CVEs published March 16, 2017
20 CVEs were published on March 16, 2017: 0 critical, 0 high.
- Published
- 20
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 20
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Drupal Core · drupal/core +1
- 3
- Apache Software Foundation Apache Camel · org.apache.camel:…
- 1
- capstone
- 1
- com.kitfox.svg:svg-salamander
- 1
- Fatek Automation PLC Ethernet Module
- 1
Medium, low and unrated 20
- CVE-2017-6952Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of scapstone
- CVE-2017-6951The keyring_search_aux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to cause a denial of servi
- CVE-2017-6949An issue was discovered in CHICKEN Scheme through 4.12.0.
- CVE-2015-8981Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecifie
- CVE-2016-0770Cross-site scripting (XSS) vulnerability in includes/admin/pages/manage.php in the Connections Business Directory plugin before 8.5.9 for Wo
- CVE-2016-10187The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.
- CVE-2017-5505The jas_matrix_asl function in jas_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and cr
- CVE-2017-5617The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgecom.kitfox.svg:svg-salamander
- CVE-2017-5643Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.Apache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2017-5667The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause
- CVE-2017-5856Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to
- CVE-2017-5857Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users
- CVE-2016-10246Buffer overflow in the main function in jstest_main.c in Mujstest in Artifex Software, Inc.
- CVE-2016-10247Buffer overflow in the my_getline function in jstest_main.c in Mujstest in Artifex Software, Inc.
- CVE-2017-6377When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attachDrupal Core · drupal/core +1
- CVE-2017-6379Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF.Drupal Core · drupal/core +1
- CVE-2017-6381A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution.Drupal Core · drupal/core +1
- CVE-2017-6510Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download
- CVE-2017-6023An issue was discovered in Fatek Automation PLC Ethernet Module.Fatek Automation PLC Ethernet Module
- CVE-2017-6061Cross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote atta