Archive
March 2017
Vulnerabilities first published in this month (UTC), newest first.
1,302 results · Feed
-
Unscored —
A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by …
-
Unscored —
NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to clickjacking attacks due to a mi…
-
Unscored —
An unfiltered finalizer target URL in the SAML processing feature in Identity Server in NetIQ Access Manager 4.1 before…
-
Unscored —
Presence of a .htaccess file could leak information in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before S…
-
Unscored —
iManager Admin Console in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 was vulnerable to iFrame…
-
Unscored —
The SAML2 implementation in Identity Server in NetIQ Access Manager 4.1 before 4.1.2 HF1 and 4.2 before 4.2.2 was handl…
-
Unscored —
The certificate upload feature in iManager in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 coul…
-
Unscored —
Multiple components of the web tools in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2.2 were vulne…
-
Unscored —
A security vulnerability in cookie handling in the http stack implementation in NDSD in Novell eDirectory before 9.0.1 …
-
Unscored —
A cross site request forgery protection mechanism in NetIQ Access Manager 4.1 before 4.1.2 Hot Fix 1 and 4.2 before 4.2…
-
Unscored —
NetIQ Access Manager 4.1 before 4.1.2 HF 1 and 4.2 before 4.2.2 was parsing incoming SAML requests with external entity…
-
Unscored —
External Entity Processing (XXE) vulnerability in the "risk score" application of NetIQ Access Manager 4.1 before 4.1.2…
-
High 8.8
cfscrape Improper Input Validation vulnerability
An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website owner could craft a page that executes arbitrary Python code against any cfscrape user who scrapes that website. This is fixed in 1.8.0.
-
Unscored —
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily exec…
-
Unscored —
A vulnerability in the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment cou…
-
Unscored —
A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 thro…
-
Unscored —
A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attac…
-
Unscored —
A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.…
-
Unscored —
A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services R…
-
Unscored —
A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject a…
-
Unscored —
A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an…
-
Unscored —
A Directory Traversal vulnerability in the web framework code of the Cisco application-hosting framework (CAF) componen…
-
Unscored —
A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitra…
-
Unscored —
pngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it fails to properly process…
-
Unscored —
In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScri…
-
Unscored —
The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and …
-
Unscored —
GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an E…
-
Unscored —
The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disa…
-
Unscored —
The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2…
-
Unscored —
GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input scrip…
-
Unscored —
-
Unscored —
Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.
-
Unscored —
magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds ac…
-
Unscored —
Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.
-
Unscored —
ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file.
-
Unscored —
ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file.
-
Unscored —
Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.
-
Unscored —
magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash).
-
Unscored —
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary comm…
-
Unscored —CVE-2017-6970 Public exploit
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privi…