CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- virglrenderer project virglrendererMemory leak in the vrend_renderer_context_create_internal function in vrend_decode.c in...6.5 Medium
- vmware toolsVMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the...6.7 Medium
- jasper project jasperHeap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10...7.8 High
- jasper project jasperThe jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a...5.5 Medium
- podofo project podofoThe PoDoFo::PdfColorGray::~PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote...5.5 Medium
- podofo project podofoThe PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote...5.5 Medium
- podofo project podofoThe PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote...5.5 Medium
- podofo project podofoThe GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in...5.5 Medium
- podofo project podofoThe PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers...5.5 Medium
- podofo project podofoBuffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo...7.8 High
- podofo project podofoHeap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in...7.8 High
- podofo project podofoThe ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote...5.5 Medium
- podofo project podofoThe GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in...5.5 Medium
- podofo project podofoThe ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote...5.5 Medium
- libplist project libplistThe parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to...5.0 Medium
- libplist project libplistHeap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice...5.0 Medium
- libplist project libplistHeap-based buffer overflow in the parse_unicode_node function in bplist.c in libimobiledevice...7.3 High
- libplist project libplistThe base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to...5.0 Medium
- libplist project libplistThe parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users...5.0 Medium
- libplist project libplistThe parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users...5.0 Medium
- libcacard project libcacardMemory leak in the vcard_apdu_new function in card_7816.c in libcacard before 2.5.3 allows local...6.5 Medium
- virglrenderer project virglrendererMemory leak in the vrend_create_vertex_elements_state function in vrend_renderer.c in...6.5 Medium
- netgear dgn2200 firmwareCross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0...8.8 High
- virglrenderer project virglrendererMemory leak in the add_shader_program function in vrend_renderer.c in virglrenderer before 0.6.0...6.5 Medium
- virglrenderer project virglrendererThe vrend_decode_reset function in vrend_decode.c in virglrenderer before 0.6.0 allows local...6.5 Medium
- virglrenderer project virglrendererStack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary...6.5 Medium
- artifex mupdf, debian linux +1 moreStack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. MuPDF 1.10a...7.8 High
- virglrenderer project virglrendererHeap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c...5.5 Medium
- virglrenderer project virglrendererMemory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer...6.5 Medium
- paloaltonetworks pan-osCross-site scripting (XSS) vulnerability in the Management Web Interface in Palo Alto Networks...5.4 Medium
- paloaltonetworks pan-osThe Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and...6.5 Medium
- security-framework project security-frameworkImproper Certificate Validation in security-framework5.3 Medium
dbus-1SUSE,dbus-1-x11SUSE +1 moreRecommended update for dbus-1No score- shishnet shimmieAn issue was discovered in Shimmie <= 2.5.1. The vulnerability exists due to insufficient...6.1 Medium
- concrete5An issue was discovered in concrete5 <= 5.6.3.4. The vulnerability exists due to insufficient...6.1 Medium
- open.gl project open.glAn issue was discovered in Open.GL before 2017-03-13. The vulnerability exists due to...6.1 Medium
- siberiancmsAn issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to...6.1 Medium
- concrete5An issue was discovered in concrete5 <= 5.6.3.4. The vulnerability exists due to insufficient...6.1 Medium
- jasper project jasperThe jp2_cdef_destroy function in jp2_cod.c in JasPer before 2.0.13 allows remote attackers to...5.5 Medium
- audiofileHeap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile (aka...7.8 High
- audiofileHeap-based buffer overflow in the MSADPCM::initializeCoefficients function in MSADPCM.cpp in...7.8 High
- qemuThe ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) before 2.9.0...6.5 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreChrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after...8.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreCast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...5.7 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreA use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and...7.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreChrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after...6.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreA use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and...7.8 High
- google chromeA use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a...8.8 High
- google chromePDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end...8.8 High
- jqueryui jquery ui, debian linux, fedoraproject fedora +10 more +12 morejQuery-UI vulnerable to Cross-site Scripting in dialog closeText6.1 Medium
- Show moreLoading…