CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- hclsoftware connectionsIBM Connections 4.0, 4.5, 5.0, and 5.5 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can...7.8 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a...7.8 High
- netapp ontap select deploy administration utilityThe NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote...7.5 High
- magento magento2Unauthenticated crypto and weak IV in Magento\Framework\Encryption7.5 High
- netapp data ontapNetApp Data ONTAP 9.0 and 9.1 before 9.1P1 allows remote authenticated users that own SMB-hosted...8.8 High
- siemens sinumerik integrate operate client, sinumerik integrate access mymachine\/ethernet, sinumerik operate +2 moreSiemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 (including) and 2.0.6 (excluding...7.4 High
- gdraheim zziplibThe zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers...5.5 Medium
- podofo project podofoHeap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp...7.8 High
- podofo project podofoThe PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote...5.5 Medium
- podofo project podofobase/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service ...5.5 Medium
- podofo project podofoInteger overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have...7.8 High
- podofo project podofoThe PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4...5.5 Medium
- mp3splt project mp3spltThe free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause...5.5 Medium
- mp3splt project mp3spltThe free_options function in options_manager.c in mp3splt 2.6.2 allows remote attackers to cause...5.5 Medium
- libmp3splt project libmp3spltThe splt_cue_export_to_file function in cue.c in libmp3splt 0.9.2 allows remote attackers to...5.5 Medium
- jasper project jasperThe jpc_undo_roi function in libjasper/jpc/jpc_dec.c in JasPer 1.900.27 allows remote attackers...5.5 Medium
- jasper project jasperThe dec_clnpass function in libjasper/jpc/jpc_t1dec.c in JasPer 1.900.27 allows remote attackers...5.5 Medium
- jasper project jasperlibjasper/jp2/jp2_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service ...5.5 Medium
- jasper project jasperInteger overflow in libjasper/jpc/jpc_tsfb.c in JasPer 1.900.17 allows remote attackers to cause...5.5 Medium
- jasper project jasperlibjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a denial of service ...5.5 Medium
- jasper project jasperInteger overflow in libjasper/jpc/jpc_dec.c in JasPer 1.900.17 allows remote attackers to cause a...5.5 Medium
- jasper project jasperlibjasper/include/jasper/jas_math.h in JasPer 1.900.17 allows remote attackers to cause a denial...5.5 Medium
- libavlibavcodec/ituh263dec.c in libav 11.8 allows remote attackers to cause a denial of service (crash...5.5 Medium
- libavlibswscale/utils.c in libav 11.8 allows remote attackers to cause a denial of service (crash) via...5.5 Medium
- libavInteger overflow in libswscale/x86/swscale.c in libav 11.8 allows remote attackers to cause a...5.5 Medium
- libavlibavcodec/x86/mpegvideo.c in libav 11.8 allows remote attackers to cause a denial of service ...5.5 Medium
- yandex browser, yandex n.v. browser for desktop +1 moreYandex Browser for desktop before 17.1.1.227 does not show Protect (similar to Safebrowsing in...6.5 Medium
- yandex browser, yandex n.v. browser for ios +1 moreYandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime://...6.5 Medium
- libtiffStack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4...5.5 Medium
- linux kernelThe hashbin_delete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly...5.5 Medium
- linux kernelThe ip_cmsg_recv_checksum function in net/ipv4/ip_sockglue.c in the Linux kernel before 4.10.1...7.8 High
- linux kernelRace condition in net/packet/af_packet.c in the Linux kernel before 4.9.13 allows local users to...7.0 High
- linux kernelThe LLC subsystem in the Linux kernel before 4.9.13 does not ensure that a certain destructor...7.8 High
- gdraheim zziplibseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion...5.5 Medium
- gdraheim zziplibThe zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause...5.5 Medium
- gdraheim zziplibThe prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a...5.5 Medium
- gdraheim zziplibThe zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause...5.5 Medium
- gdraheim zziplib, debian linux +1 moreHeap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0...5.5 Medium
- gdraheim zziplib, debian linux +1 moreHeap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0...5.5 Medium
- gdraheim zziplib, debian linux +1 moreHeap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0...5.5 Medium
- the xorg project xorg-x11-server, debian linux, x.org x server +2 moreIt was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT...5.9 Medium