CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- microsoft windows 10, windows 8.1, windows rt 8.1 +3 more +5 moreMicrosoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2,...5.9 Medium
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...7.5 High
- microsoft office, windows 10, windows 7 +6 more +8 moreThe Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows...7.5 High
- microsoft edge, internet explorer, microsoft corporation browsers +2 moreMicrosoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via...4.3 Medium
- aveva edgeMicrosoft Edge allows remote attackers to obtain sensitive information via a crafted web site,...4.3 Medium
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...7.5 High
- lenovo browser, microsoft internet explorer +1 moreMicrosoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information...4.3 Medium
- microsoft windows 10, windows server 2016, microsoft corporation device guard +2 moreDevice Guard in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows remote...5.5 Medium
- microsoft excel, excel viewer, office +2 more +4 moreMicrosoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, and Excel Services on...7.8 High
- microsoft windows, windows 7, windows 8.1 +9 more +11 moreThe Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and...7.8 High
- microsoft graphics device interface (gdi), windows 7, windows 8.1 +9 more +11 moreThe Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and...7.8 High
- capstone-engine capstoneCapstone Integer overflow8.8 High
- call-cc chickenAn issue was discovered in CHICKEN Scheme through 4.12.0. When using a nonstandard CHICKEN...8.1 High
- apache camelApache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.7.4 High
- jasper project jasperThe jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a...5.5 Medium
- zahmit design connections business directory pluginCross-site scripting (XSS) vulnerability in includes/admin/pages/manage.php in the Connections...6.1 Medium
- podofo project podofoHeap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in...9.8 Critical
- efssoft easy file sharing ftp serverEasy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability...7.5 High
- drupal, drupal core +1 moreDrupal Remote code execution8.1 High
- drupal, drupal core +1 moreDrupal Cross-Site Request Forgery (CSRF)7.5 High
- drupal, drupal core +1 moreDrupal editor module incorrectly checks access to inline private files7.5 High
- artifex mupdf, debian linux +1 moreBuffer overflow in the my_getline function in jstest_main.c in Mujstest in Artifex Software, Inc....5.5 Medium
- artifex mupdf, debian linux +1 moreBuffer overflow in the main function in jstest_main.c in Mujstest in Artifex Software, Inc. MuPDF...5.5 Medium
- sap businessobjects financial consolidationCross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial...4.7 Medium
- fatek ethernet module configuration tool cbe firmware, ethernet module configuration tool cbeh firmware, ethernet module configuration tool cm25e firmware +1 more +3 moreAn issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software...9.8 Critical
libdatetime-timezone-perlDebianlibdatetime-timezone-perl - new upstream versionNo scoretzdataDebiantzdata - new upstream versionNo score- linux kernelThe keyring_search_aux function in security/keys/keyring.c in the Linux kernel through 3.14.79...5.5 Medium
- cisco wireless lan controller software, wireless lan controller firmware +1 moreA vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an...8.8 High
- cisco tidal enterprise schedulerA vulnerability in the Client Manager Server of Cisco Workload Automation and Cisco Tidal...8.6 High
- cisco aironet access point softwareA vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could...9.8 Critical
- cisco virtualized packet core, asr 5000 series software +1 moreA privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating...8.8 High
- virglrenderer project virglrendererThe util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer...6.5 Medium
- netpbm project netpbm, fedoraproject fedora +1 moretiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which...5.5 Medium
- bigtreecms bigtree cmsCSRF exists in BigTree CMS 4.2.16 with the value[#][*] parameter to the admin/settings/update/...4.3 Medium
- bigtreecms bigtree cmsCSRF exists in BigTree CMS 4.2.16 with the value parameter to the admin/settings/update/ page....4.3 Medium
- bigtreecms bigtree cmsCSRF exists in BigTree CMS 4.1.18 with the nav-social[#] parameter to the admin/settings/update/...4.3 Medium
- bigtreecms bigtree cmsCSRF exists in BigTree CMS 4.1.18 with the colophon parameter to the admin/settings/update/ page....4.3 Medium
- bigtreecms bigtree cmsCSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete...7.1 High
- alienvault ossim, unified security management +1 moreThe logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been...9.8 Critical
- epson tmnet webconfigCross-site scripting (XSS) vulnerability in EPSON TMNet WebConfig 1.00 allows remote attackers to...6.1 Medium
- ettercap-project ettercapThe compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and...5.5 Medium
- broadcom tcpreplayBuffer overflow in the tcpcapinfo utility in Tcpreplay before 4.2.0 Beta 1 allows remote...7.8 High
- amazon kindle for pcUntrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to...7.3 High
- virglrenderer project virglrendererThe parse_instruction function in gallium/auxiliary/tgsi/tgsi_text.c in virglrenderer before 0.6...7.1 High
- weblateWeblate user account enumeration via reset password form5.3 Medium
- sawmillSawmill Enterprise 8.7.9 allows remote attackers to gain login access by leveraging knowledge of...9.8 Critical
- easycom-aura sql iplugEasyCom SQL iPlug allows remote attackers to cause a denial of service via the D$EVAL parameter...7.5 High
- easycom-aura easycom for phpStack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote...9.8 Critical
- Show moreLoading…