Archive
March 2017
Vulnerabilities first published in this month (UTC), newest first.
1,302 results · Feed
-
Unscored —
The base64encode function in base64.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service…
-
Unscored —
Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local…
-
Unscored —
Memory leak in the add_shader_program function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS …
-
Unscored —
The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows r…
-
Unscored —
The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of serv…
-
Unscored —
The jas_matrix_bindsub function in jas_seq.c in JasPer 2.0.10 allows remote attackers to cause a denial of service (inv…
-
Unscored —CVE-2017-6060 Public exploit
Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. MuPDF 1.10a allows remote attackers …
-
Unscored —
Stack-based buffer overflow in the parse_identifier function in tgsi_text.c in the TGSI auxiliary module in the Gallium…
-
Unscored —
The PoDoFo::PdfColorGray::~PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a den…
-
Unscored —
The parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of se…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x be…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Management Web Interface in Palo Alto Networks PAN-OS 5.1, 6.x before 6…
-
Unscored —
The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 al…
-
Unscored —
Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer befo…
-
Unscored —
Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local …
-
Medium 6.1CVE-2016-7103 EPSS 29%
jQuery-UI vulnerable to Cross-site Scripting in dialog closeText
Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.
-
Unscored —
An issue was discovered in concrete5 <= 5.6.3.4. The vulnerability exists due to insufficient filtration of user-suppli…
-
Unscored —
An issue was discovered in Open.GL before 2017-03-13. The vulnerability exists due to insufficient filtration of user-s…
-
Unscored —
An issue was discovered in Shimmie <= 2.5.1. The vulnerability exists due to insufficient filtration of user-supplied d…
-
Unscored —
An issue was discovered in concrete5 <= 5.6.3.4. The vulnerability exists due to insufficient filtration of user-suppli…
-
Unscored —
An issue was discovered in SiberianCMS before 4.10.0. The vulnerability exists due to insufficient filtration of user-s…
-
Unscored —
Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows attacker…
-
Unscored —
Unsalted password vulnerability in the Enterprise Manager (web portal) component in Intel Security McAfee Vulnerability…
-
Unscored —
Unquoted executable path vulnerability in Client Management and Gateway components in McAfee (now Intel Security) ePO D…
-
Unscored —
Malicious file execution vulnerability in Intel Security CloudAV (Beta) before 0.5.0.151.3 allows attackers to make the…
-
Unscored —
Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to m…
-
Unscored —
Sandbox detection evasion vulnerability in hardware appliances in McAfee (now Intel Security) Advanced Threat Defense (…
-
Unscored —
Detection bypass vulnerability in Intel Security Advanced Threat Defense (ATD) 3.4.6 and earlier allows malware samples…
-
Unscored —
Man-in-the-middle (MitM) attack vulnerability in non-Mac OS agents in McAfee (now Intel Security) Agent (MA) 4.8.0 patc…
-
Unscored —
A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS Control Console (SCC) Pl…
-
Unscored —
A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Lin…
-
Unscored —
A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 fo…
-
Unscored —
Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 be…
-
Unscored —
Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1…
-
Unscored —CVE-2016-8024 Public exploit
Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (V…
-
Unscored —
Access control vulnerability in Intel Security Data Loss Prevention Endpoint (DLPe) 9.4.200 and 9.3.600 allows authenti…
-
Unscored —
Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and ear…
-
Unscored —CVE-2016-8019 Public exploit
Cross-site scripting (XSS) vulnerability in attributes in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and e…
-
Unscored —
SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and …
-
Unscored —CVE-2016-8025 Public exploit
SQL injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authe…