# CVEs published 2017-03-13

15 CVEs were published on March 13, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2014-3926](https://cve.now/CVE-2014-3926.md): Cross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the " (no CVSS)
- [CVE-2017-6807](https://cve.now/CVE-2017-6807.md): mod\_auth\_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one web site running on a s (no CVSS)
- [CVE-2015-6671](https://cve.now/CVE-2015-6671.md): Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it easier for context-depe (no CVSS)
- [CVE-2015-4407](https://cve.now/CVE-2015-4407.md): Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial o (no CVSS)
- [CVE-2015-4408](https://cve.now/CVE-2015-4408.md): Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial o (no CVSS)
- [CVE-2015-4409](https://cve.now/CVE-2015-4409.md): Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial o (no CVSS)
- [CVE-2017-5619](https://cve.now/CVE-2017-5619.md): An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. (no CVSS)
- [CVE-2017-5620](https://cve.now/CVE-2017-5620.md): An XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. (no CVSS)
- [CVE-2017-5621](https://cve.now/CVE-2017-5621.md): An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. (no CVSS)
- [CVE-2017-5674](https://cve.now/CVE-2017-5674.md): A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker (no CVSS)
- [CVE-2017-5675](https://cve.now/CVE-2017-5675.md): A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple wh (no CVSS)
- [CVE-2017-5929](https://cve.now/CVE-2017-5929.md): QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components. (no CVSS, ch.qos.logback:logback-classic · ch.qos.logback:logback-core)
- [CVE-2017-6080](https://cve.now/CVE-2017-6080.md): An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, caused by lack of a protection mechanism involvi (no CVSS)
- [CVE-2017-6081](https://cve.now/CVE-2017-6081.md): A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. (no CVSS)
- [CVE-2017-6180](https://cve.now/CVE-2017-6180.md): Keekoon KK002 devices 1.8.12 HD have a Cross Site Request Forgery Vulnerability affecting goform/formChnUserPwd and goform/formUserMng (and (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-03-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.