# Vulnerabilities published in 2017


- [CVE-2017-6379](https://insights.sbomify.com/CVE-2017-6379/): Drupal Cross-Site Request Forgery (CSRF) (high 7.5)
- [CVE-2017-6377](https://insights.sbomify.com/CVE-2017-6377/): Drupal editor module incorrectly checks access to inline private files (high 7.5)
- [CVE-2017-6371](https://insights.sbomify.com/CVE-2017-6371/): Denial of service in n/a (high 7.5)
- [CVE-2017-6370](https://insights.sbomify.com/CVE-2017-6370/): TYPO3 Information Disclosure Vulnerability (medium 5.3)
- [CVE-2017-6369](https://insights.sbomify.com/CVE-2017-6369/): Code injection in n/a (high 8.8)
- [CVE-2017-6367](https://insights.sbomify.com/CVE-2017-6367/): Denial of service in n/a (high 7.5)
- [CVE-2017-6366](https://insights.sbomify.com/CVE-2017-6366/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-6363](https://insights.sbomify.com/CVE-2017-6363/): Memory corruption in n/a (high 8.1)
- [CVE-2017-6362](https://insights.sbomify.com/CVE-2017-6362/): Use after free in n/a (high 7.5)
- [CVE-2017-6361](https://insights.sbomify.com/CVE-2017-6361/): Command injection in n/a (critical 9.8)
- [CVE-2017-6360](https://insights.sbomify.com/CVE-2017-6360/): Command injection in n/a (critical 9.8)
- [CVE-2017-6359](https://insights.sbomify.com/CVE-2017-6359/): Command injection in n/a (critical 9.8)
- [CVE-2017-6356](https://insights.sbomify.com/CVE-2017-6356/): Information disclosure in n/a (medium 5.3)
- [CVE-2017-6355](https://insights.sbomify.com/CVE-2017-6355/): Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause (medium 5.5)
- [CVE-2017-6353](https://insights.sbomify.com/CVE-2017-6353/): Use after free in n/a (medium 5.5)
- [CVE-2017-6351](https://insights.sbomify.com/CVE-2017-6351/): Hardcoded credentials in n/a (high 8.1)
- [CVE-2017-6350](https://insights.sbomify.com/CVE-2017-6350/): Integer overflow in n/a (critical 9.8)
- [CVE-2017-6349](https://insights.sbomify.com/CVE-2017-6349/): Integer overflow in n/a (critical 9.8)
- [CVE-2017-6348](https://insights.sbomify.com/CVE-2017-6348/): Denial of service in n/a (medium 5.5)
- [CVE-2017-6347](https://insights.sbomify.com/CVE-2017-6347/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6346](https://insights.sbomify.com/CVE-2017-6346/): Use after free in n/a (high 7.0)
- [CVE-2017-6345](https://insights.sbomify.com/CVE-2017-6345/): Null dereference in n/a (high 7.8)
- [CVE-2017-6344](https://insights.sbomify.com/CVE-2017-6344/): XML external entity in n/a (medium 5.9)
- [CVE-2017-6343](https://insights.sbomify.com/CVE-2017-6343/): Auth bypass in n/a (high 8.1)
- [CVE-2017-6342](https://insights.sbomify.com/CVE-2017-6342/): Auth bypass in n/a (critical 9.8)
- [CVE-2017-6341](https://insights.sbomify.com/CVE-2017-6341/): Information disclosure in n/a (medium 5.9)
- [CVE-2017-6340](https://insights.sbomify.com/CVE-2017-6340/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2017-6339](https://insights.sbomify.com/CVE-2017-6339/): Weak cryptography in n/a (medium 6.5)
- [CVE-2017-6338](https://insights.sbomify.com/CVE-2017-6338/): Missing authorization in n/a (medium 6.5)
- [CVE-2017-6335](https://insights.sbomify.com/CVE-2017-6335/): Denial of service in n/a (medium 5.5)
- [CVE-2017-6334](https://insights.sbomify.com/CVE-2017-6334/): NETGEAR DGN2200 Devices OS Command Injection (high 8.8, exploited in the wild)
- [CVE-2017-6331](https://insights.sbomify.com/CVE-2017-6331/): Security feature bypass in Symantec Endpoint Protection (high 7.1)
- [CVE-2017-6330](https://insights.sbomify.com/CVE-2017-6330/): Denial of service in Symantec Encryption Desktop (medium 6.5)
- [CVE-2017-6329](https://insights.sbomify.com/CVE-2017-6329/): Code injection in VIP Access for Desktop (high 7.8)
- [CVE-2017-6328](https://insights.sbomify.com/CVE-2017-6328/): Cross-site request forgery in Messaging Gateway (high 8.8)
- [CVE-2017-6327](https://insights.sbomify.com/CVE-2017-6327/): Symantec Messaging Gateway Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2017-6326](https://insights.sbomify.com/CVE-2017-6326/): Code injection in Messaging Gateway (critical 10.0)
- [CVE-2017-6325](https://insights.sbomify.com/CVE-2017-6325/): Code injection in Messaging Gateway (medium 6.6)
- [CVE-2017-6324](https://insights.sbomify.com/CVE-2017-6324/): Security feature bypass in Messaging Gateway (high 7.3)
- [CVE-2017-6323](https://insights.sbomify.com/CVE-2017-6323/): XML external entity in ITMS (high 8.0)
- [CVE-2017-6320](https://insights.sbomify.com/CVE-2017-6320/): Command injection in n/a (high 8.8)
- [CVE-2017-6319](https://insights.sbomify.com/CVE-2017-6319/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6318](https://insights.sbomify.com/CVE-2017-6318/): Information disclosure in n/a (high 7.5)
- [CVE-2017-6317](https://insights.sbomify.com/CVE-2017-6317/): Denial of service in n/a (medium 6.5)
- [CVE-2017-6316](https://insights.sbomify.com/CVE-2017-6316/): Citrix Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2017-6315](https://insights.sbomify.com/CVE-2017-6315/): Code injection in n/a (critical 9.8)
- [CVE-2017-6314](https://insights.sbomify.com/CVE-2017-6314/): Denial of service in n/a (medium 5.5)
- [CVE-2017-6313](https://insights.sbomify.com/CVE-2017-6313/): Integer overflow in n/a (high 7.1)
- [CVE-2017-6312](https://insights.sbomify.com/CVE-2017-6312/): Integer overflow in n/a (medium 5.5)
- [CVE-2017-6311](https://insights.sbomify.com/CVE-2017-6311/): Null dereference in n/a (high 7.5)
- [CVE-2017-6310](https://insights.sbomify.com/CVE-2017-6310/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6309](https://insights.sbomify.com/CVE-2017-6309/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6308](https://insights.sbomify.com/CVE-2017-6308/): Integer overflow in n/a (high 7.8)
- [CVE-2017-6307](https://insights.sbomify.com/CVE-2017-6307/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6306](https://insights.sbomify.com/CVE-2017-6306/): Path traversal in n/a (high 7.8)
- [CVE-2017-6305](https://insights.sbomify.com/CVE-2017-6305/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6304](https://insights.sbomify.com/CVE-2017-6304/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6303](https://insights.sbomify.com/CVE-2017-6303/): Integer overflow in n/a (high 7.8)
- [CVE-2017-6302](https://insights.sbomify.com/CVE-2017-6302/): Integer overflow in n/a (high 7.8)
- [CVE-2017-6301](https://insights.sbomify.com/CVE-2017-6301/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6300](https://insights.sbomify.com/CVE-2017-6300/): Memory corruption in n/a (high 7.8)
- [CVE-2017-6299](https://insights.sbomify.com/CVE-2017-6299/): Denial of service in n/a (medium 5.5)
- [CVE-2017-6298](https://insights.sbomify.com/CVE-2017-6298/): Null dereference in n/a (high 7.8)
- [CVE-2017-6297](https://insights.sbomify.com/CVE-2017-6297/): Weak cryptography in n/a (medium 5.9)
- [CVE-2017-6296](https://insights.sbomify.com/CVE-2017-6296/): Race condition in SHIELD TV (high 7.0)
- [CVE-2017-6295](https://insights.sbomify.com/CVE-2017-6295/): Information disclosure in SHIELD TV (high 8.4)
- [CVE-2017-6294](https://insights.sbomify.com/CVE-2017-6294/): Memory corruption in GPU Display Driver (high 7.8)
- [CVE-2017-6293](https://insights.sbomify.com/CVE-2017-6293/): Memory corruption in Android (high 7.8)
- [CVE-2017-6292](https://insights.sbomify.com/CVE-2017-6292/): Integer overflow in GPU Display Driver (high 7.8)
- [CVE-2017-6290](https://insights.sbomify.com/CVE-2017-6290/): Integer overflow in GPU Display Driver (high 7.8)
- [CVE-2017-6289](https://insights.sbomify.com/CVE-2017-6289/): Memory corruption in Android (high 7.8)
- [CVE-2017-6288](https://insights.sbomify.com/CVE-2017-6288/): Information disclosure in Android (medium 5.5)
- [CVE-2017-6287](https://insights.sbomify.com/CVE-2017-6287/): Information disclosure in Android (medium 5.5)
- [CVE-2017-6286](https://insights.sbomify.com/CVE-2017-6286/): Memory corruption in Android (high 7.8)
- [CVE-2017-6285](https://insights.sbomify.com/CVE-2017-6285/): Information disclosure in Android (medium 5.5)
- [CVE-2017-6284](https://insights.sbomify.com/CVE-2017-6284/): Weak cryptography in SHIELD TV (medium 5.5)
- [CVE-2017-6283](https://insights.sbomify.com/CVE-2017-6283/): Information disclosure in SHIELD TV (medium 5.5)
- [CVE-2017-6282](https://insights.sbomify.com/CVE-2017-6282/): Memory corruption in SHIELD TV (high 7.8)
- [CVE-2017-6281](https://insights.sbomify.com/CVE-2017-6281/): Memory corruption in Android (high 7.8)
- [CVE-2017-6280](https://insights.sbomify.com/CVE-2017-6280/): Information disclosure in Android (high 7.5)
- [CVE-2017-6279](https://insights.sbomify.com/CVE-2017-6279/): Memory corruption in Android (high 7.8)
- [CVE-2017-6278](https://insights.sbomify.com/CVE-2017-6278/): Memory corruption in NVIDIA Tegra (high 7.8)
- [CVE-2017-6277](https://insights.sbomify.com/CVE-2017-6277/): Integer overflow in GPU Display Driver (high 7.8)
- [CVE-2017-6276](https://insights.sbomify.com/CVE-2017-6276/): Use after free in Android (high 7.8)
- [CVE-2017-6275](https://insights.sbomify.com/CVE-2017-6275/): Information disclosure in Pixel (high 7.5)
- [CVE-2017-6274](https://insights.sbomify.com/CVE-2017-6274/): Memory corruption in Pixel (critical 9.8)
- [CVE-2017-6273](https://insights.sbomify.com/CVE-2017-6273/): Memory corruption in Jetson (high 7.8)
- [CVE-2017-6272](https://insights.sbomify.com/CVE-2017-6272/): Other in GPU Display Driver (high 7.8)
- [CVE-2017-6271](https://insights.sbomify.com/CVE-2017-6271/): Denial of service in GPU Display Driver (medium 5.5)
- [CVE-2017-6270](https://insights.sbomify.com/CVE-2017-6270/): Denial of service in GPU Display Driver (medium 5.5)
- [CVE-2017-6269](https://insights.sbomify.com/CVE-2017-6269/): Null dereference in GPU Display Driver (high 7.8)
- [CVE-2017-6268](https://insights.sbomify.com/CVE-2017-6268/): Integer overflow in GPU Display Driver (high 7.8)
- [CVE-2017-6267](https://insights.sbomify.com/CVE-2017-6267/): Denial of service in GPU Display Driver (medium 5.5)
- [CVE-2017-6266](https://insights.sbomify.com/CVE-2017-6266/): Missing authorization in GPU Display Driver (medium 5.5)
- [CVE-2017-6264](https://insights.sbomify.com/CVE-2017-6264/): Memory corruption in Android (high 7.8)
- [CVE-2017-6263](https://insights.sbomify.com/CVE-2017-6263/): Use after free in Android (high 7.8)
- [CVE-2017-6262](https://insights.sbomify.com/CVE-2017-6262/): Use after free in Android (high 7.0)
- [CVE-2017-6261](https://insights.sbomify.com/CVE-2017-6261/): Security feature bypass in NVIDIA Vibrante Linux (high 8.2)
- [CVE-2017-6260](https://insights.sbomify.com/CVE-2017-6260/): Denial of service in NVIDIA Windows GPU Display Driver (medium 6.5)
- [CVE-2017-6259](https://insights.sbomify.com/CVE-2017-6259/): Denial of service in NVIDIA GPU Display Driver (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/33/