CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- mozilla firefox, thunderbird +1 moreOn Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media...5.3 Medium
- mozilla firefox, thunderbird +1 moreIf a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it...7.5 High
- mozilla firefox, thunderbird +1 moreA malicious site could spoof the contents of the print preview window if popup windows are...7.5 High
- mozilla firefoxA "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL...6.5 Medium
- mozilla firefox, thunderbird +1 moreIf a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI...7.5 High
- mozilla firefox, thunderbird +1 moreAn out of bounds read error occurs when parsing some HTTP digest authorization responses,...5.3 Medium
- mozilla firefoxWhen dragging content from the primary browser pane to the addressbar on a malicious site, it is...5.3 Medium
- mozilla firefox, thunderbird +1 moreIn certain circumstances a networking event listener can be prematurely released. This appears to...7.5 High
- mozilla firefoxAn attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:"...5.3 Medium
- mozilla firefox, thunderbird +1 moreThe file picker dialog can choose and display the wrong local default directory when instantiated...5.5 Medium
- mozilla firefox, thunderbird +1 moreA segmentation fault can occur during some bidirectional layout operations. This vulnerability...9.8 Critical
- mozilla firefox, thunderbird +1 moreA buffer overflow read during SVG filter color value operations, resulting in data exposure. This...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory corruption resulting in a potentially exploitable crash during garbage collection of...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreVideo files loaded video captions cross-origin without checking for the presence of CORS headers...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...6.5 Medium
- mozilla firefox, thunderbird +1 moreA segmentation fault can occur in the Skia graphics library during some canvas operations due to...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreCertain response codes in FTP connections can result in the use of uninitialized values for ports...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free error can occur when manipulating ranges in selections with one node inside a...9.8 Critical
- mozilla firefox, thunderbird +1 moreWhen adding a range to an object in the DOM, it is possible to use "addRange" to add the range to...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free can occur when events are fired for a "FontFace" object after the object has...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA crash triggerable by web content in which an "ErrorResult" references unassigned memory due to...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreJIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP...9.8 Critical
- mozilla firefox, thunderbird +1 moreMemory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of...9.8 Critical
- webkitThe regex code in Webkit 2.4.11 allows remote attackers to cause a denial of service (memory...7.5 High
- tug tex live, debian linux, fedoraproject fedora +2 moreTeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost...9.8 Critical
- linux kernel, google android +1 moreRace condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows...7.0 High
- dlink dsl-2730u firmwareCross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers...8.8 High
- syspassAn issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently...7.5 High
- d-link di-524 firmwareMultiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router...8.0 High
- silverstripeSilverstripe CMS XSS Vulnerability6.1 Medium
- qbittorrentWebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could...6.1 Medium
- qbittorrentWebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS.6.1 Medium
- imagemagickAn issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file...5.5 Medium
- imagemagickAn issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL...5.5 Medium
- imagemagickAn issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL...7.5 High
- flexense sysgaugeAn issue was discovered in SysGauge 1.5.18. A buffer overflow vulnerability in SMTP connection...9.8 Critical
- wepresent wipg-1500 firmwareThe WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a...8.1 High
- netgear dgn2200 devices, dgn2200 series firmware +1 morednslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote...8.8 High
- freetype, debian linux +1 moreThe parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a...7.8 High
- dotclearXSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the...6.1 Medium
- admidioSQL Injection was discovered in adm_program/modules/dates/dates_function.php in Admidio 3.2.5....7.2 High
- epesiMultiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities...6.1 Medium
- epesiMultiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities...6.1 Medium
- epesiMultiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities...6.1 Medium
- epesiMultiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities...6.1 Medium
- epesiMultiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities...6.1 Medium
- reasoncmsA Cross-Site Scripting (XSS) issue was discovered in reasoncms before 4.7.1. The vulnerability...6.1 Medium
- php-calendarA Cross-Site Scripting (XSS) issue was discovered in php-calendar before 2017-03-03. The...6.1 Medium
- inter-mediatorINTER-Mediator Cross-Site Scripting (XSS)6.1 Medium
- Show moreLoading…