# CVEs published 2017-12-17

4 CVEs were published on December 17, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-17718](https://cve.now/CVE-2017-17718.md): The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation. (no CVSS, net-ldap)
- [CVE-2017-17716](https://cve.now/CVE-2017-17716.md): GitLab 9.4.x before 9.4.2 does not support LDAP SSL certificate verification, but a verify\_certificates LDAP option was mentioned in the 9.4 (no CVSS)
- [CVE-2017-17717](https://cve.now/CVE-2017-17717.md): Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature (no CVSS)
- [CVE-2017-16950](https://cve.now/CVE-2017-16950.md): Cross - site scripting (XSS) vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-12-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.