CVEs published March 12, 2017
12 CVEs were published on March 12, 2017: 0 critical, 0 high.
- Published
- 12
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 12
- CVE-2014-9645The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel
- CVE-2017-5624An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T.
- CVE-2017-5626OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to
- CVE-2017-6444The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, whic
- CVE-2017-6820rcube_utils.php in Roundcube before 1.1.8 and 1.2.x before 1.2.4 is susceptible to a cross-site scripting vulnerability via a crafted Cascad
- CVE-2017-6823Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit actio
- CVE-2017-6814In WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via Media File Metadata.
- CVE-2017-6815In WordPress before 4.7.3 (wp-includes/pluggable.php), control characters can trick redirect URL validation.
- CVE-2017-6816In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin deletion functionality.
- CVE-2017-6817In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embeds.
- CVE-2017-6818In WordPress before 4.7.3 (wp-admin/js/tags-box.js), there is cross-site scripting (XSS) via taxonomy term names.
- CVE-2017-6819In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-this.php), leading to