CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- ibm algo oneIBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain...4.3 Medium
- ibm websphere application serverIBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured...8.1 High
- ibm content navigatorIBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm websphere mqIBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer...8.6 High
- ibm power hardware management console, ibm corporation tivoli system automation for multiplatforms +1 moreIBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to...7.8 High
- ibm rational rhapsody design managerAn unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to...3.1 Low
- ibm rational rhapsody design managerIBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection. A remote attacker could inject...5.4 Medium
- ibm rational rhapsody design managerIBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ca unified infrastructure management, unified infrastructure management snap +1 moreThe get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor)...7.5 High
- ibm rational rhapsody design managerIBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability that may allow an...4.3 Medium
- google androidThe Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code...7.8 High
- ibm rational collaborative lifecycle managementAn undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow...6.8 Medium
- huawei document security managementThe permission control module in Huawei Document Security Management (aka DSM) before...4.3 Medium
- virglrenderer project virglrendererMemory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows...6.5 Medium
- gnu glibcThe pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent...5.9 Medium
- openinfosecfoundation suricataThe MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from...9.8 Critical
- opendaylight l2switchhosttracker in OpenDaylight l2switch allows remote attackers to change the host location...5.3 Medium
- ffmpegLibavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted...7.8 High
- linux kernelThe sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users...7.8 High
- pcre, pcre pcre2 +1 morelibpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of...7.5 High
- qemu, debian linux +1 moreThe sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator)...5.5 Medium
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreAn integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix...9.8 Critical
- oneplus oxygenosAn issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can...6.6 Medium
- sitecore experience platformCross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list"...6.1 Medium
sitesummaryDebiansitesummary - regression updateNo score- linux kernelThe xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6...7.8 High
- git-scm gitcontrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1...8.8 High
- deluge-torrent deluge, debian linux +1 moreCSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves ...8.8 High
- openinfosecfoundation suricataSuricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the...7.5 High
sitesummaryDebiansitesummary - security updateNo score- erlang erlang\/otpAn issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions...9.8 Critical
- chef manage project manageThe user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to...9.8 Critical
- cisco ios, ios xe, ios and ios xe +2 moreA vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and...9.8 Critical
- cisco webex meetings serverAn Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an...6.5 Medium
- cisco nexus 9000 series switches, nx-os +1 moreA Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software...5.3 Medium
- cisco nexus 9000 series switches, nx-os +1 moreA Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS...5.3 Medium
- cisco unified communications managerA vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could...6.5 Medium
- cisco nexus 7000 series switches, nx-os +1 moreAn Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering...5.3 Medium
- cisco unified communications managerA vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could...5.4 Medium
- cisco unified communications managerA cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of...6.1 Medium
- cisco prime opticalA RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime...4.3 Medium
- cisco web security applianceA vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security...5.8 Medium
- cisco prime infrastructureAn API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could...5.4 Medium
- cisco ucs director, unified computing system director +1 moreA vulnerability in the web-based management interface of Cisco UCS Director could allow an...6.1 Medium
- cisco adaptive security appliance softwareA vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD)...5.3 Medium
- cisco prime service catalogA vulnerability in the web framework code of Cisco Prime Service Catalog could allow an...6.1 Medium
- cisco telepresence server, telepresence server software +1 moreAn API Privilege vulnerability in Cisco TelePresence Server Software could allow an...5.3 Medium
- cisco webex meetings serverAn XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated,...6.5 Medium
irssiSUSESecurity update for irssiNo scoreirssiSUSESecurity update for irssiNo score- Show moreLoading…