# Vulnerabilities published in 2017


- [CVE-2017-9812](https://insights.sbomify.com/CVE-2017-9812/): Path traversal in n/a (high 7.5)
- [CVE-2017-9811](https://insights.sbomify.com/CVE-2017-9811/): Privilege escalation in n/a (critical 9.8)
- [CVE-2017-9810](https://insights.sbomify.com/CVE-2017-9810/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-9809](https://insights.sbomify.com/CVE-2017-9809/): Information disclosure in n/a (medium 5.3)
- [CVE-2017-9808](https://insights.sbomify.com/CVE-2017-9808/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9807](https://insights.sbomify.com/CVE-2017-9807/): Code injection in n/a (critical 9.8)
- [CVE-2017-9806](https://insights.sbomify.com/CVE-2017-9806/): Memory corruption in Apache OpenOffice (high 7.8)
- [CVE-2017-9805](https://insights.sbomify.com/CVE-2017-9805/): Apache Struts Deserialization of Untrusted Data (high 8.1, exploited in the wild)
- [CVE-2017-9804](https://insights.sbomify.com/CVE-2017-9804/): Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used (high 7.5)
- [CVE-2017-9803](https://insights.sbomify.com/CVE-2017-9803/): Apache Solr Kerberos delegation token functionality flaws (high 7.5)
- [CVE-2017-9802](https://insights.sbomify.com/CVE-2017-9802/): Improper Neutralization of Input During Web Page Generation Apache Sling Servlets Post (medium 6.1)
- [CVE-2017-9801](https://insights.sbomify.com/CVE-2017-9801/): Improper Input Validation in Apache Commons Email (high 7.5)
- [CVE-2017-9800](https://insights.sbomify.com/CVE-2017-9800/): A maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x before 1.9.7, and 1.10.0.x through 1.10.0-alpha (critical 9.8)
- [CVE-2017-9799](https://insights.sbomify.com/CVE-2017-9799/): Apache Storm it is possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user (high 8.8)
- [CVE-2017-9798](https://insights.sbomify.com/CVE-2017-9798/): Use after free in Apache HTTP Server (high 7.5)
- [CVE-2017-9797](https://insights.sbomify.com/CVE-2017-9797/): Apache Geode vulnerable to Exposure of Sensitive Information (medium 6.5)
- [CVE-2017-9796](https://insights.sbomify.com/CVE-2017-9796/): Apache Geode OQL bind parameter vulnerability (medium 5.3)
- [CVE-2017-9795](https://insights.sbomify.com/CVE-2017-9795/): Apache Geode OQL method invocation vulnerability (high 7.5)
- [CVE-2017-9794](https://insights.sbomify.com/CVE-2017-9794/): Apache Geode gfsh query vulnerability (medium 4.3)
- [CVE-2017-9793](https://insights.sbomify.com/CVE-2017-9793/): The REST Plugin in Apache Struts is using an outdated XStream library (high 7.5)
- [CVE-2017-9792](https://insights.sbomify.com/CVE-2017-9792/): Privilege escalation in Apache Impala (medium 6.5)
- [CVE-2017-9791](https://insights.sbomify.com/CVE-2017-9791/): Apache Struts 1 Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2017-9790](https://insights.sbomify.com/CVE-2017-9790/): Use after free in Apache Mesos (high 7.5)
- [CVE-2017-9789](https://insights.sbomify.com/CVE-2017-9789/): Use after free in Apache HTTP Server (high 7.5)
- [CVE-2017-9788](https://insights.sbomify.com/CVE-2017-9788/): Information disclosure in Apache HTTP Server (critical 9.1)
- [CVE-2017-9787](https://insights.sbomify.com/CVE-2017-9787/): Spring AOP functionality (Struts) vulnerable to DoS attack (high 7.5)
- [CVE-2017-9786](https://insights.sbomify.com/CVE-2017-9786/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9785](https://insights.sbomify.com/CVE-2017-9785/): Deserialization of Untrusted Data in NancyFX Nancy (critical 9.8)
- [CVE-2017-9783](https://insights.sbomify.com/CVE-2017-9783/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9782](https://insights.sbomify.com/CVE-2017-9782/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-9781](https://insights.sbomify.com/CVE-2017-9781/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9780](https://insights.sbomify.com/CVE-2017-9780/): Privilege escalation in n/a (high 7.8)
- [CVE-2017-9779](https://insights.sbomify.com/CVE-2017-9779/): Other in n/a (high 7.8)
- [CVE-2017-9778](https://insights.sbomify.com/CVE-2017-9778/): Denial of service in n/a (medium 5.5)
- [CVE-2017-9776](https://insights.sbomify.com/CVE-2017-9776/): Integer overflow in n/a (high 7.8)
- [CVE-2017-9775](https://insights.sbomify.com/CVE-2017-9775/): Memory corruption in n/a (medium 6.5)
- [CVE-2017-9774](https://insights.sbomify.com/CVE-2017-9774/): Code injection in n/a (high 8.8)
- [CVE-2017-9773](https://insights.sbomify.com/CVE-2017-9773/): Denial of service in n/a (medium 5.7)
- [CVE-2017-9772](https://insights.sbomify.com/CVE-2017-9772/): Privilege escalation in n/a (critical 9.8)
- [CVE-2017-9771](https://insights.sbomify.com/CVE-2017-9771/): Code injection in n/a (critical 9.8)
- [CVE-2017-9770](https://insights.sbomify.com/CVE-2017-9770/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-9769](https://insights.sbomify.com/CVE-2017-9769/): Privilege escalation in n/a (critical 9.8)
- [CVE-2017-9767](https://insights.sbomify.com/CVE-2017-9767/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-9766](https://insights.sbomify.com/CVE-2017-9766/): Denial of service in n/a (high 7.5)
- [CVE-2017-9765](https://insights.sbomify.com/CVE-2017-9765/): Integer overflow in n/a (high 8.1)
- [CVE-2017-9764](https://insights.sbomify.com/CVE-2017-9764/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9763](https://insights.sbomify.com/CVE-2017-9763/): Denial of service in n/a (high 7.5)
- [CVE-2017-9762](https://insights.sbomify.com/CVE-2017-9762/): Use after free in n/a (medium 5.5)
- [CVE-2017-9761](https://insights.sbomify.com/CVE-2017-9761/): Denial of service in n/a (medium 5.5)
- [CVE-2017-9759](https://insights.sbomify.com/CVE-2017-9759/): SQL injection in n/a (high 8.8)
- [CVE-2017-9758](https://insights.sbomify.com/CVE-2017-9758/): Security feature bypass in n/a (high 7.4)
- [CVE-2017-9757](https://insights.sbomify.com/CVE-2017-9757/): Command injection in n/a (high 8.8)
- [CVE-2017-9756](https://insights.sbomify.com/CVE-2017-9756/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9755](https://insights.sbomify.com/CVE-2017-9755/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9754](https://insights.sbomify.com/CVE-2017-9754/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9753](https://insights.sbomify.com/CVE-2017-9753/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9752](https://insights.sbomify.com/CVE-2017-9752/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9751](https://insights.sbomify.com/CVE-2017-9751/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9750](https://insights.sbomify.com/CVE-2017-9750/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9749](https://insights.sbomify.com/CVE-2017-9749/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9748](https://insights.sbomify.com/CVE-2017-9748/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9747](https://insights.sbomify.com/CVE-2017-9747/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9746](https://insights.sbomify.com/CVE-2017-9746/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9745](https://insights.sbomify.com/CVE-2017-9745/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9744](https://insights.sbomify.com/CVE-2017-9744/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9743](https://insights.sbomify.com/CVE-2017-9743/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9742](https://insights.sbomify.com/CVE-2017-9742/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9741](https://insights.sbomify.com/CVE-2017-9741/): Code injection in n/a (critical 9.8)
- [CVE-2017-9740](https://insights.sbomify.com/CVE-2017-9740/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9739](https://insights.sbomify.com/CVE-2017-9739/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9736](https://insights.sbomify.com/CVE-2017-9736/): Command injection in n/a (critical 9.8)
- [CVE-2017-9735](https://insights.sbomify.com/CVE-2017-9735/): Jetty vulnerable to exposure of sensitive information due to observable discrepancy (high 7.5)
- [CVE-2017-9732](https://insights.sbomify.com/CVE-2017-9732/): Denial of service in n/a (high 7.5)
- [CVE-2017-9731](https://insights.sbomify.com/CVE-2017-9731/): Information disclosure in n/a (high 7.5)
- [CVE-2017-9730](https://insights.sbomify.com/CVE-2017-9730/): SQL injection in n/a (critical 9.8)
- [CVE-2017-9729](https://insights.sbomify.com/CVE-2017-9729/): Denial of service in n/a (high 7.5)
- [CVE-2017-9728](https://insights.sbomify.com/CVE-2017-9728/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-9727](https://insights.sbomify.com/CVE-2017-9727/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9726](https://insights.sbomify.com/CVE-2017-9726/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9725](https://insights.sbomify.com/CVE-2017-9725/): Integer overflow in n/a (high 7.8)
- [CVE-2017-9724](https://insights.sbomify.com/CVE-2017-9724/): Privilege escalation in n/a (high 7.8)
- [CVE-2017-9723](https://insights.sbomify.com/CVE-2017-9723/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-9722](https://insights.sbomify.com/CVE-2017-9722/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-9721](https://insights.sbomify.com/CVE-2017-9721/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-9720](https://insights.sbomify.com/CVE-2017-9720/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9719](https://insights.sbomify.com/CVE-2017-9719/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-9718](https://insights.sbomify.com/CVE-2017-9718/): Race condition in Android for MSM, Firefox OS for MSM, QRD Android (high 7.0)
- [CVE-2017-9717](https://insights.sbomify.com/CVE-2017-9717/): Memory corruption in n/a (high 7.5)
- [CVE-2017-9716](https://insights.sbomify.com/CVE-2017-9716/): Missing authorization in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-9715](https://insights.sbomify.com/CVE-2017-9715/): Memory corruption in n/a (high 7.5)
- [CVE-2017-9714](https://insights.sbomify.com/CVE-2017-9714/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9712](https://insights.sbomify.com/CVE-2017-9712/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.5)
- [CVE-2017-9711](https://insights.sbomify.com/CVE-2017-9711/): Permissions, Privileges, and Access Controls in Data (medium 6.7)
- [CVE-2017-9710](https://insights.sbomify.com/CVE-2017-9710/): Memory corruption in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-9709](https://insights.sbomify.com/CVE-2017-9709/): Privilege escalation in Android for MSM, Firefox OS for MSM, QRD Android (critical 9.8)
- [CVE-2017-9708](https://insights.sbomify.com/CVE-2017-9708/): Race condition in Android for MSM, Firefox OS for MSM, QRD Android (high 7.0)
- [CVE-2017-9706](https://insights.sbomify.com/CVE-2017-9706/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9705](https://insights.sbomify.com/CVE-2017-9705/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-9704](https://insights.sbomify.com/CVE-2017-9704/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.8)
- [CVE-2017-9703](https://insights.sbomify.com/CVE-2017-9703/): Use after free in Android for MSM, Firefox OS for MSM, QRD Android (high 7.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/3/