Skip to content
OpenAdvisories

Archive

12 March 2017

Vulnerabilities first published on this day (UTC), newest first.

← February 2017 2017 / March /12 April 2017 →
  1. 158
  2. 248
  3. 350
  4. 48
  5. 516
  6. 616
  7. 764
  8. 8109
  9. 928
  10. 1024
  11. 119
  12. 1212
  13. 1315
  14. 1464
  15. 1588
  16. 1620
  17. 17180
  18. 183
  19. 193
  20. 2063
  21. 2122
  22. 2229
  23. 23105
  24. 2447
  25. 251
  26. 269
  27. 2759
  28. 2839
  29. 2932
  30. 3045
  31. 3136
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2014-9645

    The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictio…

    busybox busybox Debian Ubuntu
  • Unscored —
    CVE-2017-6444 Public exploit EPSS 13%

    The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast net…

  • Unscored —
    CVE-2017-6820

    rcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site scripting vulnerability…

    roundcube roundcube Debian Ubuntu
  • Unscored —
    CVE-2017-6823 Public exploit

    Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an ap…

  • Unscored —
    CVE-2017-5626

    OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that a…

  • Unscored —
    CVE-2017-5624

    An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T. The attacker can persistently make the (locked) …

  • Unscored —
    CVE-2017-6815

    In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation.

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2017-6814

    In WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via Media File Metadata. This is demonstra…

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2017-6816

    In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin de…

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2017-6819

    In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-t…

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2017-6817

    In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Emb…

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2017-6818

    In WordPress before 4.7.3 (wp-admin/js/tags-box.js), there is cross-site scripting (XSS) via taxonomy term names.

    wordpress Debian