Skip to content
OpenAdvisories

Archive

March 2017

Vulnerabilities first published in this month (UTC), newest first.

← February 2017 2017 / March April 2017 →
  1. 158
  2. 248
  3. 350
  4. 48
  5. 516
  6. 616
  7. 764
  8. 8109
  9. 928
  10. 1024
  11. 119
  12. 1212
  13. 1315
  14. 1464
  15. 1588
  16. 1620
  17. 17180
  18. 183
  19. 193
  20. 2063
  21. 2122
  22. 2229
  23. 23105
  24. 2447
  25. 251
  26. 269
  27. 2759
  28. 2839
  29. 2932
  30. 3045
  31. 3136
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Critical 9.8
    CVE-2014-3931 Exploited EPSS 29%

    fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory w…

    KEV Jul 7, 2025
  • Critical 9.8
    CVE-2016-6807

    Apache Ambari Improper Access Control

    Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent host…

    Apache Software Foundation Apache Ambari org.apache.ambari:ambari Maven
  • Critical 9.8
    CVE-2016-8749 EPSS 11%

    Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks

    Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.

    Apache Software Foundation Apache Camel org.apache.camel:camel-jackson Maven
  • Critical 9.1
    CVE-2016-9121

    Elliptic Curve Key Disclosure in go-jose

    go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static pri…

    golang-gopkg-square-go-jose.v1 github.com/square/go-jose gopkg.in/square/go-jose.v1 Debian Go
  • Critical 9.8
    CVE-2017-7269 Exploited Public exploit Scanner template EPSS 100%

    Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 i…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2017-2641 Public exploit EPSS 15%

    Moodle SQL injection via user preferences

    In Moodle 2.x and 3.x, SQL injection can occur via user preferences.

    moodle/moodle Web / CMS Packagist
  • Critical 9.8
    CVE-2017-7214

    OpenStack Nova logs sensitive context from notification exceptions

    An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification exception contexts appearing in ERROR level logs may include sensitive information such as account passwor…

    nova nova Debian PyPI
  • Critical 9.8
    CVE-2017-3881 Exploited Public exploit Scanner template EPSS 99%

    A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software c…

    iOS
    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2017-5929

    QOS.ch Logback vulnerable to Deserialization of Untrusted Data

    QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

    logback logback ch.qos.logback:logback-core ch.qos.logback:logback-classic Debian Ubuntu Maven
  • Critical 9.8
    CVE-2017-5638 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Apache Struts vulnerable to remote arbitrary command execution due to improper input validation

    The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted …

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven
    KEV Nov 3, 2021
  • Critical 10.0
    CVE-2017-2785

    An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A sp…

    Pharos PopUp Printer Client
  • Critical 9.0
    CVE-2017-2787

    A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially craf…

    Pharos PopUp Printer Client
  • Critical 10.0
    CVE-2017-2788

    A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially craf…

    Pharos PopUp Printer Client
  • Critical 9.8
    CVE-2017-3159

    Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization

    Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.

    Apache Software Foundation Apache Camel org.apache.camel:camel-snakeyaml Maven
  • Critical 9.8
    CVE-2016-10193

    espeak-ruby allows arbitrary command execution

    The espeak-ruby gem before 1.0.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the speak, save, bytes or bytes_wav method in lib/espeak/speech.rb.

    espeak-ruby RubyGems
  • Critical 9.8
    CVE-2016-10194

    festivaltts4r allows arbitrary command execution

    The festivaltts4r gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a string to the (1) to_speech or (2) to_mp3 method in lib/festivaltts4r/festival4r.rb.

    festivaltts4r RubyGems
  • Critical 9.0
    CVE-2016-10127

    PySAML2 XML external entity attack

    PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response.

    pysaml2 python-pysaml2 Debian PyPI