CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- wavpack project wavpackThe read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers...5.5 Medium
- wavpack project wavpackThe unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers...5.5 Medium
- wavpack project wavpackThe WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to...5.5 Medium
- foxitsoftware foxit reader, phantompdf +1 moreThe ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when...4.7 Medium
- lutim project lutimCross-site scripting (XSS) vulnerability in SVG file handling in Lutim 0.7.1 and earlier allows...6.1 Medium
- linux kernelRace condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause...7.0 High
- trendmicro interscan messaging security virtual applianceAn issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600....8.8 High
- cerberusftp ftp serverIn Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The...7.5 High
- eaton xcomfort ethernet communication interfaceAn issue was discovered in Eaton xComfort Ethernet Communication Interface (ECI) Versions 1.07...7.5 High
- apache tomcat, netapp oncommand insight, oncommand shift +2 moreApache Tomcat allows remote attackers to read data that was intended to be associated with a different request7.5 High
- telegram messengerAn issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat...7.5 High
- asus rt-ac66u firmware, trendnet tew-812dru firmware +1 moreBuffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long...9.8 Critical
- audiofileInteger overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote...5.5 Medium
- audiofileInteger overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows...5.5 Medium
- audiofileWAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of...5.5 Medium
- audiofile, debian linux +1 moreHeap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules...5.5 Medium
- audiofileThe reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile)...5.5 Medium
- audiofile, debian linux +1 moreHeap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka...5.5 Medium
- audiofileThe runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile)...5.5 Medium
- audiofile, debian linux +1 moreHeap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile...5.5 Medium
- audiofile, debian linux +1 moreHeap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka...5.5 Medium
- audiofileHeap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka...5.5 Medium
- wavpack project wavpackThe read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a...5.5 Medium
- lg project lgCross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to...6.1 Medium
- uninett mod auth mellonmod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user...6.1 Medium
- edx edx-platformOpen edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO...5.9 Medium
- keekoonvision kk002 ip camera firmwareKeekoon KK002 devices 1.8.12 HD have a Cross Site Request Forgery Vulnerability affecting goform...8.8 High
- zammadA CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1....8.8 High
- zammadAn issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1,...9.8 Critical
- qos logback, redhat satellite, satellite capsule +2 moreQOS.ch Logback vulnerable to Deserialization of Untrusted Data9.8 Critical
- embedthis goaheadA command-injection vulnerability exists in a web application on a custom-built GoAhead web...8.8 High
- embedthis goaheadA vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white...9.8 Critical
- zammadAn issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. XSS...6.1 Medium
- zammadAn XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1....6.1 Medium
- zammadAn issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1....9.8 Critical
- hikvision ds-76xxx series firmware, ds-77xxx series firmware +1 moreBuffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows...6.5 Medium
- hikvision ds-76xxx series firmware, ds-77xxx series firmware +1 moreBuffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows...6.5 Medium
- hikvision ds-76xxx series firmware, ds-77xxx series firmware +1 moreBuffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows...6.5 Medium
- audiofileThe decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote...5.5 Medium
- imagemagickMemory leak in the IsOptionMember function in MagickCore/option.c in ImageMagick before 6.9.2-2,...7.5 High
flacMageiaUpdated flac packages fix security vulnerabilityNo score- fiyo cmsFiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level...8.8 High
- roundcube webmailrcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site...6.1 Medium
- mikrotik routerosThe MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in...7.5 High
- oneplus oxygenosOxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands ...9.8 Critical
- oneplus oxygenosAn issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T. The attacker can...9.8 Critical
- wordpressIn WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin...6.5 Medium
- wordpressIn WordPress before 4.7.3 (wp-admin/js/tags-box.js), there is cross-site scripting (XSS) via...6.1 Medium
- wordpress, debian linux +1 moreIn WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting ...5.4 Medium
- wordpress, debian linux +1 moreIn WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by...4.9 Medium
- Show moreLoading…