# Vulnerabilities published in 2017 - [CVE-2017-2642](https://insights.sbomify.com/CVE-2017-2642/): Moodle User fullname disclosure on user preferences page (medium 6.5) - [CVE-2017-2641](https://insights.sbomify.com/CVE-2017-2641/): Moodle SQL injection via user preferences (critical 9.8) - [CVE-2017-2640](https://insights.sbomify.com/CVE-2017-2640/): Memory corruption in pidgin (high 7.5) - [CVE-2017-2639](https://insights.sbomify.com/CVE-2017-2639/): Security feature bypass in CloudForms (medium 6.5) - [CVE-2017-2638](https://insights.sbomify.com/CVE-2017-2638/): Infinispan Rest API Does Not Enforce Auth Constraints (medium 6.5) - [CVE-2017-2637](https://insights.sbomify.com/CVE-2017-2637/): Auth bypass in rhosp-director (critical 9.9) - [CVE-2017-2636](https://insights.sbomify.com/CVE-2017-2636/): Race condition in debian:debian linux (high 7.0) - [CVE-2017-2635](https://insights.sbomify.com/CVE-2017-2635/): Null dereference in libvirt (high 7.7) - [CVE-2017-2634](https://insights.sbomify.com/CVE-2017-2634/): Memory corruption in kernel: (high 7.5) - [CVE-2017-2633](https://insights.sbomify.com/CVE-2017-2633/): Memory corruption in Qemu: (medium 5.4) - [CVE-2017-2632](https://insights.sbomify.com/CVE-2017-2632/): Privilege escalation in cfme (medium 4.9) - [CVE-2017-2630](https://insights.sbomify.com/CVE-2017-2630/): Memory corruption in Qemu: (medium 5.5) - [CVE-2017-2629](https://insights.sbomify.com/CVE-2017-2629/): Security feature bypass in curl (medium 4.3) - [CVE-2017-2628](https://insights.sbomify.com/CVE-2017-2628/): Auth bypass in curl (critical 9.8) - [CVE-2017-2627](https://insights.sbomify.com/CVE-2017-2627/): Misconfiguration in openstack-tripleo-common (high 8.2) - [CVE-2017-2626](https://insights.sbomify.com/CVE-2017-2626/): Weak cryptography in libICE (medium 5.2) - [CVE-2017-2625](https://insights.sbomify.com/CVE-2017-2625/): Weak cryptography in libXdmcp (medium 6.5) - [CVE-2017-2624](https://insights.sbomify.com/CVE-2017-2624/): Information disclosure in xorg-x11-server (medium 5.9) - [CVE-2017-2623](https://insights.sbomify.com/CVE-2017-2623/): Security feature bypass in rpm-ostree, (medium 5.3) - [CVE-2017-2622](https://insights.sbomify.com/CVE-2017-2622/): Information disclosure in openstack-mistral (medium 5.9) - [CVE-2017-2621](https://insights.sbomify.com/CVE-2017-2621/): Misconfiguration in openstack-heat (medium 5.9) - [CVE-2017-2620](https://insights.sbomify.com/CVE-2017-2620/): Memory corruption in Qemu: (medium 5.5) - [CVE-2017-2619](https://insights.sbomify.com/CVE-2017-2619/): Race condition in samba (high 7.5) - [CVE-2017-2618](https://insights.sbomify.com/CVE-2017-2618/): Memory corruption in kernel (medium 5.5) - [CVE-2017-2617](https://insights.sbomify.com/CVE-2017-2617/): File upload in hawtio (high 7.6) - [CVE-2017-2616](https://insights.sbomify.com/CVE-2017-2616/): Race condition in util-linux (medium 5.5) - [CVE-2017-2615](https://insights.sbomify.com/CVE-2017-2615/): Memory corruption in display (medium 5.5) - [CVE-2017-2614](https://insights.sbomify.com/CVE-2017-2614/): Auth bypass in ovirt-engine-extension-aaa-jdbc (medium 6.8) - [CVE-2017-2613](https://insights.sbomify.com/CVE-2017-2613/): Cross-Site Request Forgery in Jenkins (medium 5.4) - [CVE-2017-2612](https://insights.sbomify.com/CVE-2017-2612/): Incorrect Permission Assignment for Critical Resource in Jenkins (medium 5.4) - [CVE-2017-2611](https://insights.sbomify.com/CVE-2017-2611/): Incorrect Authorization in Jenkins Core (medium 4.3) - [CVE-2017-2610](https://insights.sbomify.com/CVE-2017-2610/): Improper Neutralization of Input During Web Page Generation in Jenkins (medium 5.4) - [CVE-2017-2609](https://insights.sbomify.com/CVE-2017-2609/): Exposure of Sensitive Information to an Unauthorized Actor in Jenkins (medium 4.3) - [CVE-2017-2608](https://insights.sbomify.com/CVE-2017-2608/): Deserialization of Untrusted Data in Jenkins (high 8.8) - [CVE-2017-2607](https://insights.sbomify.com/CVE-2017-2607/): Improper Neutralization of Input During Web Page Generation in Jenkins (medium 4.2) - [CVE-2017-2606](https://insights.sbomify.com/CVE-2017-2606/): Exposure of Sensitive Information to an Unauthorized Actor in Jenkins (medium 4.3) - [CVE-2017-2604](https://insights.sbomify.com/CVE-2017-2604/): Improper Authentication in Jenkins (medium 4.3) - [CVE-2017-2603](https://insights.sbomify.com/CVE-2017-2603/): Exposure of Sensitive Information to an Unauthorized Actor in Jenkins (low 2.6) - [CVE-2017-2602](https://insights.sbomify.com/CVE-2017-2602/): Incomplete List of Disallowed Inputs in Jenkins (low 3.1) - [CVE-2017-2601](https://insights.sbomify.com/CVE-2017-2601/): Cross-site Scripting in Jenkins (medium 6.1) - [CVE-2017-2600](https://insights.sbomify.com/CVE-2017-2600/): Exposure of Sensitive Information to an Unauthorized Actor in Jenkins (medium 4.3) - [CVE-2017-2599](https://insights.sbomify.com/CVE-2017-2599/): Incorrect Authorization in Jenkins (medium 5.4) - [CVE-2017-2598](https://insights.sbomify.com/CVE-2017-2598/): Inadequate Encryption Strength in Jenkins (medium 4.3) - [CVE-2017-2596](https://insights.sbomify.com/CVE-2017-2596/): Denial of service in linux:linux kernel (medium 6.5) - [CVE-2017-2595](https://insights.sbomify.com/CVE-2017-2595/): Path traversal in wildfly (high 7.7) - [CVE-2017-2594](https://insights.sbomify.com/CVE-2017-2594/): Path Traversal in io.hawt:project (medium 5.4) - [CVE-2017-2592](https://insights.sbomify.com/CVE-2017-2592/): oslo.middleware Information Disclosure vulnerability (medium 5.9) - [CVE-2017-2591](https://insights.sbomify.com/CVE-2017-2591/): Memory corruption in 389-ds-base (low 3.7) - [CVE-2017-2590](https://insights.sbomify.com/CVE-2017-2590/): Missing authorization in ipa (high 8.1) - [CVE-2017-2589](https://insights.sbomify.com/CVE-2017-2589/): Insecure cookie sharing in Hawtio (high 8.7) - [CVE-2017-2587](https://insights.sbomify.com/CVE-2017-2587/): Denial of service in netpbm (low 3.3) - [CVE-2017-2586](https://insights.sbomify.com/CVE-2017-2586/): Null dereference in netpbm (low 3.3) - [CVE-2017-2585](https://insights.sbomify.com/CVE-2017-2585/): keycloak-core vulnerable to timing attacks against JWS token verification (medium 5.9) - [CVE-2017-2584](https://insights.sbomify.com/CVE-2017-2584/): Use after free in linux:linux kernel (high 7.1) - [CVE-2017-2583](https://insights.sbomify.com/CVE-2017-2583/): Privilege escalation in linux:linux kernel (high 8.4) - [CVE-2017-2582](https://insights.sbomify.com/CVE-2017-2582/): keycloak-core discloses system properties (medium 6.5) - [CVE-2017-2581](https://insights.sbomify.com/CVE-2017-2581/): Memory corruption in netpbm (medium 4.5) - [CVE-2017-2580](https://insights.sbomify.com/CVE-2017-2580/): Memory corruption in netpbm (medium 4.5) - [CVE-2017-2579](https://insights.sbomify.com/CVE-2017-2579/): Memory corruption in netpbm (low 3.3) - [CVE-2017-2578](https://insights.sbomify.com/CVE-2017-2578/): Moodle Cross-site Scripting in assignment submission page (medium 6.1) - [CVE-2017-2576](https://insights.sbomify.com/CVE-2017-2576/): Moodle Incorrect sanitation of attributes in forums (medium 5.3) - [CVE-2017-2575](https://insights.sbomify.com/CVE-2017-2575/): Null dereference in libbpg (medium 6.5) - [CVE-2017-2551](https://insights.sbomify.com/CVE-2017-2551/): Information disclosure in backwpup (high 7.5) - [CVE-2017-2550](https://insights.sbomify.com/CVE-2017-2550/): Information disclosure in Easy Joomla Backup (high 7.5) - [CVE-2017-2549](https://insights.sbomify.com/CVE-2017-2549/): Cross-site scripting in apple:iphone os (medium 6.1) - [CVE-2017-2548](https://insights.sbomify.com/CVE-2017-2548/): Memory corruption in apple:mac os x (high 7.8) - [CVE-2017-2547](https://insights.sbomify.com/CVE-2017-2547/): Memory corruption in apple:iphone os (high 8.8) - [CVE-2017-2546](https://insights.sbomify.com/CVE-2017-2546/): Memory corruption in apple:mac os x (high 7.8) - [CVE-2017-2545](https://insights.sbomify.com/CVE-2017-2545/): Memory corruption in apple:mac os x (high 7.8) - [CVE-2017-2544](https://insights.sbomify.com/CVE-2017-2544/): Memory corruption in apple:iphone os (high 8.8) - [CVE-2017-2543](https://insights.sbomify.com/CVE-2017-2543/): Memory corruption in apple:mac os x (high 7.8) - [CVE-2017-2542](https://insights.sbomify.com/CVE-2017-2542/): Memory corruption in apple:mac os x (high 7.8) - [CVE-2017-2541](https://insights.sbomify.com/CVE-2017-2541/): Memory corruption in apple:mac os x (high 7.8) - [CVE-2017-2540](https://insights.sbomify.com/CVE-2017-2540/): Security feature bypass in apple:mac os x (medium 5.5) - [CVE-2017-2539](https://insights.sbomify.com/CVE-2017-2539/): Memory corruption in apple:iphone os (high 8.8) - [CVE-2017-2538](https://insights.sbomify.com/CVE-2017-2538/): Memory corruption in apple:iphone os (high 8.8) - [CVE-2017-2537](https://insights.sbomify.com/CVE-2017-2537/): Memory corruption in apple:mac os x (high 7.8) - [CVE-2017-2536](https://insights.sbomify.com/CVE-2017-2536/): Memory corruption in apple:iphone os (high 8.8) - [CVE-2017-2535](https://insights.sbomify.com/CVE-2017-2535/): Security feature bypass in apple:mac os x (high 7.8) - [CVE-2017-2534](https://insights.sbomify.com/CVE-2017-2534/): Security feature bypass in apple:mac os x (high 8.6) - [CVE-2017-2533](https://insights.sbomify.com/CVE-2017-2533/): Race condition in apple:mac os x (high 7.0) - [CVE-2017-2531](https://insights.sbomify.com/CVE-2017-2531/): Memory corruption in apple:iphone os (high 8.8) - [CVE-2017-2530](https://insights.sbomify.com/CVE-2017-2530/): Memory corruption in apple:icloud (high 8.8) - [CVE-2017-2528](https://insights.sbomify.com/CVE-2017-2528/): Cross-site scripting in apple:iphone os (medium 6.1) - [CVE-2017-2527](https://insights.sbomify.com/CVE-2017-2527/): Memory corruption in apple:mac os x (critical 9.8) - [CVE-2017-2526](https://insights.sbomify.com/CVE-2017-2526/): Memory corruption in apple:iphone os (high 8.8) - [CVE-2017-2525](https://insights.sbomify.com/CVE-2017-2525/): Memory corruption in apple:iphone os (high 8.8) - [CVE-2017-2524](https://insights.sbomify.com/CVE-2017-2524/): Memory corruption in apple:iphone os (critical 9.8) - [CVE-2017-2523](https://insights.sbomify.com/CVE-2017-2523/): Memory corruption in apple:iphone os (critical 9.8) - [CVE-2017-2522](https://insights.sbomify.com/CVE-2017-2522/): Memory corruption in apple:iphone os (critical 9.8) - [CVE-2017-2521](https://insights.sbomify.com/CVE-2017-2521/): Memory corruption in apple:iphone os (high 8.8) - [CVE-2017-2520](https://insights.sbomify.com/CVE-2017-2520/): Memory corruption in apple:iphone os (critical 9.8) - [CVE-2017-2519](https://insights.sbomify.com/CVE-2017-2519/): Memory corruption in apple:iphone os (critical 9.8) - [CVE-2017-2518](https://insights.sbomify.com/CVE-2017-2518/): Memory corruption in apple:iphone os (critical 9.8) - [CVE-2017-2517](https://insights.sbomify.com/CVE-2017-2517/): Other in apple:iphone os (medium 6.5) - [CVE-2017-2516](https://insights.sbomify.com/CVE-2017-2516/): Security feature bypass in apple:mac os x (medium 5.0) - [CVE-2017-2515](https://insights.sbomify.com/CVE-2017-2515/): Memory corruption in apple:iphone os (high 8.8) - [CVE-2017-2514](https://insights.sbomify.com/CVE-2017-2514/): Memory corruption in apple:iphone os (high 8.8) - [CVE-2017-2513](https://insights.sbomify.com/CVE-2017-2513/): Use after free in apple:iphone os (critical 9.8) - [CVE-2017-2512](https://insights.sbomify.com/CVE-2017-2512/): Memory corruption in apple:mac os x (high 7.8) --- From sbomify Insights: https://insights.sbomify.com/years/2017/page/56/