CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- gitlabMultiple versions of GitLab expose a dangerous method to any authenticated user that could lead...8.2 High
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from...5.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from...5.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS...6.1 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in...5.4 Medium
- nextcloud serverNextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on...4.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer...8.1 High
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore...4.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit...4.3 Medium
- nextcloud, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content...5.3 Medium
- nextcloud server, owncloud +1 moreNextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution...6.1 Medium
- revive-adserver revive adserverRevive Adserver before 3.2.3 suffers from Reflected XSS. `www/admin/stats.php` is vulnerable to...5.4 Medium
- revive-adserver revive adserverRevive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The Revive Adserver...8.8 High
- revive-adserver revive adserverRevive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). A number of scripts...8.8 High
- revive-adserver revive adserverRevive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via...5.4 Medium
- revive-adserver revive adserverRevive Adserver before 3.2.3 suffers from Persistent XSS. A vector for persistent XSS attacks via...5.4 Medium
- revive-adserver revive adserverRevive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy. It is...5.3 Medium
- revive-adserver revive adserverRevive Adserver before 3.2.3 suffers from reflected XSS. The affiliate-preview.php script in www...5.4 Medium
- revive-adserver revive adserverRevive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF). The password...8.8 High
- revive-adserver revive adserverRevive Adserver before 3.2.3 suffers from persistent XSS. Usernames are not properly escaped when...5.4 Medium
- revive-adserver revive adserverRevive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session...9.8 Critical
- revive-adserver revive adserverRevive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication...9.8 Critical
- go-jose project go-joseInteger Overflow in go-jose7.5 High
- go-jose project go-joseGo JOSE Signature Validation Bypass7.5 High
- go-jose project go-joseElliptic Curve Key Disclosure in go-jose9.1 Critical
graphicsmagickDebiangraphicsmagick - regression updateNo score- linux kernelThe vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux...7.8 High
- linux kernelThe TCP stack in the Linux kernel through 4.10.6 mishandles the SCM_TIMESTAMPING_OPT_STATS...7.1 High
- ibm tririga application platformIBM TRIRIGA Report Manager 3.2 through 3.5 contains a vulnerability that could allow an...8.8 High
- ibm kenexa lcms premier, ibm corporation kenexa lcms premier on cloud +1 moreIBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive...5.3 Medium
- ibm kenexa lcms premier, ibm corporation kenexa lcms premier on cloud +1 moreIBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive...6.5 Medium
- ibm websphere portalIBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- ibm tririga application platformIBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm cognos business intelligenceIBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to...8.8 High
- ibm corporation key lifecycle manager, ibm security key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This...3.7 Low
- ibm call center for commerceIBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cross-site scripting. This...5.4 Medium
- eview ev-07s gps tracker, eviewgps ev-07s gps tracker firmware +1 moreDue to a lack of standard encryption when transmitting sensitive information over the internet to...7.5 High
- eview ev-07s gps tracker, eviewgps ev-07s gps tracker firmware +1 moreDue to a lack of bounds checking, several input configuration fields for the Eview EV-07S GPS...5.3 Medium
- eview ev-07s gps tracker, eviewgps ev-07s gps tracker firmware +1 moreDue to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's...7.5 High
- imagemagickThe ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause...5.5 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +12 more +14 moreThe Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2...7.5 High
- radare radare2The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to...5.5 Medium
- phpPHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen...7.4 High
- yii software yiiYii Framework Reflected XSS6.1 Medium
- irssiThe netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service ...9.8 Critical
- extraputtyThe TFTP server in ExtraPuTTY 0.30 and earlier allows remote attackers to cause a denial of...7.5 High
- putty, opensuse leap +1 moreThe ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have...9.8 Critical
- ntpThe Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have...5.5 Medium
- ntpNTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain...7.0 High
- ntpStack-based buffer overflow in the Windows installer for NTP before 4.2.8p10 and 4.3.x before 4.3...7.8 High
- Show moreLoading…