# CVEs published 2017-03-02

48 CVEs were published on March 2, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2016-9892](https://cve.now/CVE-2016-9892.md): The esets\_daemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not pro (no CVSS)
- [CVE-2017-6102](https://cve.now/CVE-2017-6102.md): Persistent XSS in wordpress plugin rockhoist-badges v1.2.2. (no CVSS, blairjordan wordpress plugin rockhoist-badges)
- [CVE-2017-6103](https://cve.now/CVE-2017-6103.md): Persistent XSS Vulnerability in Wordpress plugin AnyVar v0.1.1. (no CVSS, matt\_dev Wordpress plugin AnyVar)
- [CVE-2017-6104](https://cve.now/CVE-2017-6104.md): Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0. (no CVSS, zendkmobileapp Wordpress Plugin Mobile App Native)
- [CVE-2016-10060](https://cve.now/CVE-2016-10060.md): The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc functi (no CVSS)
- [CVE-2016-10062](https://cve.now/CVE-2016-10062.md): The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote att (no CVSS)
- [CVE-2016-10063](https://cve.now/CVE-2016-10063.md): Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or h (no CVSS)
- [CVE-2016-10064](https://cve.now/CVE-2016-10064.md): Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or h (no CVSS)
- [CVE-2016-10067](https://cve.now/CVE-2016-10067.md): magick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via vectors involving (no CVSS)
- [CVE-2016-10068](https://cve.now/CVE-2016-10068.md): The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application c (no CVSS)
- [CVE-2016-10069](https://cve.now/CVE-2016-10069.md): coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an i (no CVSS)
- [CVE-2016-10071](https://cve.now/CVE-2016-10071.md): coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) v (no CVSS)
- [CVE-2017-5228](https://cve.now/CVE-2017-5228.md): All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi D (no CVSS, Rapid7 Metasploit)
- [CVE-2017-5229](https://cve.now/CVE-2017-5229.md): All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter extapi C (no CVSS, Rapid7 Metasploit)
- [CVE-2017-5230](https://cve.now/CVE-2017-5230.md): The Java keystore in all versions and editions of Rapid7 Nexpose prior to 6.4.50 is encrypted with a static password of 'r@p1d7k3y5t0r3' whi (no CVSS, Rapid7 Nexpose)
- [CVE-2017-5231](https://cve.now/CVE-2017-5231.md): All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi C (no CVSS, Rapid7 Metasploit)
- [CVE-2017-5232](https://cve.now/CVE-2017-5232.md): All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the ins (no CVSS, Rapid7 Nexpose)
- [CVE-2017-5233](https://cve.now/CVE-2017-5233.md): Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer t (no CVSS, Rapid7 AppSpider Pro)
- [CVE-2017-5234](https://cve.now/CVE-2017-5234.md): Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer (no CVSS, Rapid7 Insight Collector)
- [CVE-2017-5235](https://cve.now/CVE-2017-5235.md): Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the i (no CVSS, Rapid7 Metasploit Pro)
- [CVE-2015-8994](https://cve.now/CVE-2015-8994.md): An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod\_php or php-fpm with OpCache enabled. (no CVSS)
- [CVE-2017-6062](https://cve.now/CVE-2017-6062.md): The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod\_auth\_openidc) module before 2.1.5 for the Apache HTTP Server does (no CVSS)
- [CVE-2017-6384](https://cve.now/CVE-2017-6384.md): Memory leak in the login\_user function in saslserv/main.c in saslserv/main.so in Atheme 7.2.7 allows a remote unauthenticated attacker to co (no CVSS)
- [CVE-2017-6390](https://cve.now/CVE-2017-6390.md): An issue was discovered in whatanime.ga before c334dd8499a681587dd4199e90b0aa0eba814c1d. (no CVSS)
- [CVE-2017-6391](https://cve.now/CVE-2017-6391.md): An issue was discovered in Kaltura server Lynx-12.11.0. (no CVSS)
- [CVE-2017-6392](https://cve.now/CVE-2017-6392.md): An issue was discovered in Kaltura server Lynx-12.11.0. (no CVSS)
- [CVE-2017-6393](https://cve.now/CVE-2017-6393.md): An issue was discovered in NagVis 1.9b12. (no CVSS)
- [CVE-2017-6394](https://cve.now/CVE-2017-6394.md): Multiple Cross-Site Scripting (XSS) issues were discovered in OpenEMR 5.0.0 and 5.0.1-dev. (no CVSS)
- [CVE-2017-6395](https://cve.now/CVE-2017-6395.md): An issue was discovered in HashOver 2.0. (no CVSS)
- [CVE-2017-6396](https://cve.now/CVE-2017-6396.md): An issue was discovered in WPO-Foundation WebPageTest 3.0. (no CVSS)
- [CVE-2017-6397](https://cve.now/CVE-2017-6397.md): An issue was discovered in FlightAirMap v1.0-beta.10. (no CVSS)
- [CVE-2017-6399](https://cve.now/CVE-2017-6399.md): An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. (no CVSS)
- [CVE-2017-6400](https://cve.now/CVE-2017-6400.md): An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. (no CVSS)
- [CVE-2017-6401](https://cve.now/CVE-2017-6401.md): An issue was discovered in Veritas NetBackup before 8.0 and NetBackup Appliance before 3.0. (no CVSS)
- [CVE-2017-6402](https://cve.now/CVE-2017-6402.md): An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. (no CVSS)
- [CVE-2017-6403](https://cve.now/CVE-2017-6403.md): An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. (no CVSS)
- [CVE-2017-6404](https://cve.now/CVE-2017-6404.md): An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7. (no CVSS)
- [CVE-2017-6405](https://cve.now/CVE-2017-6405.md): An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. (no CVSS)
- [CVE-2017-6406](https://cve.now/CVE-2017-6406.md): An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. (no CVSS)
- [CVE-2017-6407](https://cve.now/CVE-2017-6407.md): An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. (no CVSS)
- [CVE-2017-6408](https://cve.now/CVE-2017-6408.md): An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. (no CVSS)
- [CVE-2017-6409](https://cve.now/CVE-2017-6409.md): An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. (no CVSS)
- [CVE-2017-6410](https://cve.now/CVE-2017-6410.md): kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially (no CVSS)
- [CVE-2017-6413](https://cve.now/CVE-2017-6413.md): The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod\_auth\_openidc) module before 2.1.6 for the Apache HTTP Server does (no CVSS)
- [CVE-2017-6319](https://cve.now/CVE-2017-6319.md): The dex\_parse\_debug\_item function in libr/bin/p/bin\_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (buffer over (no CVSS)
- [CVE-2017-6387](https://cve.now/CVE-2017-6387.md): The dex\_loadcode function in libr/bin/p/bin\_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (out-of-bounds read (no CVSS)
- [CVE-2017-6415](https://cve.now/CVE-2017-6415.md): The dex\_parse\_debug\_item function in libr/bin/p/bin\_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (NULL pointe (no CVSS)
- [CVE-2016-10228](https://cve.now/CVE-2016-10228.md): The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encodin (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-03-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.