Archive
March 2017
Vulnerabilities first published in this month (UTC), newest first.
1,302 results · Feed
-
Unscored —
Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the application with an array f…
-
Unscored —
Pluck CMS 4.7.2 allows remote attackers to obtain sensitive information by (1) changing "PHPSESSID" to an array; (2) ad…
-
Unscored —
Wonder CMS 2014 allows remote attackers to obtain sensitive information by viewing /files/password, which reveals the u…
-
Unscored —
Cross-site scripting (XSS) vulnerability in TinyMCE in Pluck CMS 4.7.2 allows remote authenticated users to inject arbi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Wonder CMS 2014 allows remote attackers to inject arbitrary web script or H…
-
Unscored —
GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<use…
-
Unscored —
PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote attackers to execute arbitr…
-
Unscored —
GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) plugins/anonymo…
-
Unscored —
Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) vi…
-
Unscored —
distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have…
-
Unscored —
coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors relat…
-
Unscored —
readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-differe…
-
Unscored —
An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer overflow. This i…
-
Unscored —
An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to …
-
Unscored —
readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, reloc…
-
Unscored —
xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not bei…
-
Unscored —
readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The…
-
Unscored —
An issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing huge memory allocations, …
-
Unscored —
An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, relat…
-
Medium 4.3
BuddyPress Docs plugin Improper Privilege Management
An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.
-
Unscored —
An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress. A user is abl…
-
Unscored —CVE-2017-0016 EPSS 27%
Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016…
-
Unscored —
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…
-
Unscored —CVE-2017-0035 EPSS 15%
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objec…
-
Unscored —
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to spoof web content via a crafted web site, a…
-
Unscored —CVE-2017-0029 EPSS 16%
Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 RT SP1, and Word 2016 allow remote attackers to cause a denial of s…
-
Unscored —
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…
-
Unscored —
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…
-
Unscored —CVE-2017-0154 EPSS 10%
Microsoft Internet Explorer 11 on Windows 10, 1511, and 1606 and Windows Server 2016 does not enforce cross-domain poli…
-
High 7.8CVE-2017-0001 Exploited
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; …
KEV Mar 3, 2022 -
Unscored —
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…
-
Unscored —
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server…
-
Unscored —
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers…
-
Unscored —CVE-2017-0014 EPSS 18%
The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Wi…
-
Unscored —CVE-2017-0027 EPSS 23%
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Servi…
-
Unscored —CVE-2017-0030 EPSS 28%
Microsoft Office 2010 SP2, Office Compatibility Pack SP3, Office Web Apps Server 2010 SP2, Word 2007 SP3, Word 2010 SP2…
-
Unscored —CVE-2017-0032 EPSS 15%
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objec…
-
Unscored —
Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and 2008 R2; Windows 7 SP1; Windows 8.1; Windows Server…
-
High 7.8
The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows …
KEV Mar 15, 2022 -
High 7.5
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Window…
KEV May 24, 2022