CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- qnap qtsQNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via...9.8 Critical
- qnap qtsQNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain...9.8 Critical
- qnap qtsQNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and...9.8 Critical
- apng disassembler project disassemblerBuffer overflow in APNGDis 2.8 and below allows a remote attacker to execute arbitrary code via a...7.8 High
- samsung mobileThe kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung...9.8 Critical
- plonePlone Sandbox Escape4.3 Medium
- qnap qtsQNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator...7.5 High
- firejail project firejailFirejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root...7.8 High
- firejail project firejailFirejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent...9.0 Critical
- percona xtrabackup, fedoraproject fedora, opensuse leap +2 morexbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the...5.9 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 moreAn unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4...5.9 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent:...7.5 High
- novell groupwiseA reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell...6.1 Medium
- novell edirectoryA missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9...6.5 Medium
- novell edirectoryNDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition...7.5 High
- netiq access manager, opentext netiq access manager +1 moreA cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot...8.8 High
- netiq access manager, opentext netiq access manager +1 moreiManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2...9.8 Critical
- netiq access manager, opentext netiq access manager +1 moreMultiple components of the web tools in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2...6.1 Medium
- netiq access manager, opentext netiq access manager +1 moreNetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to...6.5 Medium
- netiq access manager, opentext netiq access manager +1 morePresence of a .htaccess file could leak information in NetIQ Access Manager 4.1 before 4.1.2 Hot...7.5 High
- netiq access manager, opentext netiq access manager +1 moreThe SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2...7.5 High
- netiq access manager, opentext netiq access manager +1 moreAn unfiltered finalizer target URL in the SAML processing feature in Identity Server in NetIQ...6.1 Medium
- netiq access manager, micro focus netiq imanager +1 moreThe certificate upload feature in iManager in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and...8.8 High
- netiq access manager, opentext netiq access manager +1 moreNetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML...5.5 Medium
- netiq access manager, opentext netiq access manager +1 moreExternal Entity Processing (XXE) vulnerability in the "risk score" application of NetIQ Access...5.5 Medium
- novell edirectoryA security vulnerability in cookie handling in the http stack implementation in NDSD in Novell...7.5 High
- novell netiq idm servicenow driverAn information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic...6.5 Medium
- netiq access governance suiteA logged-in user in NetIQ Access Governance Suite 6.0 through 6.4 could escalate privileges to...8.8 High
- cloudflare-scrape project cloudflare-scrapecfscrape Improper Input Validation vulnerability8.8 High
- samba, debian linux, redhat enterprise linux +2 moreSamba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a...7.5 High
- jasper project jasperThe JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers...7.5 High
- jasper project jasperThe jas_seq2d_create function in jas_seq.c in JasPer before 1.900.17 allows remote attackers to...5.5 Medium
- jasper project jasperThe jpc_pi_nextrpcl function in jpc_t2cod.c in JasPer before 1.900.17 allows remote attackers to...5.5 Medium
- jasper project jasperThe calcstepsizes function in jpc_dec.c in JasPer before 1.900.17 allows remote attackers to...5.5 Medium
- jasper project jasperThe jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to...7.5 High
- jasper project jasperThe jas_seq2d_create function in jas_seq.c in JasPer before 1.900.14 allows remote attackers to...5.5 Medium
- jasper project jasperThe jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers...7.5 High
- jasper project jasper, canonical ubuntu linux +1 moreThe ras_getcmap function in ras_dec.c in JasPer before 1.900.14 allows remote attackers to cause...5.5 Medium
- jasper project jasperInteger overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before...7.8 High
- elfutils project elfutilsThe __libelf_set_rawdata_wrlock function in elf_getdata.c in elfutils before 0.168 allows remote...5.5 Medium
- elfutils project elfutilsThe allocate_elf function in common.h in elfutils before 0.168 allows remote attackers to cause a...5.5 Medium
- alienvault ossim, nfsen, alienvault unified security management +2 moreAlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping...9.8 Critical
- cisco ios, ios xe +1 moreA vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6...8.6 High
- cisco ios xeA vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series...7.5 High
- cisco ios xeA vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated,...8.8 High
- cisco ios, ios xe +1 moreA vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0...7.5 High
- cisco ios xeA vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an...7.5 High
- cisco ioxA vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application...9.8 Critical
- cisco ioxA vulnerability in the Cisco application-hosting framework (CAF) component of the Cisco IOx...8.1 High
- cisco ioxA Directory Traversal vulnerability in the web framework code of the Cisco application-hosting...7.5 High
- Show moreLoading…