CVEs published March 28, 2017
39 CVEs were published on March 28, 2017: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 39
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 39
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Revive Adserver All versions before
- 11
- Nextcloud Server & ownCloud Server Nextcloud Server before…
- 9
- Revive Adserver All versions before 3.2.5 and
- 3
- Apache Software Foundation Apache Ambari · org.apache.ambar…
- 1
- Apache Software Foundation Apache Camel · org.apache.camel:…
- 1
- Brave Software Brave Browser iOS before 1.2.18 and Brave Br…
- 1
- GitLab Community Edition & GitLab Enterprise Edition 8.13.0…
- 1
- GitLab Community Edition and GitLab Enterprise Edition 8.7.…
- 1
- Go JOSE All versions before · github.com/square/go-jose
- 1
- Go JOSE All versions before · github.com/square/go-jose +1
- 1
Medium, low and unrated 39
- CVE-2016-6807Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to unauthorized access to…Apache Software Foundation Apache Ambari · org.apache.ambar…
- CVE-2016-8749Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.Apache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2014-6440VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.
- CVE-2016-8031Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local users to bypass local…Intel Anti-Virus Engine
- CVE-2016-10152The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the…
- CVE-2016-8884The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer…
- CVE-2017-7277The TCP stack in the Linux kernel through 4.10.6 mishandles the SCM_TIMESTAMPING_OPT_STATS feature, which allows local users to obtain…
- CVE-2016-9121go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm.Go JOSE All versions before · github.com/square/go-jose +1
- CVE-2016-9122go-jose before 1.0.4 suffers from multiple signatures exploitation.Go JOSE All versions before · gopkg.in/square/go-jose.v1
- CVE-2016-9123go-jose before 1.0.5 suffers from a CBC-HMAC integer overflow on 32-bit architectures.Go JOSE All versions before · github.com/square/go-jose
- CVE-2016-9124Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts.Revive Adserver All versions before
- CVE-2016-9125Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and, at the same time…Revive Adserver All versions before
- CVE-2016-9126Revive Adserver before 3.2.3 suffers from persistent XSS.Revive Adserver All versions before
- CVE-2016-9127Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF).Revive Adserver All versions before
- CVE-2016-9128Revive Adserver before 3.2.3 suffers from reflected XSS.Revive Adserver All versions before
- CVE-2016-9129Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy.Revive Adserver All versions before
- CVE-2016-9130Revive Adserver before 3.2.3 suffers from Persistent XSS.Revive Adserver All versions before
- CVE-2016-9454Revive Adserver before 3.2.3 suffers from Persistent XSS.Revive Adserver All versions before
- CVE-2016-9455Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF).Revive Adserver All versions before
- CVE-2016-9456Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF).Revive Adserver All versions before
- CVE-2016-9457Revive Adserver before 3.2.3 suffers from Reflected XSS.Revive Adserver All versions before
- CVE-2016-9459Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a…Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9460Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content-spoofing attack in the files app.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9461Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9462Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file.Nextcloud Server & ownCloud Server Nextcloud Server before…
Show all 39 entriesShow fewer entries
- CVE-2016-9463Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer from SMB User Authentication Bypass.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9464Nextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on removing shares.Nextcloud Server Nextcloud Server before 9.0.54 and
- CVE-2016-9465Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in CardDAV image export.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9466Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9467Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the files app.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9468Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the dav app.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9469Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and…GitLab Community Edition & GitLab Enterprise Edition 8.13.0…
- CVE-2016-9470Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download.Revive Adserver All versions before 3.2.5 and
- CVE-2016-9471Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection.Revive Adserver All versions before 3.2.5 and
- CVE-2016-9472Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS.Revive Adserver All versions before 3.2.5 and
- CVE-2016-9473Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to…Brave Software Brave Browser iOS before 1.2.18 and Brave Br…
- CVE-2017-0881An error in the implementation of an autosubscribe feature in the check_stream_exists route of the Zulip group chat application server…Zulip Server Versions 1.4.2 and below
- CVE-2017-0882Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request.GitLab Community Edition and GitLab Enterprise Edition 8.7.…
- CVE-2017-6964dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the (1) setuid or (2) setgid…