Skip to content
OpenAdvisories

Archive

27 March 2017

Vulnerabilities first published on this day (UTC), newest first.

← February 2017 2017 / March /27 April 2017 →
  1. 158
  2. 248
  3. 350
  4. 48
  5. 516
  6. 616
  7. 764
  8. 8109
  9. 928
  10. 1024
  11. 119
  12. 1212
  13. 1315
  14. 1464
  15. 1588
  16. 1620
  17. 17180
  18. 183
  19. 193
  20. 2063
  21. 2122
  22. 2229
  23. 23105
  24. 2447
  25. 251
  26. 269
  27. 2759
  28. 2839
  29. 2932
  30. 3045
  31. 3136
All Critical High Medium Low Exploited only Public exploit

59 results · Feed

  • Medium 4.3
    CVE-2015-8309 Public exploit

    Cherry Music directory traversal vulnerability

    Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."

    cherrymusic PyPI
  • Unscored —
    CVE-2016-7474

    In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to …

    F5 F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM Network devices
  • Unscored —
    CVE-2016-9922

    The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-6878

    Cross-site scripting (XSS) vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web sc…

  • Unscored —
    CVE-2017-5330

    ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to a…

    ark ark Debian Ubuntu
  • Unscored —
    CVE-2017-5932

    The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with …

    bash Debian
  • Unscored —
    CVE-2017-5931

    Integer overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to ca…

    qemu qemu Debian Alpine
  • Unscored —
    CVE-2017-5973

    The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users t…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-5850 Public exploit EPSS 17%

    httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for…

  • Unscored —
    CVE-2017-5899 Public exploit

    Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows loca…

    s-nail s-nail Debian Ubuntu
  • Unscored —
    CVE-2017-6957

    Stack-based buffer overflow in the firmware in Broadcom Wi-Fi HardMAC SoC chips, when the firmware supports CCKM Fast a…

  • Critical 9.8
    CVE-2017-7269 Exploited Public exploit Scanner template EPSS 100%

    Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 i…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2017-6003

    dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields.

  • Unscored —
    CVE-2017-6069

    Subrion CMS 4.0.5 has CSRF in admin/blog/add/. The attacker can add any tag, and can optionally insert XSS via the tags…

  • High 8.8
    CVE-2017-6068

    Subrion CMS vulnerable to CSRF in admin/blocks/add

    Subrion CMS 4.0.5 has CSRF in admin/blocks/add/. The attacker can create any block, and can optionally insert XSS via the content parameter.

    intelliants/subrion Packagist
  • Unscored —
    CVE-2017-6013

    Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter.

  • Unscored —
    CVE-2017-6002

    Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/. The attacker can add any blog entry, and can optionally insert XSS in…

  • Unscored —
    CVE-2017-6066

    Subrion CMS 4.0.5 has CSRF in admin/languages/edit/1/. The attacker can perform any Edit Language action, and can optio…

  • Unscored —
    CVE-2017-6067

    Symphony 2.6.9 has XSS in publish/notes/edit/##/saved/ via the bottom form field.