# CVEs published 2017-03-10 24 CVEs were published on March 10, 2017: 3 critical, 1 high. Days are UTC. - [CVE-2016-8714](https://cve.now/CVE-2016-8714.md): An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. (CVSS 7.5, The R Project R) - [CVE-2017-2785](https://cve.now/CVE-2017-2785.md): An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. (CVSS 10.0, Pharos PopUp Printer Client) - [CVE-2017-2786](https://cve.now/CVE-2017-2786.md): A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. (CVSS 5.3, Pharos PopUp Printer Client) - [CVE-2017-2787](https://cve.now/CVE-2017-2787.md): A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. (CVSS 9.0, Pharos PopUp Printer Client) - [CVE-2017-2788](https://cve.now/CVE-2017-2788.md): A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. (CVSS 10.0, Pharos PopUp Printer Client) - [CVE-2017-5859](https://cve.now/CVE-2017-5859.md): On Cambium Networks cnPilot R200/201 devices before 4.3, there is a vulnerability involving the certificate of the device and its RSA keys, (no CVSS) - [CVE-2017-6427](https://cve.now/CVE-2017-6427.md): A Buffer Overflow was discovered in EvoStream Media Server 1.7.1. (no CVSS) - [CVE-2017-6506](https://cve.now/CVE-2017-6506.md): In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leading to remote code ex (no CVSS) - [CVE-2017-6596](https://cve.now/CVE-2017-6596.md): partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validation of the partclone (no CVSS) - [CVE-2017-6798](https://cve.now/CVE-2017-6798.md): Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka T (no CVSS) - [CVE-2017-6799](https://cve.now/CVE-2017-6799.md): A cross-site scripting (XSS) vulnerability in view\_filters\_page.php in MantisBT before 2.2.1 allows remote attackers to inject arbitrary Jav (no CVSS) - [CVE-2017-6800](https://cve.now/CVE-2017-6800.md): An issue was discovered in ytnef before 1.9.2. (no CVSS) - [CVE-2017-6801](https://cve.now/CVE-2017-6801.md): An issue was discovered in ytnef before 1.9.2. (no CVSS) - [CVE-2017-6802](https://cve.now/CVE-2017-6802.md): An issue was discovered in ytnef before 1.9.2. (no CVSS) - [CVE-2015-2330](https://cve.now/CVE-2015-2330.md): Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example (no CVSS) - [CVE-2017-5872](https://cve.now/CVE-2017-5872.md): The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or 59.1 before 59.172, w (no CVSS) - [CVE-2017-6311](https://cve.now/CVE-2017-6311.md): gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (NULL pointer dereference and applica (no CVSS) - [CVE-2017-6312](https://cve.now/CVE-2017-6312.md): Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentation fault and applicati (no CVSS) - [CVE-2017-6313](https://cve.now/CVE-2017-6313.md): Integer underflow in the load\_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (no CVSS) - [CVE-2017-6314](https://cve.now/CVE-2017-6314.md): The make\_available\_at\_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (infinite lo (no CVSS) - [CVE-2017-6355](https://cve.now/CVE-2017-6355.md): Integer overflow in the vrend\_create\_shader function in vrend\_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause (no CVSS) - [CVE-2017-4960](https://cve.now/CVE-2017-4960.md): An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 (no CVSS, Cloud Foundry Foundation Cloud Foundry release v247 - v252,…) - [CVE-2017-6465](https://cve.now/CVE-2017-6465.md): Remote Code Execution was discovered in FTPShell Client 6.53. (no CVSS) - [CVE-2017-6797](https://cve.now/CVE-2017-6797.md): A cross-site scripting (XSS) vulnerability in bug\_change\_status\_page.php in MantisBT before 1.3.7 and 2.x before 2.2.1 allows remote attacke (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-03-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.