# Vulnerabilities published in 2017


- [CVE-2017-9141](https://insights.sbomify.com/CVE-2017-9141/): Denial of service in n/a (medium 6.5)
- [CVE-2017-9140](https://insights.sbomify.com/CVE-2017-9140/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9139](https://insights.sbomify.com/CVE-2017-9139/): Memory corruption in n/a (low 3.5)
- [CVE-2017-9138](https://insights.sbomify.com/CVE-2017-9138/): Command injection in n/a (high 8.0)
- [CVE-2017-9137](https://insights.sbomify.com/CVE-2017-9137/): Hardcoded credentials in n/a (high 7.3)
- [CVE-2017-9136](https://insights.sbomify.com/CVE-2017-9136/): Path traversal in n/a (high 7.5)
- [CVE-2017-9135](https://insights.sbomify.com/CVE-2017-9135/): Command injection in n/a (high 8.8)
- [CVE-2017-9134](https://insights.sbomify.com/CVE-2017-9134/): Information disclosure in n/a (high 7.5)
- [CVE-2017-9133](https://insights.sbomify.com/CVE-2017-9133/): Command injection in n/a (high 8.8)
- [CVE-2017-9132](https://insights.sbomify.com/CVE-2017-9132/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2017-9131](https://insights.sbomify.com/CVE-2017-9131/): Command injection in n/a (high 7.5)
- [CVE-2017-9130](https://insights.sbomify.com/CVE-2017-9130/): Denial of service in n/a (medium 5.5)
- [CVE-2017-9129](https://insights.sbomify.com/CVE-2017-9129/): Denial of service in n/a (medium 5.5)
- [CVE-2017-9128](https://insights.sbomify.com/CVE-2017-9128/): Memory corruption in n/a (medium 6.5)
- [CVE-2017-9127](https://insights.sbomify.com/CVE-2017-9127/): Memory corruption in n/a (medium 6.5)
- [CVE-2017-9126](https://insights.sbomify.com/CVE-2017-9126/): Memory corruption in n/a (medium 6.5)
- [CVE-2017-9125](https://insights.sbomify.com/CVE-2017-9125/): Memory corruption in n/a (medium 6.5)
- [CVE-2017-9124](https://insights.sbomify.com/CVE-2017-9124/): Null dereference in n/a (medium 6.5)
- [CVE-2017-9123](https://insights.sbomify.com/CVE-2017-9123/): Denial of service in n/a (medium 6.5)
- [CVE-2017-9122](https://insights.sbomify.com/CVE-2017-9122/): Denial of service in n/a (medium 6.5)
- [CVE-2017-9120](https://insights.sbomify.com/CVE-2017-9120/): Integer overflow in n/a (critical 9.8)
- [CVE-2017-9119](https://insights.sbomify.com/CVE-2017-9119/): Denial of service in n/a (critical 9.8)
- [CVE-2017-9118](https://insights.sbomify.com/CVE-2017-9118/): Memory corruption in n/a (high 7.5)
- [CVE-2017-9117](https://insights.sbomify.com/CVE-2017-9117/): Memory corruption in LibTIFF (medium 4.0)
- [CVE-2017-9116](https://insights.sbomify.com/CVE-2017-9116/): Denial of service in n/a (medium 6.5)
- [CVE-2017-9115](https://insights.sbomify.com/CVE-2017-9115/): Memory corruption in n/a (high 8.8)
- [CVE-2017-9114](https://insights.sbomify.com/CVE-2017-9114/): Denial of service in n/a (medium 6.5)
- [CVE-2017-9113](https://insights.sbomify.com/CVE-2017-9113/): Memory corruption in n/a (high 8.8)
- [CVE-2017-9112](https://insights.sbomify.com/CVE-2017-9112/): OpenEXR invalid read (medium 6.5)
- [CVE-2017-9111](https://insights.sbomify.com/CVE-2017-9111/): OpenEXR invalid write (high 8.8)
- [CVE-2017-9110](https://insights.sbomify.com/CVE-2017-9110/): Denial of service in n/a (medium 6.5)
- [CVE-2017-9109](https://insights.sbomify.com/CVE-2017-9109/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-9108](https://insights.sbomify.com/CVE-2017-9108/): Memory corruption in n/a (high 7.5)
- [CVE-2017-9107](https://insights.sbomify.com/CVE-2017-9107/): Memory corruption in n/a (high 7.5)
- [CVE-2017-9106](https://insights.sbomify.com/CVE-2017-9106/): Memory corruption in n/a (high 7.5)
- [CVE-2017-9105](https://insights.sbomify.com/CVE-2017-9105/): Null dereference in n/a (high 8.8)
- [CVE-2017-9104](https://insights.sbomify.com/CVE-2017-9104/): Denial of service in n/a (critical 9.8)
- [CVE-2017-9103](https://insights.sbomify.com/CVE-2017-9103/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-9101](https://insights.sbomify.com/CVE-2017-9101/): File upload in n/a (critical 9.8)
- [CVE-2017-9100](https://insights.sbomify.com/CVE-2017-9100/): Auth bypass in n/a (high 8.8)
- [CVE-2017-9098](https://insights.sbomify.com/CVE-2017-9098/): Information disclosure in n/a (high 7.5)
- [CVE-2017-9097](https://insights.sbomify.com/CVE-2017-9097/): Path traversal in n/a (critical 9.1)
- [CVE-2017-9096](https://insights.sbomify.com/CVE-2017-9096/): Improper Restriction of XML External Entity Reference in iText (high 8.8)
- [CVE-2017-9095](https://insights.sbomify.com/CVE-2017-9095/): XML external entity in n/a (medium 5.5)
- [CVE-2017-9094](https://insights.sbomify.com/CVE-2017-9094/): Denial of service in n/a (medium 6.5)
- [CVE-2017-9093](https://insights.sbomify.com/CVE-2017-9093/): Denial of service in n/a (medium 6.5)
- [CVE-2017-9091](https://insights.sbomify.com/CVE-2017-9091/): Security feature bypass in n/a (high 7.5)
- [CVE-2017-9090](https://insights.sbomify.com/CVE-2017-9090/): Security feature bypass in n/a (high 7.5)
- [CVE-2017-9085](https://insights.sbomify.com/CVE-2017-9085/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9083](https://insights.sbomify.com/CVE-2017-9083/): Null dereference in n/a (medium 6.5)
- [CVE-2017-9080](https://insights.sbomify.com/CVE-2017-9080/): File upload in n/a (high 8.8)
- [CVE-2017-9079](https://insights.sbomify.com/CVE-2017-9079/): Path traversal in n/a (medium 4.7)
- [CVE-2017-9078](https://insights.sbomify.com/CVE-2017-9078/): Use after free in n/a (high 8.8)
- [CVE-2017-9077](https://insights.sbomify.com/CVE-2017-9077/): Denial of service in n/a (high 7.8)
- [CVE-2017-9076](https://insights.sbomify.com/CVE-2017-9076/): Denial of service in n/a (high 7.8)
- [CVE-2017-9075](https://insights.sbomify.com/CVE-2017-9075/): Denial of service in n/a (high 7.8)
- [CVE-2017-9074](https://insights.sbomify.com/CVE-2017-9074/): Memory corruption in n/a (high 7.8)
- [CVE-2017-9072](https://insights.sbomify.com/CVE-2017-9072/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9071](https://insights.sbomify.com/CVE-2017-9071/): MODX Revolution XSS via HTTP Host header (medium 4.7)
- [CVE-2017-9070](https://insights.sbomify.com/CVE-2017-9070/): MODX Revolution cross-site scripting vulnerability (medium 5.4)
- [CVE-2017-9069](https://insights.sbomify.com/CVE-2017-9069/): MODX Revolution allows overwriting .htaccess (high 8.8)
- [CVE-2017-9068](https://insights.sbomify.com/CVE-2017-9068/): MODX Revolution Reflected XSS (medium 6.1)
- [CVE-2017-9067](https://insights.sbomify.com/CVE-2017-9067/): MODX Revolution Directory Traversal Vulnerability (high 7.0)
- [CVE-2017-9066](https://insights.sbomify.com/CVE-2017-9066/): Server-side request forgery in n/a (high 8.6)
- [CVE-2017-9065](https://insights.sbomify.com/CVE-2017-9065/): Missing authorization in n/a (high 7.5)
- [CVE-2017-9064](https://insights.sbomify.com/CVE-2017-9064/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-9063](https://insights.sbomify.com/CVE-2017-9063/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9062](https://insights.sbomify.com/CVE-2017-9062/): Cross-site scripting in n/a (high 8.6)
- [CVE-2017-9061](https://insights.sbomify.com/CVE-2017-9061/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9060](https://insights.sbomify.com/CVE-2017-9060/): Denial of service in n/a (medium 5.5)
- [CVE-2017-9059](https://insights.sbomify.com/CVE-2017-9059/): Denial of service in n/a (medium 5.5)
- [CVE-2017-9058](https://insights.sbomify.com/CVE-2017-9058/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-9055](https://insights.sbomify.com/CVE-2017-9055/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-9054](https://insights.sbomify.com/CVE-2017-9054/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-9053](https://insights.sbomify.com/CVE-2017-9053/): Memory corruption in n/a (critical 9.1)
- [CVE-2017-9052](https://insights.sbomify.com/CVE-2017-9052/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-9051](https://insights.sbomify.com/CVE-2017-9051/): Null dereference in n/a (critical 9.8)
- [CVE-2017-9050](https://insights.sbomify.com/CVE-2017-9050/): Out-of-bounds read in nokogiri (high 7.5)
- [CVE-2017-9049](https://insights.sbomify.com/CVE-2017-9049/): Memory corruption in n/a (high 7.5)
- [CVE-2017-9048](https://insights.sbomify.com/CVE-2017-9048/): Memory corruption in n/a (high 7.5)
- [CVE-2017-9047](https://insights.sbomify.com/CVE-2017-9047/): Memory corruption in n/a (high 7.5)
- [CVE-2017-9046](https://insights.sbomify.com/CVE-2017-9046/): Code injection in n/a (high 7.3)
- [CVE-2017-9045](https://insights.sbomify.com/CVE-2017-9045/): Information disclosure in n/a (medium 5.9)
- [CVE-2017-9044](https://insights.sbomify.com/CVE-2017-9044/): Denial of service in n/a (medium 5.5)
- [CVE-2017-9043](https://insights.sbomify.com/CVE-2017-9043/): Integer overflow in n/a (high 7.8)
- [CVE-2017-9042](https://insights.sbomify.com/CVE-2017-9042/): Integer overflow in n/a (high 7.8)
- [CVE-2017-9041](https://insights.sbomify.com/CVE-2017-9041/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-9040](https://insights.sbomify.com/CVE-2017-9040/): Null dereference in n/a (medium 5.5)
- [CVE-2017-9039](https://insights.sbomify.com/CVE-2017-9039/): Denial of service in n/a (medium 5.5)
- [CVE-2017-9038](https://insights.sbomify.com/CVE-2017-9038/): Memory corruption in n/a (medium 5.5)
- [CVE-2017-9037](https://insights.sbomify.com/CVE-2017-9037/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9036](https://insights.sbomify.com/CVE-2017-9036/): Missing authorization in n/a (high 7.8)
- [CVE-2017-9035](https://insights.sbomify.com/CVE-2017-9035/): Information disclosure in n/a (high 7.4)
- [CVE-2017-9034](https://insights.sbomify.com/CVE-2017-9034/): Code injection in n/a (critical 9.8)
- [CVE-2017-9033](https://insights.sbomify.com/CVE-2017-9033/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-9032](https://insights.sbomify.com/CVE-2017-9032/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2017-9031](https://insights.sbomify.com/CVE-2017-9031/): Path traversal in n/a (critical 9.8)
- [CVE-2017-9030](https://insights.sbomify.com/CVE-2017-9030/): Path traversal in n/a (high 7.5)
- [CVE-2017-9026](https://insights.sbomify.com/CVE-2017-9026/): Memory corruption in n/a (critical 9.8)
- [CVE-2017-9025](https://insights.sbomify.com/CVE-2017-9025/): Memory corruption in n/a (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2017/page/9/