CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- linuxcontainers lxclxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create...3.3 Low
- mail-masta project mail-mastaA SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail...7.2 High
- mail-masta project mail-mastaA SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail...7.2 High
- mail-masta project mail-mastaA SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail...7.2 High
- mail-masta project mail-mastaA SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail...7.2 High
- mail-masta project mail-mastaA SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail...7.2 High
- mail-masta project mail-mastaA SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail...7.2 High
- mail-masta project mail-mastaA SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail...7.2 High
- mail-masta project mail-mastaA SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail...7.2 High
- mail-masta project mail-mastaA SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail...7.2 High
- agora-projectXSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2...6.1 Medium
- agora-projectXSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack.6.1 Medium
- agora-projectXSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack.6.1 Medium
- agora-projectXSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack.6.1 Medium
- iball ib-wra150n firmwareiball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an...9.8 Critical
- cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote...5.4 Medium
- cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6...5.4 Medium
- sagemcom livebox firmwareLivebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for...7.5 High
- asus rt-ac53 firmwareSession hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT...8.8 High
- asus rt-ac53 firmwareBuffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U,...9.8 Critical
- asus rt-ac53 firmwareCross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT...6.1 Medium
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreThe make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent...5.5 Medium
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreInteger underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context...7.1 High
- gnome gdk-pixbuf, debian linux, fedoraproject fedora +2 moreInteger overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial...5.5 Medium
- gnome gdk-pixbuf, fedoraproject fedora +1 moregdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of...7.5 High
- wuhu project wuhuGargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/www_admin/users...6.1 Medium
- tenable appliance, nessus +1 moreTenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to...7.3 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could...3.1 Low
- ibm cognos business intelligenceIBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be...5.5 Medium
- ibm urbancode deployIBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm tivoli monitoring, tivoli monitoring v6 +1 moreIBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that...4.6 Medium
- ibm websphere commerce enterprise, websphere commerce +1 moreIBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable...5.1 Medium
- webpagetest project webpagetestMultiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The...6.1 Medium
- webpagetest project webpagetestMultiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The...6.1 Medium
- webpagetest project webpagetestMultiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The...6.1 Medium
- webpagetest project webpagetestA Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists...6.1 Medium
- webpagetest project webpagetestA Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists...6.1 Medium
- webpagetest project webpagetestMultiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The...6.1 Medium
- webpagetest project webpagetestMultiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The...6.1 Medium
- webpagetest project webpagetestA Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists...6.1 Medium
- webpagetest project webpagetestA Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists...6.1 Medium
- schneider-electric tableau server, wonderware intelligence, tableau desktop +2 moreAn issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in...9.8 Critical
- google android, linux kernel +1 moreAn information disclosure vulnerability in the kernel USB gadget driver could enable a local...4.7 Medium
- google android, linux kernel +1 moreAn information disclosure vulnerability in the Synaptics touchscreen driver could enable a local...4.7 Medium
- google android, linux kernel +1 moreAn information disclosure vulnerability in the HTC sound codec driver could enable a local...4.7 Medium
- google android, linux kernel +1 moreAn information disclosure vulnerability in the Qualcomm video driver could enable a local...4.7 Medium
- google android, linux kernel +1 moreAn information disclosure vulnerability in the Qualcomm video driver could enable a local...4.7 Medium
- google androidAn information disclosure vulnerability in the MediaTek video codec driver could enable a local...4.7 Medium
- google android, linux kernel +1 moreAn information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local...4.7 Medium
- google androidAn information disclosure vulnerability in the MediaTek driver could enable a local malicious...5.5 Medium
- Show moreLoading…