CVEs published March 9, 2017
28 CVEs were published on March 9, 2017: 0 critical, 0 high.
- Published
- 28
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 28
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- django-epiceditor
- 1
- epiceditor
- 1
Medium, low and unrated 28
- CVE-2017-6591There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field.django-epiceditor
- CVE-2017-6526An issue was discovered in dnaTools dnaLIMS 4-2015s13.
- CVE-2017-6527An issue was discovered in dnaTools dnaLIMS 4-2015s13.
- CVE-2017-6528An issue was discovered in dnaTools dnaLIMS 4-2015s13.
- CVE-2017-6529An issue was discovered in dnaTools dnaLIMS 4-2015s13.
- CVE-2017-6589EpicEditor through 0.2.3 has Cross-Site Scripting because of an insecure default marked.js configuration.epiceditor
- CVE-2017-6590An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10.
- CVE-2017-6432An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices.
- CVE-2017-6547Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC6
- CVE-2017-6548Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC
- CVE-2017-6549Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R
- CVE-2017-6552Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can b
- CVE-2017-6555Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject
- CVE-2017-6556Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script o
- CVE-2017-6558iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allow
- CVE-2017-6559XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack.
- CVE-2017-6560XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack.
- CVE-2017-6561XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack.
- CVE-2017-6562XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack.
- CVE-2017-6570A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress.
- CVE-2017-6571A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress.
- CVE-2017-6572A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress.
- CVE-2017-6573A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress.
- CVE-2017-6574A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress.
- CVE-2017-6575A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress.
- CVE-2017-6576A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress.
- CVE-2017-6577A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress.
- CVE-2017-6578A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress.