CVEs published March 14, 2017
64 CVEs were published on March 14, 2017: 0 critical, 1 high.
- Published
- 64
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 63
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Intel VirusScan Enterprise Linux
- 10
- Adobe Flash Player 24.0.0.221 and earlier.
- 7
- Intel Advanced Threat Defense
- 3
- Intel McAfee Application Control
- 3
- Adobe Shockwave 12.2.7.197 and earlier.
- 1
- Apache Software Foundation Apache Tomcat · org.apache.tomca…
- 1
- Eaton xComfort Ethernet Communication Interface
- 1
- Intel Agent
- 1
- Intel Application Control
- 1
- Intel Change Control
- 1
High 1
Medium, low and unrated 63
- CVE-2013-7460A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier aIntel Application Control
- CVE-2013-7461A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Linux and earlier allowsIntel Change Control
- CVE-2013-7462A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS Control Console (SCC) Platform 6.14 before paIntel SaaS Control Console (SCC) Platform
- CVE-2014-9920Unauthorized execution of binary vulnerability in McAfee (now Intel Security) McAfee Application Control (MAC) 6.0.0 before hotfix 9726, 6.0Intel McAfee Application Control
- CVE-2014-9921Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d andIntel Cloud Analysis and Deconstructive Services
- CVE-2015-8986Sandbox detection evasion vulnerability in hardware appliances in McAfee (now Intel Security) Advanced Threat Defense (MATD) 3.4.2.32 and eaIntel Advanced Threat Defense
- CVE-2015-8987Man-in-the-middle (MitM) attack vulnerability in non-Mac OS agents in McAfee (now Intel Security) Agent (MA) 4.8.0 patch 2 and earlier allowIntel Agent
- CVE-2015-8988Unquoted executable path vulnerability in Client Management and Gateway components in McAfee (now Intel Security) ePO Deep Command (eDC) 2.2Intel ePO Deep Command
- CVE-2015-8989Unsalted password vulnerability in the Enterprise Manager (web portal) component in Intel Security McAfee Vulnerability Manager (MVM) 7.5.8 Intel McAfee Vulnerability Manager
- CVE-2015-8990Detection bypass vulnerability in Intel Security Advanced Threat Defense (ATD) 3.4.6 and earlier allows malware samples to bypass ATD detectIntel Advanced Threat Defense
- CVE-2015-8991Malicious file execution vulnerability in Intel Security McAfee Security Scan+ (MSS+) before 3.11.266.3 allows attackers to make the productIntel McAfee Security Scan+
- CVE-2015-8992Malicious file execution vulnerability in Intel Security WebAdvisor before 4.0.2, 4.0.1 and 3.7.2 allows attackers to make the product momenIntel WebAdvisor
- CVE-2015-8993Malicious file execution vulnerability in Intel Security CloudAV (Beta) before 0.5.0.151.3 allows attackers to make the product momentarily Intel CloudAV
- CVE-2016-10252Memory leak in the IsOptionMember function in MagickCore/option.c in ImageMagick before 6.9.2-2, as used in ODR-PadEnc and other products, a
- CVE-2016-8005File extension filtering vulnerability in Intel Security McAfee Email Gateway (MEG) before 7.6.404h1128596 allows attackers to fail to identIntel McAfee Email Gateway
- CVE-2016-8007Authentication bypass vulnerability in McAfee Host Intrusion Prevention Services (HIPS) 8.0 Patch 7 and earlier allows authenticated users tIntel Host Intrusion Prevention Services
- CVE-2016-8008Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus (SSP) 3.11.376 allows attackers to load a replacIntel Security Scan Plus
- CVE-2016-8009Privilege escalation vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and 6.x versions allows attackers to cause DoS, unIntel McAfee Application Control
- CVE-2016-8010Application protections bypass vulnerability in Intel Security McAfee Application Control (MAC) 7.0 and earlier and Endpoint Security (ENS) Intel McAfee Application Control
- CVE-2016-8011Cross-site scripting vulnerability in Intel Security McAfee Endpoint Security (ENS) Web Control before 10.2.0.408.10 allows attackers to injIntel McAfee Endpoint Security (ENS) Web Control
- CVE-2016-8012Access control vulnerability in Intel Security Data Loss Prevention Endpoint (DLPe) 9.4.200 and 9.3.600 allows authenticated users with ReadIntel Data Loss Prevention Endpoint
- CVE-2016-8016Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to obtainIntel VirusScan Enterprise Linux
- CVE-2016-8017Special element injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote Intel VirusScan Enterprise Linux
- CVE-2016-8018Cross-site request forgery (CSRF) vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticatedIntel VirusScan Enterprise Linux
- CVE-2016-8019Cross-site scripting (XSS) vulnerability in attributes in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows unauthIntel VirusScan Enterprise Linux
- CVE-2016-8020Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote aIntel VirusScan Enterprise Linux
- CVE-2016-8021Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allowIntel VirusScan Enterprise Linux
- CVE-2016-8022Authentication bypass by spoofing vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthIntel VirusScan Enterprise Linux
- CVE-2016-8023Authentication bypass by assumed-immutable data vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allowsIntel VirusScan Enterprise Linux
- CVE-2016-8024Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earliIntel VirusScan Enterprise Linux
- CVE-2016-8025SQL injection vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to obtIntel VirusScan Enterprise Linux
- CVE-2016-8026Arbitrary command execution vulnerability in Intel Security McAfee Security Scan Plus (SSP) 3.11.469 and earlier allows authenticated users Intel McAfee Security Scan Plus
- CVE-2016-8027SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and earlier allMcAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1…
- CVE-2017-3899SQL injection vulnerability in Intel Security Advanced Threat Defense (ATD) Linux 3.6.0 and earlier allows remote authenticated users to obtIntel Advanced Threat Defense
- CVE-2017-6903In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions.
- CVE-2017-6896Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to a
- CVE-2017-5985lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose
- CVE-2017-6516A Local Privilege Escalation Vulnerability in MagniComp's Sysinfo before 10-H64 for Linux and UNIX platforms could allow a local attacker to
- CVE-2017-2983Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading (DLL hijacking) vulnerability.Adobe Shockwave 12.2.7.197 and earlier.
- CVE-2017-2997Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK thatAdobe Flash Player 24.0.0.221 and earlier.
- CVE-2017-2998Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionalAdobe Flash Player 24.0.0.221 and earlier.
- CVE-2017-2999Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality Adobe Flash Player 24.0.0.221 and earlier.
- CVE-2017-3000Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding.Adobe Flash Player 24.0.0.221 and earlier.
- CVE-2017-3001Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActAdobe Flash Player 24.0.0.221 and earlier.
- CVE-2017-3002Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object reAdobe Flash Player 24.0.0.221 and earlier.
- CVE-2017-3003Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the prAdobe Flash Player 24.0.0.221 and earlier.
- CVE-2016-10169The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via
- CVE-2016-10170The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read)
- CVE-2016-10171The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bound
- CVE-2016-10172The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bound
- CVE-2016-10188Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash) or possibly execute
- CVE-2016-10189BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary
- CVE-2017-5668bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execut
- CVE-2017-5957Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer before 926b9b3460a48f6454d
- CVE-2017-6335The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service
- CVE-2013-4659Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916.
- CVE-2014-8688An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android.
- CVE-2016-9368An issue was discovered in Eaton xComfort Ethernet Communication Interface (ECI) Versions 1.07 and prior.Eaton xComfort Ethernet Communication Interface
- CVE-2017-6367In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash.
- CVE-2017-6398An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600.
- CVE-2017-6874Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service (use-after-free and sys
- CVE-2017-6877Cross-site scripting (XSS) vulnerability in SVG file handling in Lutim 0.7.1 and earlier allows remote attackers to inject arbitrary web scr
- CVE-2017-6883The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is enabled, allows remote a