CVEs published March 2, 2017
48 CVEs were published on March 2, 2017: 0 critical, 0 high.
- Published
- 48
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 48
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Rapid7 Metasploit
- 3
- Rapid7 Nexpose
- 2
- blairjordan wordpress plugin rockhoist-badges
- 1
- matt_dev Wordpress plugin AnyVar
- 1
- Rapid7 AppSpider Pro
- 1
- Rapid7 Insight Collector
- 1
- Rapid7 Metasploit Pro
- 1
- zendkmobileapp Wordpress Plugin Mobile App Native
- 1
Medium, low and unrated 48
- CVE-2016-9892The esets_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not pro
- CVE-2017-6102Persistent XSS in wordpress plugin rockhoist-badges v1.2.2.blairjordan wordpress plugin rockhoist-badges
- CVE-2017-6103Persistent XSS Vulnerability in Wordpress plugin AnyVar v0.1.1.matt_dev Wordpress plugin AnyVar
- CVE-2017-6104Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.zendkmobileapp Wordpress Plugin Mobile App Native
- CVE-2016-10060The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc functi
- CVE-2016-10062The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote att
- CVE-2016-10063Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or h
- CVE-2016-10064Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or h
- CVE-2016-10067magick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via vectors involving
- CVE-2016-10068The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application c
- CVE-2016-10069coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an i
- CVE-2016-10071coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) v
- CVE-2017-5228All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi DRapid7 Metasploit
- CVE-2017-5229All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter extapi CRapid7 Metasploit
- CVE-2017-5230The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of 'r@p1d7k3y5t0r3' whiRapid7 Nexpose
- CVE-2017-5231All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CRapid7 Metasploit
- CVE-2017-5232All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the insRapid7 Nexpose
- CVE-2017-5233Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer tRapid7 AppSpider Pro
- CVE-2017-5234Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installerRapid7 Insight Collector
- CVE-2017-5235Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the iRapid7 Metasploit Pro
- CVE-2015-8994An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or php-fpm with OpCache enabled.
- CVE-2017-6062The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.5 for the Apache HTTP Server does
- CVE-2017-6384Memory leak in the login_user function in saslserv/main.c in saslserv/main.so in Atheme 7.2.7 allows a remote unauthenticated attacker to co
- CVE-2017-6390An issue was discovered in whatanime.ga before c334dd8499a681587dd4199e90b0aa0eba814c1d.
- CVE-2017-6391An issue was discovered in Kaltura server Lynx-12.11.0.
- CVE-2017-6392An issue was discovered in Kaltura server Lynx-12.11.0.
- CVE-2017-6393An issue was discovered in NagVis 1.9b12.
- CVE-2017-6394Multiple Cross-Site Scripting (XSS) issues were discovered in OpenEMR 5.0.0 and 5.0.1-dev.
- CVE-2017-6395An issue was discovered in HashOver 2.0.
- CVE-2017-6396An issue was discovered in WPO-Foundation WebPageTest 3.0.
- CVE-2017-6397An issue was discovered in FlightAirMap v1.0-beta.10.
- CVE-2017-6399An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2.
- CVE-2017-6400An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2.
- CVE-2017-6401An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0.
- CVE-2017-6402An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier.
- CVE-2017-6403An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0.
- CVE-2017-6404An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7.
- CVE-2017-6405An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier.
- CVE-2017-6406An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2.
- CVE-2017-6407An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2.
- CVE-2017-6408An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier.
- CVE-2017-6409An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier.
- CVE-2017-6410kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially
- CVE-2017-6413The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does
- CVE-2017-6319The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (buffer over
- CVE-2017-6387The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (out-of-bounds read
- CVE-2017-6415The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (NULL pointe
- CVE-2016-10228The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encodin