Archive

24 March 2017

Vulnerabilities first published on this day (UTC), newest first.

← February 2017 2017 / March /24 April 2017 →

All Critical High Medium Low Exploited only Public exploit

47 results · Feed

Unscored —

CVE-2017-6087 Public exploit

EyesOfNetwork ("EON") 5.0 and earlier allows remote authenticated users to execute arbitrary code via shell metacharact…

Mar 24, 2017
Unscored —

CVE-2017-5869 Public exploit EPSS 35%

Directory traversal vulnerability in the file import feature in Nuxeo Platform 6.0, 7.1, 7.2, and 7.3 allows remote aut…

Mar 24, 2017
Medium 5.5

CVE-2017-5644

Improper Restriction of Recursive Entity References in DTDs in Apache POI

Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack.

Apache Software Foundation Apache POI libapache-poi-java libapache-poi-java Debian Ubuntu Maven

Mar 24, 2017
Unscored —

CVE-2017-6369

Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticat…

firebird3.0 firebird2.5 Debian Ubuntu

Mar 24, 2017
Unscored —

CVE-2017-6507

An issue was discovered in AppArmor before 2.12. Incorrect handling of unknown AppArmor profiles in AppArmor init scrip…

apparmor apparmor Debian Ubuntu

Mar 24, 2017
Unscored —

CVE-2017-5199

The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrar…

Mar 24, 2017
Unscored —

CVE-2017-5198

SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root acc…

Mar 24, 2017