify.com/CVE-2017-7209/): Null dereference in n/a (medium 5.5)
- [CVE-2017-7208](https://insights.sbomify.com/CVE-2017-7208/): Information disclosure in n/a (high 7.1)
- [CVE-2017-7207](https://insights.sbomify.com/CVE-2017-7207/): Null dereference in n/a (medium 5.5)
- [CVE-2017-7206](https://insights.sbomify.com/CVE-2017-7206/): Information disclosure in n/a (high 7.1)
- [CVE-2017-7205](https://insights.sbomify.com/CVE-2017-7205/): Cross-site scripting in n/a (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/25/