Archive
March 2017
Vulnerabilities first published in this month (UTC), newest first.
1,302 results · Feed
-
Unscored —
The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected a…
-
Unscored —
The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privi…
-
Unscored —
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveragin…
-
Unscored —
The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out…
-
Unscored —
The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of s…
-
Unscored —
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a mal…
-
Unscored —
libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation vio…
-
Unscored —
An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of t…
-
Unscored —CVE-2016-8855 Public exploit
Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experienc…
-
Unscored —CVE-2017-7184 Public exploit
The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certai…
-
Unscored —
An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap…
-
Unscored —
Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fr…
-
Unscored —CVE-2017-7178 Public exploit
CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted …
-
Unscored —
The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code.…
-
Unscored —
An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker t…
-
Unscored —
A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Pro…
-
Unscored —
A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communi…
-
Unscored —
A Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nex…
-
Unscored —
An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to…
-
Unscored —
A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated…
-
Unscored —
An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nex…
-
Unscored —
A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacke…
-
Unscored —
A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 900…
-
Critical 9.8
A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software c…
KEV Mar 25, 2022 -
Unscored —
A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could all…
-
Unscored —
A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco A…
-
Unscored —
A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote atta…
-
Unscored —
A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an unauthenticat…
-
Unscored —
An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, re…
-
Unscored —
An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to ha…
-
Unscored —
Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or …
-
Medium 5.3CVE-2017-6370 Public exploit
TYPO3 Information Disclosure Vulnerability
TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.
-
Unscored —
LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted …
-
Unscored —
Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attacker…
-
Unscored —
Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6)…
-
Unscored —
Information disclosure issue in qdPM 8.3 allows remote attackers to obtain sensitive information via a direct request t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in qdPM 8.3 allow remote attackers to inject arbitrary web script o…
-
Unscored —
qdPM 8.3 allows remote attackers to obtain sensitive information via invalid ID value to index.php/users/info/id/[ID], …
-
Unscored —
Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitr…
-
Unscored —
Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature.