CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- wordpress, debian linux +1 moreIn WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL...6.1 Medium
- wordpress, debian linux +1 moreIn WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via Media File...5.4 Medium
- mangoswebv4 project mangoswebv4paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files...6.1 Medium
- mangoswebv4 project mangoswebv4paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files...6.1 Medium
- mangoswebv4 project mangoswebv4paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files...6.1 Medium
- mangoswebv4 project mangoswebv4paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files...6.1 Medium
- mangoswebv4 project mangoswebv4paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files...6.1 Medium
- softaculous whmcs reseller moduleThe WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the...9.9 Critical
- f-secure software updaterF-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads...8.1 High
- novell iprintRemote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5...8.8 High
- apache struts, arubanetworks clearpass policy manager, hp server automation +6 more +8 moreApache Struts vulnerable to remote arbitrary command execution due to improper input validation9.8 Critical
- mantisbtA cross-site scripting (XSS) vulnerability in view_filters_page.php in MantisBT before 2.2.1...6.1 Medium
- trendmicro endpoint sensorTrend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote...7.8 High
- partclone project partclonepartclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due...5.5 Medium
- azure dex data expert ultimateIn Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer...9.8 Critical
- evostream media serverA Buffer Overflow was discovered in EvoStream Media Server 1.7.1. A crafted HTTP request with a...7.5 High
- cambiumnetworks cnpilot r200 series firmwareOn Cambium Networks cnPilot R200/201 devices before 4.3, there is a vulnerability involving the...9.8 Critical
- pharos popup, popup printer client +1 moreA buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version...10.0 Critical
- pharos popup, popup printer client +1 moreA buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version...9.0 Critical
- pharos popup, popup printer client +1 moreA denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer...5.3 Medium
- pharos popup, popup printer client +1 moreAn exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer...10.0 Critical
- r-project r, debian linux +1 moreAn exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R...7.5 High
- freedesktop virglrendererInteger overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before...5.5 Medium
- unisys clearpath mcpThe TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152,...7.5 High
- ftpshell clientRemote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD...9.8 Critical
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry uaa +2 moreCloud Foundry denial of service vulnerability7.5 High
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read...7.5 High
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with...7.5 High
- ytnef project ytnef, debian linux +1 moreAn issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over...7.5 High
- mantisbtA cross-site scripting (XSS) vulnerability in bug_change_status_page.php in MantisBT before 1.3.7...6.1 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreV8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...4.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreXSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108...6.1 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreHeap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac,...6.3 Medium
- google chromeGoogle Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a...4.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreV8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...4.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...7.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreGoogle Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause...8.1 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreBlink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...4.3 Medium
- google chrome, mozilla firefox, firefox esr +2 moreA use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote...8.8 High
- debian linux, google chrome, chromium v8 +3 more +5 moreIncorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux,...8.8 High
- debian linux, google chrome, xmlsoft libxslt +3 more +5 moreNokogiri implementation of libxslt lacks integer overflow checks8.8 High
- pidgin, debian linux, redhat enterprise linux desktop +4 more +6 moreAn out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A...7.5 High
- django-epiceditor project django-epiceditordjango-epiceditor vulnerable to XSS in form field6.1 Medium
- canonical ubuntu linuxAn issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS...6.3 Medium
- epiceditor project epiceditorEpicEditor XSS Vulnerability6.1 Medium
- dnatools dnalimsAn issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking...8.8 High
- dnatools dnalimsAn issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is affected by plaintext password...8.1 High
- dnatools dnalimsAn issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to a NUL-terminated...7.5 High
- dnatools dnalimsAn issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated...9.8 Critical
- dahuasecurity nvr firmwareAn issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The...8.1 High
- Show moreLoading…