CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- ibm qradar siem, qradar incident forensics, qradar security information and event manager +2 moreIBM QRadar 7.2 discloses sensitive information to unauthorized users. The information can be used...5.3 Medium
- ibm business process manager, business process manager advanced, websphere +2 moreIBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable...6.1 Medium
- ibm websphere mqIBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a...6.5 Medium
- ibm tivoli storage managerIBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform...8.8 High
- burgundy-cms project burgundy-cmsSmith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu...6.1 Medium
- exponentcms exponent cmsSQL injection vulnerability in framework/modules/filedownloads/controllers/filedownloadController...9.8 Critical
- exponentcms exponent cmsSQL injection vulnerability in framework/modules/help/controllers/helpController.php in Exponent...9.8 Critical
- exponentcms exponent cmsSQL injection vulnerability in the activate_address function in framework/modules/addressbook...9.8 Critical
- exponentcms exponent cmsSQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and...9.8 Critical
- exponentcms exponent cmsSQL injection vulnerability in framework/modules/users/models/user.php in Exponent CMS 2.3.9 and...9.8 Critical
- exponentcms exponent cmsSQL injection vulnerability in the getSection function in framework/core/subsystems/expRouter.php...9.8 Critical
- exponentcms exponent cmsSQL injection vulnerability in framework/core/models/expRecord.php in Exponent CMS 2.3.9 and...9.8 Critical
- exponentcms exponent cmsSQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and...9.8 Critical
- exponentcms exponent cmsSQL injection vulnerability in framework/modules/blog/controllers/blogController.php in Exponent...9.8 Critical
- exponentcms exponent cmsSQL injection vulnerability in cron/find_help.php in Exponent CMS 2.3.9 and earlier allows remote...9.8 Critical
- plonePlone vulnerable to Cross-site Scripting6.1 Medium
- plonePlone Cross-site Scripting (XSS) vulnerability6.1 Medium
- plonePlone XSS6.1 Medium
- plonePlone Open Redirect Vulnerability6.1 Medium
- plonePlone XSS6.1 Medium
- plonePlone vulnerable to filesystem information leak4.9 Medium
- openbsdInteger overflow in the uvm_map_isavail function in uvm/uvm_map.c in OpenBSD 5.9 allows local...5.5 Medium
- openbsdOpenBSD 5.8 and 5.9 allows local users to cause a denial of service (NULL pointer dereference and...5.5 Medium
- openbsdOpenBSD 5.8 and 5.9 allows certain local users to cause a denial of service (kernel panic) by...5.5 Medium
- openbsdOpenBSD 5.8 and 5.9 allows certain local users with kern.usermount privileges to cause a denial...4.4 Medium
- openbsdOpenBSD 5.8 and 5.9 allows local users to cause a denial of service (kernel panic) via a large...5.5 Medium
- openbsdthrsleep in kern/kern_synch.c in OpenBSD 5.8 and 5.9 allows local users to cause a denial of...5.5 Medium
- openbsdOpenBSD 5.8 and 5.9 allows local users to cause a denial of service (assertion failure and kernel...5.5 Medium
- openbsdInteger overflow in the amap_alloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute...7.8 High
- openbsdInteger truncation error in the amap_alloc function in OpenBSD 5.8 and 5.9 allows local users to...7.8 High
- openbsdThe mmap extension __MAP_NOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of...5.5 Medium
- cloudera managerCloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request...7.5 High
- cloudera managerCloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1...7.5 High
- cloudera managerMultiple cross-site scripting (XSS) vulnerabilities in Cloudera Manager 5.5 and earlier allow...6.1 Medium
- cloudera hueCloudera HUE Account Enumeration5.3 Medium
- cloudera hueMultiple cross-site scripting (XSS) vulnerabilities in Cloudera HUE 3.9.0 and earlier allow...6.1 Medium
- apache camelApache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization9.8 Critical
- ca unified infrastructure managementDirectory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management ...7.5 High
- ca service desk managerCross-site scripting (XSS) vulnerability in CA Service Desk Manager (formerly CA Service Desk) 12...6.1 Medium
- nefarious2 project nefarious2The m_authenticate function in ircd/m_authenticate.c in nefarious2 allows remote attackers to...9.8 Critical
- openbsdThe sys_thrsigdivert function in kern/kern_sig.c in the OpenBSD kernel 5.9 allows remote...7.5 High
- qt qxmlsimplereaderStack-based buffer overflow in QXmlSimpleReader in Qt 4.8.5 allows remote attackers to cause a...5.5 Medium
- qemuMemory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka...6.5 Medium
- qemu, debian linux +1 moreThe sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator)...6.5 Medium
- qemuMemory leak in the virtio_gpu_resource_attach_backing function in hw/display/virtio-gpu.c in QEMU...6.5 Medium
- qemuMemory leak in the virgl_resource_attach_backing function in hw/display/virtio-gpu-3d.c in QEMU ...6.5 Medium
- qemu, debian linux +1 moreMemory leak in hw/audio/es1370.c in QEMU (aka Quick Emulator) allows local guest OS privileged...6.5 Medium
- qemu, debian linux +1 moreMemory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged...6.5 Medium
- gnu wgetCRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows...6.1 Medium
- mozilla firefoxA non-existent chrome.manifest file will attempt to be loaded during startup from the primary...5.5 Medium
- Show moreLoading…