CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- cerberus ftp serverBuffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of...9.8 Critical
- typo3TYPO3 Information Disclosure Vulnerability5.3 Medium
- libtiffLibTIFF allows remote attackers to cause a denial of service (memory consumption and crash) via a...5.5 Medium
- qdpmUnrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets...8.8 High
- qdpmMultiple cross-site scripting (XSS) vulnerabilities in qdPM 8.3 allow remote attackers to inject...6.1 Medium
- qdpmqdPM 8.3 allows remote attackers to obtain sensitive information via invalid ID value to index...5.3 Medium
- qdpmInformation disclosure issue in qdPM 8.3 allows remote attackers to obtain sensitive information...7.5 High
- get-simple getsimple cmsGetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request...5.3 Medium
- get-simple getsimple cmsGetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request...7.5 High
- pluck-cms pluckPluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature.9.8 Critical
- pluck-cms pluckCross-site scripting (XSS) vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote...5.4 Medium
- pluck-cms pluckPluck CMS 4.7.2 allows remote attackers to obtain sensitive information by (1) changing ...5.3 Medium
- wondercmsPHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote...9.8 Critical
- wondercmsDirectory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to...9.8 Critical
- wondercmsCross-site scripting (XSS) vulnerability in Wonder CMS 2014 allows remote attackers to inject...6.1 Medium
- wondercmsWonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the...5.3 Medium
- wondercmsWonder CMS 2014 allows remote attackers to obtain sensitive information by viewing /files...7.5 High
- gnu binutilsreadelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing...9.1 Critical
- neutrinolabs xrdpxrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM...7.3 High
- gnu binutilsreadelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while...5.5 Medium
- gnu binutilsreadelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files...5.5 Medium
- apng2gif project apng2gifAn issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based...7.5 High
- apng2gif project apng2gifAn issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing...5.5 Medium
- apng2gif project apng2gif, canonical ubuntu linux, debian linux +2 moreAn issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based...7.5 High
- mantisbt source integrationAn XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page...6.1 Medium
- teleogistic invite anyoneAn issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for...5.3 Medium
- buddypressBuddyPress Docs plugin Improper Privilege Management4.3 Medium
- sane-backends project sane-backends, opensuse leap +1 moresaned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via...7.5 High
- mozilla firefox, firefox esr +1 moreThe Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local...5.5 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an...6.5 Medium
- microsoft internet explorerMicrosoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not...4.4 Medium
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...7.5 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or...8.8 High
- microsoft smbv1 server, microsoft corporation windows smb, microsoft server message block +8 more +10 moreThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7...8.1 High
- microsoft smbv1 server, windows 7, windows 8.1 +17 more +19 moreThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7...7.5 High
- microsoft windows, microsoft corporation windows smb, microsoft server message block +8 more +10 moreThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7...8.8 High
- microsoft smbv1, microsoft corporation windows smb, microsoft server message block +8 more +10 moreThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7...8.8 High
- microsoft smbv1, microsoft corporation windows smb, microsoft server message block +8 more +10 moreThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7...8.8 High
- microsoft windows, microsoft corporation windows smb, microsoft server message block +9 more +11 moreThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7...8.8 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...7.5 High
- aveva edgeMicrosoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in...4.2 Medium
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...7.5 High
- aveva edgeMicrosoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in...4.2 Medium
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...7.5 High
- lenovo browser, microsoft edge +1 moreA remote code execution vulnerability exists in the way affected Microsoft scripting engines...7.5 High
- Show moreLoading…