CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- pngdefry project pngdefrypngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it...7.8 High
- disksorter disk sorterA buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote...9.8 Critical
- kunenaIn the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic...6.1 Medium
- gnu binutilsGNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while...7.5 High
- gnu binutilsThe pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as...9.1 Critical
- gnu binutilsThe find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where...7.5 High
- gnu binutilsThe find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write ...5.5 Medium
- gnu binutilsGNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while...7.5 High
- alienvault ossim, nfsen, alienvault unified security management +2 moreAlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to...8.8 High
- alienvault ossim, nfsen, alienvault unified security management +2 moreAlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute...8.4 High
- arm mbed tlsAn exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code...8.1 High
- mantisbtA cross-site scripting (XSS) vulnerability in MantisBT before 2.1.1 allows remote attackers to...6.1 Medium
- d-link dir-600m firmwareCSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01_beta_20170306. This can be used...8.8 High
eglibcUbuntu,glibcUbuntu +1 moreeglibc, glibc regressionNo score- misp project mispCross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68...6.1 Medium
- openstack novaOpenStack Nova logs sensitive context from notification exceptions9.8 Critical
- avira free security suite, internet security suite, optimization suite +1 more +3 moreCode injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite...6.7 Medium
- bitdefender antivirus plus, internet security, total security +2 moreCode injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security...6.7 Medium
- avast free antivirus, internet security, premier +1 more +3 moreCode injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and...6.7 Medium
- avg internet security, ultimate, anti-virus +2 moreCode injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and...6.7 Medium
- trendmicro internet security, maximum security, antivirus\+ +1 more +3 moreCode injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet...6.7 Medium
- cisco ios, ios xe +1 moreA vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software ...5.9 Medium
- cisco ios, ios xe +1 moreA vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS...7.4 High
- dell recoverpoint for virtual machines, emc recoverpoint +1 moreEMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior...7.5 High
- meteocontrol weblogA Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions,...8.8 High
- gnu binutilsobjdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1...5.5 Medium
- gnu binutilsThe dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while...5.5 Medium
- libavThe decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a...7.1 High
- libavThe ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a...7.1 High
- gamepanelx gamepanelx-v3A Cross-Site Scripting (XSS) was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due...6.1 Medium
- imdbphp project imdbphpimdbphp Cross-Site Scripting (XSS)6.1 Medium
- zoneminderA Cross-Site Scripting (XSS) was discovered in ZoneMinder before 1.30.2. The vulnerability exists...6.1 Medium
- slims slims7 cendanaMultiple Cross-Site Scripting (XSS) were discovered in SLiMS 7 Cendana before 2017-03-16. The...6.1 Medium
- openstack glanceOpenStack Glance Server-Side Request Forgery (SSRF)5.8 Medium
- artifex ghostscriptThe mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote...5.5 Medium
- juniper junos spaceXML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service.6.5 Medium
- juniper junos spaceCross-site scripting (XSS) vulnerability in Junos Space before 15.2R2 allows remote attackers to...6.1 Medium
- juniper junos spaceCommand injection vulnerability in Junos Space before 15.2R2 allows attackers to execute...8.8 High
- juniper junos spaceCross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to...8.8 High
- juniper junos spaceInsufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM)...8.1 High
- juniper junos spaceInsufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network...9.8 Critical
- mobatek mobaxtermDirectory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows...5.3 Medium
- solarwinds ftp voyagerMultiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler...8.8 High
- kinsey infor-lawsonMultiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote...9.8 Critical
- paloaltonetworks terminal services agentPalo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak...5.3 Medium
- usbpcap project usbpcapThe IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted...7.8 High
- qemuBuffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when...7.5 High
- virglrenderer project virglrendererThe vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a...5.5 Medium
- postfixadmin project postfixadmin, opensuse leap +1 moreThe AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins...2.7 Low
- gnu screenGNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root...7.8 High
- Show moreLoading…