CVEs published in March 2017

1,192 vulnerabilities, 119 critical, 18 exploited.

• helpmewatchwho project helpmewatchwho TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in... CVE-2017-7387 6.1 MediumMarch 31, 2017
• symetrie project symetrie citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page... CVE-2017-7386 6.1 MediumMarch 31, 2017
• intel anti-virus engine (ave), mcafee anti-malware scan engine +1 more Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through... CVE-2016-8032 7.3 HighMarch 31, 2017
• illumos, illumos osnet-incorporation +1 more illumos smbsrv NULL pointer dereference allows system crash. CVE-2016-6561 7.5 HighMarch 31, 2017
• illumos, illumos osnet-incorporation +1 more illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned... CVE-2016-6560 8.6 HighMarch 31, 2017
• ni labview, national instruments labview 2016 evaluation +1 more An exploitable memory corruption vulnerability exists in the LvVariantUnflatten functionality in... CVE-2017-2775 7.5 HighMarch 31, 2017
• ibm tririga application platform The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow... CVE-2017-1171 4.3 MediumMarch 31, 2017
• ibm algo one IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain... CVE-2017-1154 6.5 MediumMarch 31, 2017
• hcl software inotes IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to... CVE-2016-9990 6.1 MediumMarch 31, 2017
• ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 more IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity... CVE-2016-9707 8.1 HighMarch 31, 2017
• ibm kenexa lms, ibm corporation kenexa lms on cloud +1 more IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross... CVE-2016-8935 5.4 MediumMarch 31, 2017
• ibm sterling order management, sterling selling and fulfillment foundation +1 more IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could... CVE-2016-8917 8.8 HighMarch 31, 2017
• ibm curam social program management, cram social program management +1 more IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by... CVE-2016-6111 9.1 CriticalMarch 31, 2017
• ibm rational quality manager, rational collaborative lifecycle management +1 more IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This... CVE-2016-6036 5.4 MediumMarch 31, 2017
• ibm rational quality manager, rational collaborative lifecycle management +1 more IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This... CVE-2016-6031 5.4 MediumMarch 31, 2017
• ibm rational collaborative lifecycle management, rational quality manager +1 more IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This... CVE-2016-6022 5.4 MediumMarch 31, 2017
• adobe acrobat, reader, acrobat dc +1 more +3 more Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and... CVE-2017-3010 9.8 CriticalMarch 31, 2017
• adobe acrobat, reader, acrobat dc +1 more +3 more Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and... CVE-2017-3009 7.5 HighMarch 31, 2017
• nagios Cross-site scripting (XSS) vulnerability in Nagios. CVE-2016-6209 Fix available 6.1 MediumMarch 31, 2017
• hak5 wi-fi pineapple firmware Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens. CVE-2015-4624 Public exploit EPSS 37.0% 7.5 HighMarch 31, 2017
• snoopy, nagios, redhat openstack +2 more Snoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists... CVE-2014-5009 Fix available 9.8 CriticalMarch 31, 2017
• multi-router looking glass project looking glass, looking glass multi-router looking glass (mrlg) +1 more fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause... CVE-2014-3931 In KEV EPSS 29.0% 9.8 CriticalMarch 31, 2017
• deluge Mageia Updated deluge packages fix security vulnerability MGASA-2017-0095 Fix available No scoreMarch 31, 2017
• lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack. CVE-2017-7363 6.1 MediumMarch 31, 2017
• lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack. CVE-2017-7362 6.1 MediumMarch 31, 2017
• lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack. CVE-2017-7361 6.1 MediumMarch 31, 2017
• lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack. CVE-2017-7360 6.1 MediumMarch 31, 2017
• lucidcrew pixie Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack. CVE-2017-7359 6.1 MediumMarch 31, 2017
• mantisbt MantisBT vulnerable to XSS through config_option parameter in adm_config_report.php CVE-2017-7309 Fix available EPSS 57.3% 4.8 MediumMarch 31, 2017
• mantisbt MantisBT XSS via move_attachments_page.php CVE-2017-7241 Fix available 4.8 MediumMarch 31, 2017
• mantisbt MantisBT XSS via adm_config_report.php's action parameter CVE-2017-6973 Fix available 4.8 MediumMarch 31, 2017
• linux kernel Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users... CVE-2017-7374 Public exploitFix available 7.8 HighMarch 31, 2017
• linux kernel The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause... CVE-2017-2647 Fix available 7.8 HighMarch 31, 2017
• trendmicro mobile security There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android... CVE-2016-9319 5.9 MediumMarch 31, 2017
• firefox Ubuntu firefox regression USN-3216-2 Fix available No scoreMarch 30, 2017
• dahuasecurity ip camera firmware Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low... CVE-2017-7253 8.8 HighMarch 30, 2017
• samba Ubuntu samba regression USN-3242-2 Fix available No scoreMarch 30, 2017
• sophos web appliance In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310. CVE-2017-6412 Public exploit 8.1 HighMarch 30, 2017
• sophos web appliance In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible... CVE-2017-6184 4.7 MediumMarch 30, 2017
• sophos web appliance In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities... CVE-2017-6183 7.2 HighMarch 30, 2017
• sophos web appliance In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible... CVE-2017-6182 Public exploit EPSS 16.7% 9.8 CriticalMarch 30, 2017
• microfocus sentinel A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote... CVE-2017-5185 7.5 HighMarch 30, 2017
• microfocus sentinel A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage... CVE-2017-5184 5.3 MediumMarch 30, 2017
• imagemagick vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via... CVE-2014-9804 Fix available 7.5 HighMarch 30, 2017
• fortinet fortios A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x... CVE-2016-7542 4.9 MediumMarch 30, 2017
• fortinet fortios Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a... CVE-2016-7541 5.9 MediumMarch 30, 2017
• modx revolution setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to... CVE-2017-7324 9.8 CriticalMarch 30, 2017
• modx revolution The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier use... CVE-2017-7323 8.1 HighMarch 30, 2017
• modx revolution The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier do... CVE-2017-7322 8.1 HighMarch 30, 2017
• modx revolution setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to... CVE-2017-7321 9.8 CriticalMarch 30, 2017
• Show olderLoading…