CVEs published March 6, 2017
16 CVEs were published on March 6, 2017: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 16
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 15
- Now in CISA KEV
- 1
- Fix available
- 1
Most affected products
- silverstripe/cms
- 1
High 1
Medium, low and unrated 15
- CVE-2016-10244The parse_charstrings function in type1/t1load.c in FreeType 2 before 2.7 does not ensure that a font contains a glyph name, which allows re
- CVE-2017-5197There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x before 3.5.2.silverstripe/cms
- CVE-2017-5633Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allow remote attackers to
- CVE-2017-5999An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptographers.
- CVE-2017-6411Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or firewall configuration
- CVE-2017-6351The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password.
- CVE-2017-6416An issue was discovered in SysGauge 1.5.18.
- CVE-2017-6497An issue was discovered in ImageMagick 6.9.7.
- CVE-2017-6498An issue was discovered in ImageMagick 6.9.7.
- CVE-2017-6499An issue was discovered in Magick++ in ImageMagick 6.9.7.
- CVE-2017-6500An issue was discovered in ImageMagick 6.9.7.
- CVE-2017-6501An issue was discovered in ImageMagick 6.9.7.
- CVE-2017-6502An issue was discovered in ImageMagick 6.9.7.
- CVE-2017-6503WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS.
- CVE-2017-6504WebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could potentially lead to clickjacking.