CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- huawei ar3200 firmwareHuawei AR3200 routers with software before V200R007C00SPC600 allow remote attackers to cause a...9.8 Critical
- artifex mujsHeap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc....9.8 Critical
- artifex mujs, fedoraproject fedora +1 moreregexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of service (NULL...7.5 High
- eonweb project eonwebEyesOfNetwork ("EON") 5.0 and earlier allows remote authenticated users to execute arbitrary code...8.8 High
- nuxeoDirectory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and...8.8 High
- apache poiImproper Restriction of Recursive Entity References in DTDs in Apache POI5.5 Medium
- huawei mate s firmware, p8 firmware +1 moreThe ION driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00...5.5 Medium
- qemuLocal privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.10.0 Critical
- solarwinds log and event managerThe editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated...8.8 High
- solarwinds log and event managerSolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local...8.8 High
tnefDebiantnef - regression updateNo score- linux kernelThe vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux...5.5 Medium
- apparmor, canonical ubuntu core, ubuntu touch +2 moreAn issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles...5.9 Medium
- firebirdsql firebirdInsufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2...8.8 High
- artifex mupdfAn exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A...7.5 High
- libtiffLibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0...7.8 High
- libtifftools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer...7.8 High
- libtiffLibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and...5.5 Medium
- libtiffLibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and...5.5 Medium
- piengine piPi Cross-site Scripting vulnerability6.1 Medium
- gazelle project gazelleA Cross-Site Scripting (XSS) was discovered in Gazelle before 2017-03-19. The vulnerability...6.1 Medium
- gazelle project gazelleMultiple Cross-Site Scripting (XSS) were discovered in Gazelle before 2017-03-19. The...6.1 Medium
- gazelle project gazelleA Cross-Site Scripting (XSS) was discovered in Gazelle before 2017-03-19. The vulnerability...6.1 Medium
- gazelle project gazelleMultiple Cross-Site Scripting (XSS) were discovered in Gazelle before 2017-03-19. The...6.1 Medium
- pcreStack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in...7.8 High
- pcreStack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in...7.8 High
- pcreThe _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to...5.5 Medium
- sap gui for windowsSAP GUI 7.2 through 7.5 allows remote attackers to bypass intended security policy restrictions...9.8 Critical
- usb pratirodh project pratirodhUSB Pratirodh is prone to sensitive information disclosure. It stores sensitive information such...6.6 Medium
- usb pratirodh project pratirodhUSB Pratirodh allows remote attackers to conduct XML External Entity (XXE) attacks via XML data...9.8 Critical
- microsoft skypeMicrosoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote...9.8 Critical
- alcatel-lucent motive home device managerMultiple cross-site scripting (XSS) vulnerabilities in the Management Console in Alcatel-Lucent...5.4 Medium
- samsung m288ofw firmware, nt14u firmware, x10p firmware +3 more +5 moreThe Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and...9.8 Critical
- cloudera key trustee serverCloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow...9.8 Critical
- cloudera navigator, manager +1 moreCloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when...3.1 Low
- cloudera managerCloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x...3.3 Low
- apache hadoop, cloudera cdh +1 moreImproper Authentication in Apache Hadoop6.5 Medium
- cloudera cdhThe JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using...3.1 Low
- slims slims7 cendanaMultiple Cross-Site Scripting (XSS) were discovered in admin/modules components in SLiMS 7...6.1 Medium
- jasper project jasperInteger overflow in jas_image.c in JasPer before 1.900.25 allows remote attackers to cause a...5.5 Medium
- jasper project jasper, fedoraproject fedora, opensuse leap +2 moreThe calcstepsizes function in jpc_dec.c in JasPer 1.900.22 allows remote attackers to cause a...7.5 High
- jasper project jasper, fedoraproject fedora +1 moreThe jpc_dequantize function in jpc_dec.c in JasPer 1.900.13 allows remote attackers to cause a...7.5 High
- libdwarf project libdwarfThe dwarf_get_aranges_list function in dwarf_arrange.c in Libdwarf before 20161124 allows remote...7.5 High
- libdwarf project libdwarfHeap-based buffer overflow in the _dwarf_skim_forms function in libdwarf/dwarf_macro5.c in...7.5 High
- jasper project jasperMultiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2)...5.5 Medium
- imagemagickMemory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick before 6.9.6-3 allows...5.5 Medium
- imagemagickOff-by-one error in ImageMagick before 6.6.0-4 allows remote attackers to cause a denial of...5.5 Medium
- phpmemcachedadmin project phpmemcachedadminPHPMemcachedAdmin 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via...9.8 Critical
- kankunit konke smart plug firmwareThe Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote...9.8 Critical
- tenable nessusNessus 6.6.2 - 6.10.3 contains a flaw related to insecure permissions that may allow a local...7.8 High
- Show moreLoading…