# CVEs published 2017-03-16 20 CVEs were published on March 16, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-6952](https://cve.now/CVE-2017-6952.md): Integer overflow in the cs\_winkernel\_malloc function in winkernel\_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of s (no CVSS, capstone) - [CVE-2017-6951](https://cve.now/CVE-2017-6951.md): The keyring\_search\_aux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to cause a denial of servi (no CVSS) - [CVE-2017-6949](https://cve.now/CVE-2017-6949.md): An issue was discovered in CHICKEN Scheme through 4.12.0. (no CVSS) - [CVE-2015-8981](https://cve.now/CVE-2015-8981.md): Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecifie (no CVSS) - [CVE-2016-0770](https://cve.now/CVE-2016-0770.md): Cross-site scripting (XSS) vulnerability in includes/admin/pages/manage.php in the Connections Business Directory plugin before 8.5.9 for Wo (no CVSS) - [CVE-2016-10187](https://cve.now/CVE-2016-10187.md): The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript. (no CVSS) - [CVE-2017-5505](https://cve.now/CVE-2017-5505.md): The jas\_matrix\_asl function in jas\_seq.c in JasPer 1.900.27 allows remote attackers to cause a denial of service (invalid memory read and cr (no CVSS) - [CVE-2017-5617](https://cve.now/CVE-2017-5617.md): The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forge (no CVSS, com.kitfox.svg:svg-salamander) - [CVE-2017-5643](https://cve.now/CVE-2017-5643.md): Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE. (no CVSS, Apache Software Foundation Apache Camel · org.apache.camel:…) - [CVE-2017-5667](https://cve.now/CVE-2017-5667.md): The sdhci\_sdma\_transfer\_multi\_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause (no CVSS) - [CVE-2017-5856](https://cve.now/CVE-2017-5856.md): Memory leak in the megasas\_handle\_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to (no CVSS) - [CVE-2017-5857](https://cve.now/CVE-2017-5857.md): Memory leak in the virgl\_cmd\_resource\_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users (no CVSS) - [CVE-2016-10246](https://cve.now/CVE-2016-10246.md): Buffer overflow in the main function in jstest\_main.c in Mujstest in Artifex Software, Inc. (no CVSS) - [CVE-2016-10247](https://cve.now/CVE-2016-10247.md): Buffer overflow in the my\_getline function in jstest\_main.c in Mujstest in Artifex Software, Inc. (no CVSS) - [CVE-2017-6377](https://cve.now/CVE-2017-6377.md): When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attach (no CVSS, Drupal Core · drupal/core +1) - [CVE-2017-6379](https://cve.now/CVE-2017-6379.md): Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. (no CVSS, Drupal Core · drupal/core +1) - [CVE-2017-6381](https://cve.now/CVE-2017-6381.md): A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. (no CVSS, Drupal Core · drupal/core +1) - [CVE-2017-6510](https://cve.now/CVE-2017-6510.md): Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download (no CVSS) - [CVE-2017-6023](https://cve.now/CVE-2017-6023.md): An issue was discovered in Fatek Automation PLC Ethernet Module. (no CVSS, Fatek Automation PLC Ethernet Module) - [CVE-2017-6061](https://cve.now/CVE-2017-6061.md): Cross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote atta (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-03-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.