Skip to content
OpenAdvisories

Archive

6 March 2017

Vulnerabilities first published on this day (UTC), newest first.

← February 2017 2017 / March /6 April 2017 →
  1. 158
  2. 248
  3. 350
  4. 48
  5. 516
  6. 616
  7. 764
  8. 8109
  9. 928
  10. 1024
  11. 119
  12. 1212
  13. 1315
  14. 1464
  15. 1588
  16. 1620
  17. 17180
  18. 183
  19. 193
  20. 2063
  21. 2122
  22. 2229
  23. 23105
  24. 2447
  25. 251
  26. 269
  27. 2759
  28. 2839
  29. 2932
  30. 3045
  31. 3136
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2016-10244

    The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph …

    freetype freetype freetype Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-6411 Public exploit

    Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or f…

  • Unscored —
    CVE-2017-5999

    An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptograph…

  • Unscored —
    CVE-2017-5633 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allo…

  • Medium 6.1
    CVE-2017-5197

    Silverstripe CMS XSS Vulnerability

    There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x before 3.5.2. The attack vector is a page name. An example payload is a crafted JavaScript event handler within a malformed SVG element.

    silverstripe/cms Packagist
  • Unscored —
    CVE-2017-6503

    WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS.

    qbittorrent qbittorrent Debian Ubuntu
  • Unscored —
    CVE-2017-6499

    An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could le…

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-6502

    An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in lib…

    imagemagick Debian
  • Unscored —
    CVE-2017-6416 Public exploit EPSS 11%

    An issue was discovered in SysGauge 1.5.18. A buffer overflow vulnerability in SMTP connection verification leads to ar…

  • Unscored —
    CVE-2017-6498

    An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS.

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-6501

    An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference.

    imagemagick Debian
  • Unscored —
    CVE-2017-6351 Public exploit

    The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / passwor…

  • Unscored —
    CVE-2017-6500

    An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read.

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-6504

    WebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could potentially lead to clickjacking.

    qbittorrent qbittorrent Debian Ubuntu
  • High 8.8
    CVE-2017-6334 Exploited Public exploit EPSS 73%

    dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute a…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2017-6497

    An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (th…

    imagemagick Debian