CVEs published in March 2017
1,192 vulnerabilities, 119 critical, 18 exploited.
- modx revolutionsetup/controllers/language.php in MODX Revolution 2.5.4-pl and earlier does not properly...6.1 Medium
- siklu etherhaul firmwareSiklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE)...9.8 Critical
- xoopsSQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote...7.2 High
- ceragon fibeair ip-10 firmwareIn the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass...9.8 Critical
- siklu etherhaul firmwareSiklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account,...9.8 Critical
- gotrango apex lynx firmware, apex orion firmware, giga lynx firmware +2 more +4 moreTrango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have...9.8 Critical
- trango a600 firmwareTrango Altum AC600 devices have a built-in, hidden root account, with a default password of...9.8 Critical
- gotrango apex firmware, apex lynx firmware, apex orion firmware +8 more +10 moreTrango Apex <= 2.1.1, ApexLynx < 2.0, ApexOrion < 2.0, ApexPlus <= 3.2.0, Giga <= 2.6.1, GigaLynx...9.8 Critical
- linux kernelThe vmw_gb_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux...5.5 Medium
- flexense diskboss, disksorter, syncbreeze +2 moreA buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10...7.8 High
- emc isilon onefsEMC Isilon OneFS is affected by a path traversal vulnerability that may potentially be exploited...7.5 High
- emc rsa archer security operations managementEMC RSA Archer Security Operations Management with RSA Unified Collector Framework versions prior...7.0 High
- auromeera emliHTTP Exploit in eMLi Portal in AuroMeera Technometrix Pvt. Ltd. eMLi allows an Attacker to View...7.5 High
- projectatomic oci-register-machineThe machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command.3.3 Low
- apache ambariApache Ambari reveals administrator passwords5.5 Medium
- pidgin mxitThe Mxit protocol uses weak encryption when encrypting user passwords, which might allow...8.8 High
- apache ambariIn Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the...9.8 Critical
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is...7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is...7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a...7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has...7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has...7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has...5.5 Medium
- mikrotik routerosA vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow...7.5 High
- netcomm nb16wv-02 firmwareCross-site scripting (XSS) vulnerability in the NetComm NB16WV-02 router with firmware NB16WV_R0...5.4 Medium
- honeywell intermec pc23 firmware, intermec pc42 firmware, intermec pc43 firmware +4 more +6 moreHoneywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11...8.8 High
- synacor zimbra collaboration suiteZimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External...9.8 Critical
- open-xchange documentconverter-api, office web, appsuite backend +1 more +3 moreCross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite backend before 7.6.2-rev59...6.1 Medium
- openstack glanceOpenStack Glance Signature Verification Bypass5.5 Medium
- call-cc chickenThe string-translate* procedure in the data-structures unit in CHICKEN before 4.10.0 allows...7.5 High
- openstack oslo.middleware, unspecified python-oslo-middleware, canonical ubuntu linux +2 moreoslo.middleware Information Disclosure vulnerability5.9 Medium
- moodleMoodle Cross-site Scripting in the Course summary filter of the Add a new course5.4 Medium
- siemens ruggedcom rox iThe integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow...5.4 Medium
- siemens ruggedcom rox iSiemens RUGGEDCOM ROX I (all versions) allow an authenticated user to bypass access restrictions...8.8 High
- siemens ruggedcom rox iThe integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow...8.8 High
- siemens ruggedcom rox iSiemens RUGGEDCOM ROX I (all versions) contain a vulnerability in the integrated web server at...6.1 Medium
- siemens ruggedcom rox iSiemens RUGGEDCOM ROX I (all versions) contain a vulnerability that could allow an authenticated...6.5 Medium
tnefDebiantnef - regression updateNo score- linux kernelThe packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does...7.8 High
- suse rancherRancher Access Control Vulnerability8.8 High
- projectatomic bubblewrapWhen executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent...10.0 Critical
- apache ambariApache Ambari Improper Access Control9.8 Critical
- apache camelApache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks9.8 Critical
- intel anti-virus engine (ave), mcafee anti-malware scan engine +1 moreSoftware Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through...7.3 High
- gitlabMultiple versions of GitLab expose sensitive user credentials when assigning a user to an issue...6.3 Medium
- zulip serverAn error in the implementation of an autosubscribe feature in the check_stream_exists route of...4.3 Medium
- brave browserBrave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full...4.7 Medium
- revive-adserver revive adserverRevive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web...5.4 Medium
- revive-adserver revive adserverRevive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't...3.1 Low
- revive-adserver revive adserverRevive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. `www/delivery...9.0 Critical
- Show moreLoading…