CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- atutorMultiple Cross-Site Scripting (XSS) issues were discovered in ATutor 2.2.2. The vulnerabilities...6.1 Medium
- phpipamMultiple Cross-Site Scripting (XSS) issues were discovered in phpipam 1.2. The vulnerabilities...6.1 Medium
- groovel project cmsgroovelgroovel/cmsgroovel before 3.3.7-beta is vulnerable to a reflected XSS in commons/browser.php ...6.1 Medium
- fenix hosting fenix-open-sourceFenixHosting/fenix-open-source before 2017-03-04 is vulnerable to a reflected XSS in forums...6.1 Medium
- mangoswebv4 project mangoswebv4paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php ...6.1 Medium
- openelecThe auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and...8.1 High
- imagemagick, debian linux +1 moreAn issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based...5.5 Medium
- imagemagick, debian linux +1 moreAn issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a...5.5 Medium
- imagemagick, debian linux +1 moreAn issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion...5.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop,...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop,...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash,...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop,...7.5 High
- lenovo thinkserver firmware, lenovo group ltd. thinkserver rd350, rd450, rd550, rd650, td350 +1 moreReset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350...7.5 High
- blackberry good control serverAn information disclosure vulnerability in the logging implementation of BlackBerry Good Control...7.5 High
- dropbear ssh project sshThe dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUG_TRACE, allows...5.5 Medium
- matrixsslTLS cipher suites with CBC mode in TLS 1.1 and 1.2 in MatrixSSL before 3.8.3 allow remote...6.5 Medium
- matrixsslMatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain...5.9 Medium
- matrixsslMatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for...5.9 Medium
- umbracoMultiple cross-site scripting (XSS) vulnerabilities in Umbraco before 7.4.0 allow remote...6.1 Medium
- umbracoUmbraco CMS vulnerable to CSRF8.8 High
- umbracoUmbraco CMS vulnerable to CSRF8.2 High
muninUbuntumunin regressionNo score- owncloudownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3...6.5 Medium
- owncloudThe autocomplete feature in the E-Mail share dialog in ownCloud Server before 8.1.11, 8.2.x...4.3 Medium
- owncloudThe password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x...3.7 Low
- libimobiledevice libplistThe plist_free_data function in plist.c in libplist allows attackers to cause a denial of service...7.5 High
- revive-adserver revive adserverCross-site scripting (XSS) vulnerability in the invocation code generation for interstitial zones...6.1 Medium
- revive-adserver revive adserverCross-site scripting (XSS) vulnerability in Revive Adserver before 4.0.1 allows remote...5.4 Medium
- revive-adserver revive adserverSession fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1,...5.9 Medium
- revive-adserver revive adserverRevive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized...9.8 Critical
- cpanel cgiecho, cgiemail +1 moreCross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to...6.1 Medium
- cpanel cgiecho, cgiemail +1 morecgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the...6.1 Medium
- cpanelOpen redirect vulnerability in cgiemail and cgiecho allows remote attackers to redirect users to...6.1 Medium
- cpanel cgiecho, cgiemail +1 moreFormat string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary...7.8 High
- flexerasoftware flexnet publisherOpen redirect vulnerability in the lmadmin component in Flexera FlexNet Publisher (aka Flex...6.1 Medium
- puppet mcollective-puppet-agent, mcollective-puppet-agent plugin +1 moreOn Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non...8.8 High
- zoneminderCross-site request forgery (CSRF) vulnerability in Zoneminder 1.30 and earlier allows remote...8.8 High
- zoneminderSession fixation vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack...7.3 High
- zoneminderSQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute...9.8 Critical
- zoneminderCross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers...6.1 Medium
- zoneminderCross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers...6.1 Medium
- zoneminderCross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers...6.1 Medium
- festivaltts4r project festivaltts4rfestivaltts4r allows arbitrary command execution9.8 Critical
- espeak-ruby project espeak-rubyespeak-ruby allows arbitrary command execution9.8 Critical
- linux kernel, redhat enterprise linux +1 more** DISPUTED ** Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not...3.3 Low
- Show moreLoading…