Skip to content
OpenAdvisories

Archive

22 March 2017

Vulnerabilities first published on this day (UTC), newest first.

29 results · Feed

  • Unscored —
    CVE-2017-6972 Public exploit EPSS 15%

    AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily exec…

  • Unscored —

    A vulnerability in the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment cou…

  • Unscored —

    A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 thro…

    iOS
  • Unscored —

    A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attac…

    iOS
  • Unscored —

    A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.…

    iOS
  • Unscored —

    A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services R…

    iOS
  • Unscored —

    A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject a…

    iOS
  • Unscored —

    A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an…

  • Unscored —

    A Directory Traversal vulnerability in the web framework code of the Cisco application-hosting framework (CAF) componen…

  • Unscored —
    CVE-2017-7230 Public exploit EPSS 14%

    A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitra…

  • Unscored —

    pngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it fails to properly process…

  • Unscored —

    In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScri…

  • Unscored —

    The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and …

  • Unscored —

    GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an E…

  • Unscored —

    The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disa…

  • Unscored —

    The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2…

  • Unscored —

    GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input scrip…

  • Unscored —

    Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file.

  • Unscored —

    Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.

  • Unscored —

    magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds ac…

  • Unscored —

    Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.

  • Unscored —

    ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file.

  • Unscored —

    ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file.

  • Unscored —

    Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.

  • Unscored —

    magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash).

  • Unscored —
    CVE-2017-6971 Public exploit EPSS 16%

    AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary comm…

  • Unscored —
    CVE-2017-6970 Public exploit

    AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privi…

  • Unscored —

    A cross-site scripting (XSS) vulnerability in MantisBT before 2.1.1 allows remote attackers to inject arbitrary HTML or…

  • Unscored —

    CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01_beta_20170306. This can be used to bypass authenticati…