CVEs published March 8, 2017
109 CVEs were published on March 8, 2017: 0 critical, 0 high.
- Published
- 109
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 109
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Google Android
- 83
- Nvidia Android
- 8
- IBM Cognos Business Intelligence
- 1
- IBM DB2 for Linux, UNIX and Windows
- 1
- IBM Tivoli Monitoring
- 1
- IBM UrbanCode Deploy
- 1
- IBM WebSphere Commerce Enterprise
- 1
- Schneider Electric Wonderware Intelligence 2014R3 and prior
- 1
Medium, low and unrated 109
- CVE-2017-6543Tenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to contain a flaw that allowed a remote, authent
- CVE-2017-6544Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/www_admin/users.php (id parameter).
- CVE-2016-5894IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability.IBM WebSphere Commerce Enterprise
- CVE-2016-5933IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewallIBM Tivoli Monitoring
- CVE-2016-9006IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting.IBM UrbanCode Deploy
- CVE-2016-9985IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user.IBM Cognos Business Intelligence
- CVE-2017-1150IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specializeIBM DB2 for Linux, UNIX and Windows
- CVE-2017-5178An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and pSchneider Electric Wonderware Intelligence 2014R3 and prior
- CVE-2017-6533A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0.
- CVE-2017-6534A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0.
- CVE-2017-6535Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0.
- CVE-2017-6536Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0.
- CVE-2017-6537A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0.
- CVE-2017-6538A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0.
- CVE-2017-6539Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0.
- CVE-2017-6540Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0.
- CVE-2017-6541Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0.
- CVE-2016-8413An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of iGoogle Android
- CVE-2016-8416An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2016-8417An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2016-8477An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of iGoogle Android
- CVE-2016-8478An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2016-8479An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code withGoogle Android
- CVE-2016-8483An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2017-0306An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinNvidia Android
- CVE-2017-0307An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinNvidia Android
- CVE-2017-0333An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinNvidia Android
- CVE-2017-0334An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its peNvidia Android
- CVE-2017-0335An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinNvidia Android
- CVE-2017-0336An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its peNvidia Android
- CVE-2017-0337An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinNvidia Android
- CVE-2017-0338An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinNvidia Android
- CVE-2017-0452An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of iGoogle Android
- CVE-2017-0453An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0455An information disclosure vulnerability in the Qualcomm bootloader could help to enable a local malicious application to to execute arbitrarGoogle Android
- CVE-2017-0456An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code withGoogle Android
- CVE-2017-0457An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code Google Android
- CVE-2017-0458An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2017-0459An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2017-0460An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary coGoogle Android
- CVE-2017-0461An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2017-0463An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary coGoogle Android
- CVE-2017-0464An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0466A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duriGoogle Android
- CVE-2017-0467A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duriGoogle Android
- CVE-2017-0468A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duriGoogle Android
- CVE-2017-0469A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duriGoogle Android
- CVE-2017-0470A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duriGoogle Android
- CVE-2017-0471A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duriGoogle Android
- CVE-2017-0472A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duriGoogle Android
- CVE-2017-0473A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duriGoogle Android
- CVE-2017-0474A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duriGoogle Android
- CVE-2017-0475An elevation of privilege vulnerability in the recovery verifier could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2017-0476A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption dGoogle Android
- CVE-2017-0477A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code within theGoogle Android
- CVE-2017-0478A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrGoogle Android
- CVE-2017-0479An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteGoogle Android
- CVE-2017-0480An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteGoogle Android
- CVE-2017-0481An elevation of privilege vulnerability in NFC could enable a proximate attacker to execute arbitrary code within the context of a privilegeGoogle Android
- CVE-2017-0482A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.Google Android
- CVE-2017-0483A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.Google Android
- CVE-2017-0484A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.Google Android
- CVE-2017-0485A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.Google Android
- CVE-2017-0486A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.Google Android
- CVE-2017-0487A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.Google Android
- CVE-2017-0488A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.Google Android
- CVE-2017-0489An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protectionGoogle Android
- CVE-2017-0490An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data.Google Android
- CVE-2017-0491An elevation of privilege vulnerability in Package Manager could enable a local malicious application to prevent users from uninstalling appGoogle Android
- CVE-2017-0492An elevation of privilege vulnerability in the System UI could enable a local malicious application to create a UI overlay covering the entiGoogle Android
- CVE-2017-0494An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outsideGoogle Android
- CVE-2017-0495An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission lGoogle Android
- CVE-2017-0496A denial of service vulnerability in Setup Wizard could allow a local malicious application to temporarily block access to an affected devicGoogle Android
- CVE-2017-0497A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.Google Android
- CVE-2017-0498A denial of service vulnerability in Setup Wizard could allow a local attacker to require Google account sign-in after a factory reset.Google Android
- CVE-2017-0499A denial of service vulnerability in Audioserver could enable a local malicious application to cause a device hang or reboot.Google Android
- CVE-2017-0500An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Google Android
- CVE-2017-0501An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Google Android
- CVE-2017-0502An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Google Android
- CVE-2017-0503An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Google Android
- CVE-2017-0504An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Google Android
- CVE-2017-0505An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Google Android
- CVE-2017-0506An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Google Android
- CVE-2017-0507An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code witGoogle Android
- CVE-2017-0508An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code witGoogle Android
- CVE-2017-0509An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0510An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code withGoogle Android
- CVE-2017-0516An elevation of privilege vulnerability in the Qualcomm input hardware driver could enable a local malicious application to execute arbitrarGoogle Android
- CVE-2017-0517An elevation of privilege vulnerability in the MediaTek hardware sensor driver could enable a local malicious application to execute arbitraGoogle Android
- CVE-2017-0518An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbiGoogle Android
- CVE-2017-0519An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbiGoogle Android
- CVE-2017-0520An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitraryGoogle Android
- CVE-2017-0521An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2017-0522An elevation of privilege vulnerability in a MediaTek APK could enable a local malicious application to execute arbitrary code within the coGoogle Android
- CVE-2017-0523An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0524An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary Google Android
- CVE-2017-0525An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code withGoogle Android
- CVE-2017-0526An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0527An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0528An elevation of privilege vulnerability in the kernel security subsystem could enable a local malicious application to to execute code in thGoogle Android
- CVE-2017-0529An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permGoogle Android
- CVE-2017-0531An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2017-0532An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outsideGoogle Android
- CVE-2017-0533An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2017-0534An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2017-0535An information disclosure vulnerability in the HTC sound codec driver could enable a local malicious application to access data outside of iGoogle Android
- CVE-2017-0536An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outsidGoogle Android
- CVE-2017-0537An information disclosure vulnerability in the kernel USB gadget driver could enable a local malicious application to access data outside ofGoogle Android
- CVE-2017-6518Cross-site scripting (XSS) vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web