# CVEs published 2017-03-08

109 CVEs were published on March 8, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-6543](https://cve.now/CVE-2017-6543.md): Tenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to contain a flaw that allowed a remote, authent (no CVSS)
- [CVE-2017-6544](https://cve.now/CVE-2017-6544.md): Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/www\_admin/users.php (id parameter). (no CVSS)
- [CVE-2016-5894](https://cve.now/CVE-2016-5894.md): IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. (no CVSS, IBM WebSphere Commerce Enterprise)
- [CVE-2016-5933](https://cve.now/CVE-2016-5933.md): IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall (no CVSS, IBM Tivoli Monitoring)
- [CVE-2016-9006](https://cve.now/CVE-2016-9006.md): IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. (no CVSS, IBM UrbanCode Deploy)
- [CVE-2016-9985](https://cve.now/CVE-2016-9985.md): IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user. (no CVSS, IBM Cognos Business Intelligence)
- [CVE-2017-1150](https://cve.now/CVE-2017-1150.md): IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialize (no CVSS, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2017-5178](https://cve.now/CVE-2017-5178.md): An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and p (no CVSS, Schneider Electric Wonderware Intelligence 2014R3 and prior)
- [CVE-2017-6533](https://cve.now/CVE-2017-6533.md): A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6534](https://cve.now/CVE-2017-6534.md): A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6535](https://cve.now/CVE-2017-6535.md): Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6536](https://cve.now/CVE-2017-6536.md): Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6537](https://cve.now/CVE-2017-6537.md): A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6538](https://cve.now/CVE-2017-6538.md): A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6539](https://cve.now/CVE-2017-6539.md): Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6540](https://cve.now/CVE-2017-6540.md): Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. (no CVSS)
- [CVE-2017-6541](https://cve.now/CVE-2017-6541.md): Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. (no CVSS)
- [CVE-2016-8413](https://cve.now/CVE-2016-8413.md): An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of i (no CVSS, Google Android)
- [CVE-2016-8416](https://cve.now/CVE-2016-8416.md): An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of it (no CVSS, Google Android)
- [CVE-2016-8417](https://cve.now/CVE-2016-8417.md): An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code w (no CVSS, Google Android)
- [CVE-2016-8477](https://cve.now/CVE-2016-8477.md): An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of i (no CVSS, Google Android)
- [CVE-2016-8478](https://cve.now/CVE-2016-8478.md): An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of it (no CVSS, Google Android)
- [CVE-2016-8479](https://cve.now/CVE-2016-8479.md): An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code with (no CVSS, Google Android)
- [CVE-2016-8483](https://cve.now/CVE-2016-8483.md): An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of it (no CVSS, Google Android)
- [CVE-2017-0306](https://cve.now/CVE-2017-0306.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Nvidia Android)
- [CVE-2017-0307](https://cve.now/CVE-2017-0307.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Nvidia Android)
- [CVE-2017-0333](https://cve.now/CVE-2017-0333.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Nvidia Android)
- [CVE-2017-0334](https://cve.now/CVE-2017-0334.md): An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its pe (no CVSS, Nvidia Android)
- [CVE-2017-0335](https://cve.now/CVE-2017-0335.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Nvidia Android)
- [CVE-2017-0336](https://cve.now/CVE-2017-0336.md): An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its pe (no CVSS, Nvidia Android)
- [CVE-2017-0337](https://cve.now/CVE-2017-0337.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Nvidia Android)
- [CVE-2017-0338](https://cve.now/CVE-2017-0338.md): An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within (no CVSS, Nvidia Android)
- [CVE-2017-0452](https://cve.now/CVE-2017-0452.md): An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of i (no CVSS, Google Android)
- [CVE-2017-0453](https://cve.now/CVE-2017-0453.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0455](https://cve.now/CVE-2017-0455.md): An information disclosure vulnerability in the Qualcomm bootloader could help to enable a local malicious application to to execute arbitrar (no CVSS, Google Android)
- [CVE-2017-0456](https://cve.now/CVE-2017-0456.md): An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code with (no CVSS, Google Android)
- [CVE-2017-0457](https://cve.now/CVE-2017-0457.md): An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code (no CVSS, Google Android)
- [CVE-2017-0458](https://cve.now/CVE-2017-0458.md): An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code w (no CVSS, Google Android)
- [CVE-2017-0459](https://cve.now/CVE-2017-0459.md): An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of it (no CVSS, Google Android)
- [CVE-2017-0460](https://cve.now/CVE-2017-0460.md): An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary co (no CVSS, Google Android)
- [CVE-2017-0461](https://cve.now/CVE-2017-0461.md): An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of it (no CVSS, Google Android)
- [CVE-2017-0463](https://cve.now/CVE-2017-0463.md): An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary co (no CVSS, Google Android)
- [CVE-2017-0464](https://cve.now/CVE-2017-0464.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0466](https://cve.now/CVE-2017-0466.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duri (no CVSS, Google Android)
- [CVE-2017-0467](https://cve.now/CVE-2017-0467.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duri (no CVSS, Google Android)
- [CVE-2017-0468](https://cve.now/CVE-2017-0468.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duri (no CVSS, Google Android)
- [CVE-2017-0469](https://cve.now/CVE-2017-0469.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duri (no CVSS, Google Android)
- [CVE-2017-0470](https://cve.now/CVE-2017-0470.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duri (no CVSS, Google Android)
- [CVE-2017-0471](https://cve.now/CVE-2017-0471.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duri (no CVSS, Google Android)
- [CVE-2017-0472](https://cve.now/CVE-2017-0472.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duri (no CVSS, Google Android)
- [CVE-2017-0473](https://cve.now/CVE-2017-0473.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duri (no CVSS, Google Android)
- [CVE-2017-0474](https://cve.now/CVE-2017-0474.md): A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption duri (no CVSS, Google Android)
- [CVE-2017-0475](https://cve.now/CVE-2017-0475.md): An elevation of privilege vulnerability in the recovery verifier could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android)
- [CVE-2017-0476](https://cve.now/CVE-2017-0476.md): A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption d (no CVSS, Google Android)
- [CVE-2017-0477](https://cve.now/CVE-2017-0477.md): A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code within the (no CVSS, Google Android)
- [CVE-2017-0478](https://cve.now/CVE-2017-0478.md): A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitr (no CVSS, Google Android)
- [CVE-2017-0479](https://cve.now/CVE-2017-0479.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conte (no CVSS, Google Android)
- [CVE-2017-0480](https://cve.now/CVE-2017-0480.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conte (no CVSS, Google Android)
- [CVE-2017-0481](https://cve.now/CVE-2017-0481.md): An elevation of privilege vulnerability in NFC could enable a proximate attacker to execute arbitrary code within the context of a privilege (no CVSS, Google Android)
- [CVE-2017-0482](https://cve.now/CVE-2017-0482.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0483](https://cve.now/CVE-2017-0483.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0484](https://cve.now/CVE-2017-0484.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0485](https://cve.now/CVE-2017-0485.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0486](https://cve.now/CVE-2017-0486.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0487](https://cve.now/CVE-2017-0487.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0488](https://cve.now/CVE-2017-0488.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0489](https://cve.now/CVE-2017-0489.md): An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protection (no CVSS, Google Android)
- [CVE-2017-0490](https://cve.now/CVE-2017-0490.md): An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. (no CVSS, Google Android)
- [CVE-2017-0491](https://cve.now/CVE-2017-0491.md): An elevation of privilege vulnerability in Package Manager could enable a local malicious application to prevent users from uninstalling app (no CVSS, Google Android)
- [CVE-2017-0492](https://cve.now/CVE-2017-0492.md): An elevation of privilege vulnerability in the System UI could enable a local malicious application to create a UI overlay covering the enti (no CVSS, Google Android)
- [CVE-2017-0494](https://cve.now/CVE-2017-0494.md): An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside (no CVSS, Google Android)
- [CVE-2017-0495](https://cve.now/CVE-2017-0495.md): An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission l (no CVSS, Google Android)
- [CVE-2017-0496](https://cve.now/CVE-2017-0496.md): A denial of service vulnerability in Setup Wizard could allow a local malicious application to temporarily block access to an affected devic (no CVSS, Google Android)
- [CVE-2017-0497](https://cve.now/CVE-2017-0497.md): A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0498](https://cve.now/CVE-2017-0498.md): A denial of service vulnerability in Setup Wizard could allow a local attacker to require Google account sign-in after a factory reset. (no CVSS, Google Android)
- [CVE-2017-0499](https://cve.now/CVE-2017-0499.md): A denial of service vulnerability in Audioserver could enable a local malicious application to cause a device hang or reboot. (no CVSS, Google Android)
- [CVE-2017-0500](https://cve.now/CVE-2017-0500.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and (no CVSS, Google Android)
- [CVE-2017-0501](https://cve.now/CVE-2017-0501.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and (no CVSS, Google Android)
- [CVE-2017-0502](https://cve.now/CVE-2017-0502.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and (no CVSS, Google Android)
- [CVE-2017-0503](https://cve.now/CVE-2017-0503.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and (no CVSS, Google Android)
- [CVE-2017-0504](https://cve.now/CVE-2017-0504.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and (no CVSS, Google Android)
- [CVE-2017-0505](https://cve.now/CVE-2017-0505.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and (no CVSS, Google Android)
- [CVE-2017-0506](https://cve.now/CVE-2017-0506.md): An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and (no CVSS, Google Android)
- [CVE-2017-0507](https://cve.now/CVE-2017-0507.md): An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code wit (no CVSS, Google Android)
- [CVE-2017-0508](https://cve.now/CVE-2017-0508.md): An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code wit (no CVSS, Google Android)
- [CVE-2017-0509](https://cve.now/CVE-2017-0509.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0510](https://cve.now/CVE-2017-0510.md): An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code with (no CVSS, Google Android)
- [CVE-2017-0516](https://cve.now/CVE-2017-0516.md): An elevation of privilege vulnerability in the Qualcomm input hardware driver could enable a local malicious application to execute arbitrar (no CVSS, Google Android)
- [CVE-2017-0517](https://cve.now/CVE-2017-0517.md): An elevation of privilege vulnerability in the MediaTek hardware sensor driver could enable a local malicious application to execute arbitra (no CVSS, Google Android)
- [CVE-2017-0518](https://cve.now/CVE-2017-0518.md): An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbi (no CVSS, Google Android)
- [CVE-2017-0519](https://cve.now/CVE-2017-0519.md): An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbi (no CVSS, Google Android)
- [CVE-2017-0520](https://cve.now/CVE-2017-0520.md): An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary (no CVSS, Google Android)
- [CVE-2017-0521](https://cve.now/CVE-2017-0521.md): An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code w (no CVSS, Google Android)
- [CVE-2017-0522](https://cve.now/CVE-2017-0522.md): An elevation of privilege vulnerability in a MediaTek APK could enable a local malicious application to execute arbitrary code within the co (no CVSS, Google Android)
- [CVE-2017-0523](https://cve.now/CVE-2017-0523.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0524](https://cve.now/CVE-2017-0524.md): An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary (no CVSS, Google Android)
- [CVE-2017-0525](https://cve.now/CVE-2017-0525.md): An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code with (no CVSS, Google Android)
- [CVE-2017-0526](https://cve.now/CVE-2017-0526.md): An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0527](https://cve.now/CVE-2017-0527.md): An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0528](https://cve.now/CVE-2017-0528.md): An elevation of privilege vulnerability in the kernel security subsystem could enable a local malicious application to to execute code in th (no CVSS, Google Android)
- [CVE-2017-0529](https://cve.now/CVE-2017-0529.md): An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its perm (no CVSS, Google Android)
- [CVE-2017-0531](https://cve.now/CVE-2017-0531.md): An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of it (no CVSS, Google Android)
- [CVE-2017-0532](https://cve.now/CVE-2017-0532.md): An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside (no CVSS, Google Android)
- [CVE-2017-0533](https://cve.now/CVE-2017-0533.md): An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of it (no CVSS, Google Android)
- [CVE-2017-0534](https://cve.now/CVE-2017-0534.md): An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of it (no CVSS, Google Android)
- [CVE-2017-0535](https://cve.now/CVE-2017-0535.md): An information disclosure vulnerability in the HTC sound codec driver could enable a local malicious application to access data outside of i (no CVSS, Google Android)
- [CVE-2017-0536](https://cve.now/CVE-2017-0536.md): An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outsid (no CVSS, Google Android)
- [CVE-2017-0537](https://cve.now/CVE-2017-0537.md): An information disclosure vulnerability in the kernel USB gadget driver could enable a local malicious application to access data outside of (no CVSS, Google Android)
- [CVE-2017-6518](https://cve.now/CVE-2017-6518.md): Cross-site scripting (XSS) vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-03-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.