CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- ntpThe mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4...7.8 High
- allwinner linux-3.4-sunxiThe sunxi-debug driver in Allwinner 3.4 legacy kernel for H3, A83T and H8 devices allows local...7.8 High
- freeradiusOff-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer...8.1 High
- freeradiusThe EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified...8.1 High
- freeradiusThe EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of...5.9 Medium
- icinga, opensuse leap +1 moreCross-site scripting (XSS) vulnerability in the Classic-UI with the CSV export link and...6.1 Medium
- samsung galaxy app, account app +1 moreSamsung Account (AKA com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 allows man-in...8.0 High
- samsung galaxy app, account app +1 moreGALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps) before...8.0 High
- metinfoCross-site scripting (XSS) vulnerability in MetInfo 5.3.15 allows remote authenticated users to...5.4 Medium
- gnu bashThe path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted...7.8 High
- qemuInteger overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS...8.8 High
- s-nail project s-nailDirectory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx)...7.0 High
- openbsdhttpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +12 more +14 moreIn some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell...5.5 Medium
- fomori cherrymusicCherry Music Cross-site Scripting (XSS) vulnerability5.4 Medium
- fomori cherrymusicCherry Music directory traversal vulnerability4.3 Medium
- exfat project exfatHeap-based buffer overflow in the verify_vbr_checksum function in exfatfsck in exfat-utils before...7.8 High
- broadcom bcm4339 soc firmwareStack-based buffer overflow in the firmware in Broadcom Wi-Fi HardMAC SoC chips, when the...8.1 High
- microsoft internet information services (iis), internet information services +1 moreBuffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet...9.8 Critical
- intelliants subrion cmsSubrion CMS 4.0.5 has CSRF in admin/blog/add/. The attacker can add any tag, and can optionally...8.8 High
- intelliants subrion cmsSubrion CMS vulnerable to CSRF in admin/blocks/add8.8 High
- getsymphony symphonySymphony 2.6.9 has XSS in publish/notes/edit/##/saved/ via the bottom form field.6.1 Medium
- intelliants subrion cmsSubrion CMS 4.0.5 has CSRF in admin/languages/edit/1/. The attacker can perform any Edit Language...8.8 High
- intelliants subrion cmsSubrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter.9.8 Critical
- dotcmsdotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the...6.1 Medium
- intelliants subrion cmsSubrion CMS 4.0.5.10 has CSRF in admin/blog/add/. The attacker can add any blog entry, and can...8.8 High
- apt-cacher-ng project apt-cacher-ng, apt-cacher project apt-cacher +1 moreapt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded...6.1 Medium
- linux kernelThe cp_report_fixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before...6.6 Medium
- canonical ubuntu linux, debian linux +1 moredmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the...7.8 High
- ntpNTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service ...6.5 Medium
- ntpNTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial...6.5 Medium
- ntpBuffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before...7.8 High
- ntpStack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x...8.8 High
- ntp, apple mac os x, hpe hpux-ntp +1 more +3 moreMultiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3...8.8 High
- oneplus oxygenosWith OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device,...5.9 Medium
- moodleMoodle XSS in attachments to evidence of prior learning6.1 Medium
- moodleMoodle XSS Vulnerability6.1 Medium
- moodleMoodle Global search displays user names for unauthenticated users5.3 Medium
- moodleMoodle SQL injection via user preferences9.8 Critical
- netflix security monkeyNetflix Security Monkey Open Redirect vulnerability6.1 Medium
- potrace project potraceThe bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a...7.8 High
- jensenofscandinavia air\Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G)...8.8 High
- amd ryzenThe AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a...5.5 Medium
- libtiffLibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read)...7.8 High
- cmsmadesimple cms made simpleXSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the...5.4 Medium
- cmsmadesimple cms made simpleXSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the...5.4 Medium
- cmsmadesimple cms made simpleXSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the...5.4 Medium
- eclipse tinydtlsEclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS...7.5 High
- miele professional pst10 webserverAn issue was discovered on Miele Professional PST10 devices. The corresponding embedded webserver...7.5 High
- imagemagickcoders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD...7.8 High
- Show moreLoading…