# CVEs published 2017-03-08

109 CVEs were published on March 8, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-6543](https://cve.now/CVE-2017-6543.md): Tenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to contain a flaw that allowed a remote… (no CVSS)
- [CVE-2017-6544](https://cve.now/CVE-2017-6544.md): Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/www\_admin/users.php (id parameter). (no CVSS)
- [CVE-2016-5894](https://cve.now/CVE-2016-5894.md): IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. (no CVSS, IBM WebSphere Commerce Enterprise)
- [CVE-2016-5933](https://cve.now/CVE-2016-5933.md): IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or… (no CVSS, IBM Tivoli Monitoring)
- [CVE-2016-9006](https://cve.now/CVE-2016-9006.md): IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. (no CVSS, IBM UrbanCode Deploy)
- [CVE-2016-9985](https://cve.now/CVE-2016-9985.md): IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user. (no CVSS, IBM Cognos Business Intelligence)
- [CVE-2017-1150](https://cve.now/CVE-2017-1150.md): IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with… (no CVSS, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2017-5178](https://cve.now/CVE-2017-5178.md): An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and… (no CVSS, Schneider Electric Wonderware Intelligence 2014R3 and prior)
- [CVE-2017-6533](https://cve.now/CVE-2017-6533.md): A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6534](https://cve.now/CVE-2017-6534.md): A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6535](https://cve.now/CVE-2017-6535.md): Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6536](https://cve.now/CVE-2017-6536.md): Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6537](https://cve.now/CVE-2017-6537.md): A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6538](https://cve.now/CVE-2017-6538.md): A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6539](https://cve.now/CVE-2017-6539.md): Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6540](https://cve.now/CVE-2017-6540.md): Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6541](https://cve.now/CVE-2017-6541.md): Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. (no CVSS)
- [CVE-2016-8413](https://cve.now/CVE-2016-8413.md): An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)
- [CVE-2016-8416](https://cve.now/CVE-2016-8416.md): An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)
- [CVE-2016-8417](https://cve.now/CVE-2016-8417.md): An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2016-8477](https://cve.now/CVE-2016-8477.md): An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)
- [CVE-2016-8478](https://cve.now/CVE-2016-8478.md): An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)
- [CVE-2016-8479](https://cve.now/CVE-2016-8479.md): An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2016-8483](https://cve.now/CVE-2016-8483.md): An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)
- [CVE-2017-0306](https://cve.now/CVE-2017-0306.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code… (no CVSS, Nvidia Android)
- [CVE-2017-0307](https://cve.now/CVE-2017-0307.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code… (no CVSS, Nvidia Android)
- [CVE-2017-0333](https://cve.now/CVE-2017-0333.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code… (no CVSS, Nvidia Android)
- [CVE-2017-0334](https://cve.now/CVE-2017-0334.md): An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its… (no CVSS, Nvidia Android)
- [CVE-2017-0335](https://cve.now/CVE-2017-0335.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code… (no CVSS, Nvidia Android)
- [CVE-2017-0336](https://cve.now/CVE-2017-0336.md): An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its… (no CVSS, Nvidia Android)
- [CVE-2017-0337](https://cve.now/CVE-2017-0337.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code… (no CVSS, Nvidia Android)
- [CVE-2017-0338](https://cve.now/CVE-2017-0338.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code… (no CVSS, Nvidia Android)
- [CVE-2017-0452](https://cve.now/CVE-2017-0452.md): An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)
- [CVE-2017-0453](https://cve.now/CVE-2017-0453.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0455](https://cve.now/CVE-2017-0455.md): An information disclosure vulnerability in the Qualcomm bootloader could help to enable a local malicious application to to execute… (no CVSS, Google Android)
- [CVE-2017-0456](https://cve.now/CVE-2017-0456.md): An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0457](https://cve.now/CVE-2017-0457.md): An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary… (no CVSS, Google Android)
- [CVE-2017-0458](https://cve.now/CVE-2017-0458.md): An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0459](https://cve.now/CVE-2017-0459.md): An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)
- [CVE-2017-0460](https://cve.now/CVE-2017-0460.md): An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary… (no CVSS, Google Android)
- [CVE-2017-0461](https://cve.now/CVE-2017-0461.md): An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)
- [CVE-2017-0463](https://cve.now/CVE-2017-0463.md): An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary… (no CVSS, Google Android)
- [CVE-2017-0464](https://cve.now/CVE-2017-0464.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0466](https://cve.now/CVE-2017-0466.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption… (no CVSS, Google Android)
- [CVE-2017-0467](https://cve.now/CVE-2017-0467.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption… (no CVSS, Google Android)
- [CVE-2017-0468](https://cve.now/CVE-2017-0468.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption… (no CVSS, Google Android)
- [CVE-2017-0469](https://cve.now/CVE-2017-0469.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption… (no CVSS, Google Android)
- [CVE-2017-0470](https://cve.now/CVE-2017-0470.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption… (no CVSS, Google Android)
- [CVE-2017-0471](https://cve.now/CVE-2017-0471.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption… (no CVSS, Google Android)
- [CVE-2017-0472](https://cve.now/CVE-2017-0472.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption… (no CVSS, Google Android)
- [CVE-2017-0473](https://cve.now/CVE-2017-0473.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption… (no CVSS, Google Android)
- [CVE-2017-0474](https://cve.now/CVE-2017-0474.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption… (no CVSS, Google Android)
- [CVE-2017-0475](https://cve.now/CVE-2017-0475.md): An elevation of privilege vulnerability in the recovery verifier could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0476](https://cve.now/CVE-2017-0476.md): A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption… (no CVSS, Google Android)
- [CVE-2017-0477](https://cve.now/CVE-2017-0477.md): A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code within… (no CVSS, Google Android)
- [CVE-2017-0478](https://cve.now/CVE-2017-0478.md): A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute… (no CVSS, Google Android)
- [CVE-2017-0479](https://cve.now/CVE-2017-0479.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the… (no CVSS, Google Android)
- [CVE-2017-0480](https://cve.now/CVE-2017-0480.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the… (no CVSS, Google Android)
- [CVE-2017-0481](https://cve.now/CVE-2017-0481.md): An elevation of privilege vulnerability in NFC could enable a proximate attacker to execute arbitrary code within the context of a… (no CVSS, Google Android)
- [CVE-2017-0482](https://cve.now/CVE-2017-0482.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0483](https://cve.now/CVE-2017-0483.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0484](https://cve.now/CVE-2017-0484.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0485](https://cve.now/CVE-2017-0485.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0486](https://cve.now/CVE-2017-0486.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0487](https://cve.now/CVE-2017-0487.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0488](https://cve.now/CVE-2017-0488.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0489](https://cve.now/CVE-2017-0489.md): An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system… (no CVSS, Google Android)
- [CVE-2017-0490](https://cve.now/CVE-2017-0490.md): An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. (no CVSS, Google Android)
- [CVE-2017-0491](https://cve.now/CVE-2017-0491.md): An elevation of privilege vulnerability in Package Manager could enable a local malicious application to prevent users from uninstalling… (no CVSS, Google Android)
- [CVE-2017-0492](https://cve.now/CVE-2017-0492.md): An elevation of privilege vulnerability in the System UI could enable a local malicious application to create a UI overlay covering the… (no CVSS, Google Android)
- [CVE-2017-0494](https://cve.now/CVE-2017-0494.md): An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data… (no CVSS, Google Android)
- [CVE-2017-0495](https://cve.now/CVE-2017-0495.md): An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission… (no CVSS, Google Android)
- [CVE-2017-0496](https://cve.now/CVE-2017-0496.md): A denial of service vulnerability in Setup Wizard could allow a local malicious application to temporarily block access to an affected… (no CVSS, Google Android)
- [CVE-2017-0497](https://cve.now/CVE-2017-0497.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0498](https://cve.now/CVE-2017-0498.md): A denial of service vulnerability in Setup Wizard could allow a local attacker to require Google account sign-in after a factory reset. (no CVSS, Google Android)
- [CVE-2017-0499](https://cve.now/CVE-2017-0499.md): A denial of service vulnerability in Audioserver could enable a local malicious application to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0500](https://cve.now/CVE-2017-0500.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver… (no CVSS, Google Android)
- [CVE-2017-0501](https://cve.now/CVE-2017-0501.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver… (no CVSS, Google Android)
- [CVE-2017-0502](https://cve.now/CVE-2017-0502.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver… (no CVSS, Google Android)
- [CVE-2017-0503](https://cve.now/CVE-2017-0503.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver… (no CVSS, Google Android)
- [CVE-2017-0504](https://cve.now/CVE-2017-0504.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver… (no CVSS, Google Android)
- [CVE-2017-0505](https://cve.now/CVE-2017-0505.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver… (no CVSS, Google Android)
- [CVE-2017-0506](https://cve.now/CVE-2017-0506.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver… (no CVSS, Google Android)
- [CVE-2017-0507](https://cve.now/CVE-2017-0507.md): An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0508](https://cve.now/CVE-2017-0508.md): An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0509](https://cve.now/CVE-2017-0509.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0510](https://cve.now/CVE-2017-0510.md): An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0516](https://cve.now/CVE-2017-0516.md): An elevation of privilege vulnerability in the Qualcomm input hardware driver could enable a local malicious application to execute… (no CVSS, Google Android)
- [CVE-2017-0517](https://cve.now/CVE-2017-0517.md): An elevation of privilege vulnerability in the MediaTek hardware sensor driver could enable a local malicious application to execute… (no CVSS, Google Android)
- [CVE-2017-0518](https://cve.now/CVE-2017-0518.md): An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute… (no CVSS, Google Android)
- [CVE-2017-0519](https://cve.now/CVE-2017-0519.md): An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute… (no CVSS, Google Android)
- [CVE-2017-0520](https://cve.now/CVE-2017-0520.md): An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute… (no CVSS, Google Android)
- [CVE-2017-0521](https://cve.now/CVE-2017-0521.md): An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0522](https://cve.now/CVE-2017-0522.md): An elevation of privilege vulnerability in a MediaTek APK could enable a local malicious application to execute arbitrary code within the… (no CVSS, Google Android)
- [CVE-2017-0523](https://cve.now/CVE-2017-0523.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0524](https://cve.now/CVE-2017-0524.md): An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute… (no CVSS, Google Android)
- [CVE-2017-0525](https://cve.now/CVE-2017-0525.md): An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0526](https://cve.now/CVE-2017-0526.md): An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0527](https://cve.now/CVE-2017-0527.md): An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code… (no CVSS, Google Android)
- [CVE-2017-0528](https://cve.now/CVE-2017-0528.md): An elevation of privilege vulnerability in the kernel security subsystem could enable a local malicious application to to execute code in… (no CVSS, Google Android)
- [CVE-2017-0529](https://cve.now/CVE-2017-0529.md): An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its… (no CVSS, Google Android)
- [CVE-2017-0531](https://cve.now/CVE-2017-0531.md): An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)
- [CVE-2017-0532](https://cve.now/CVE-2017-0532.md): An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data… (no CVSS, Google Android)
- [CVE-2017-0533](https://cve.now/CVE-2017-0533.md): An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)
- [CVE-2017-0534](https://cve.now/CVE-2017-0534.md): An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)
- [CVE-2017-0535](https://cve.now/CVE-2017-0535.md): An information disclosure vulnerability in the HTC sound codec driver could enable a local malicious application to access data outside of… (no CVSS, Google Android)
- [CVE-2017-0536](https://cve.now/CVE-2017-0536.md): An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data… (no CVSS, Google Android)
- [CVE-2017-0537](https://cve.now/CVE-2017-0537.md): An information disclosure vulnerability in the kernel USB gadget driver could enable a local malicious application to access data outside… (no CVSS, Google Android)
- [CVE-2017-6518](https://cve.now/CVE-2017-6518.md): Cross-site scripting (XSS) vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-03-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.