CVEs published March 20, 2017
63 CVEs were published on March 20, 2017: 0 critical, 0 high.
- Published
- 63
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 63
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- IBM Rational Rhapsody Design Manager
- 4
- Apache Software Foundation Apache Tomcat · org.apache.tomca…
- 1
- IBM Algo One
- 1
- IBM Content Navigator
- 1
- IBM Rational Collaborative Lifecycle Management
- 1
- IBM Tivoli System Automation for Multiplatforms
- 1
- IBM WebSphere Application Server
- 1
- IBM WebSphere MQ
- 1
Medium, low and unrated 63
- CVE-2016-4926Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web inte
- CVE-2016-4927Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM) type of attacks while a Space device is com
- CVE-2016-4928Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain administrative actions on J
- CVE-2016-4929Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user.
- CVE-2016-4930Cross-site scripting (XSS) vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive information or perform cert
- CVE-2016-4931XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service.
- CVE-2016-6816The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HApache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2012-5361Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file.
- CVE-2014-9841The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, re
- CVE-2014-9842Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memor
- CVE-2014-9843The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.
- CVE-2014-9844The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) v
- CVE-2014-9845The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib fi
- CVE-2014-9846Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.
- CVE-2014-9847The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
- CVE-2014-9848Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).
- CVE-2014-9849The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).
- CVE-2014-9850Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).
- CVE-2014-9851ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).
- CVE-2015-1610hosttracker in OpenDaylight l2switch allows remote attackers to change the host location information by spoofing the MAC address, aka "topol
- CVE-2015-8954The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attacker
- CVE-2015-8983Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before 2.22 allows context-d
- CVE-2015-8984The fnmatch function in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of serv
- CVE-2015-8985The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a denial of service (asser
- CVE-2016-10214Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of ser
- CVE-2016-2406The permission control module in Huawei Document Security Management (aka DSM) before V100R002C05SPC670 allows remote authenticated users to
- CVE-2016-2981An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials.IBM Rational Collaborative Lifecycle Management
- CVE-2016-5857The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted
- CVE-2016-8973IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability that may allow an authenticated user to upload infected malicious filIBM Rational Rhapsody Design Manager
- CVE-2016-9165The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified Infrastructure Mana
- CVE-2016-9694IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.IBM Rational Rhapsody Design Manager
- CVE-2016-9696IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection.IBM Rational Rhapsody Design Manager
- CVE-2016-9697An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to perform a JSON Hijacking Attack.IBM Rational Rhapsody Design Manager
- CVE-2017-1134IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access.IBM Tivoli System Automation for Multiplatforms
- CVE-2017-1145IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a deniIBM WebSphere MQ
- CVE-2017-1146IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting.IBM Content Navigator
- CVE-2017-1151IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) IBM WebSphere Application Server
- CVE-2017-1155IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specialIBM Algo One
- CVE-2017-5618GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking o
- CVE-2017-5930The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete
- CVE-2017-5956The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array acce
- CVE-2017-5987The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause
- CVE-2017-6058Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxn
- CVE-2017-6178The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call, which triggers a NU
- CVE-2017-6318saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CONTROL_OPTION packet.
- CVE-2017-6356Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which al
- CVE-2017-6550Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands via
- CVE-2017-6803Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly Serv-U) FTP Voyager
- CVE-2017-6805Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a
- CVE-2017-6829The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash
- CVE-2017-6830Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers t
- CVE-2017-6831Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.
- CVE-2017-6832Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1,
- CVE-2017-6833The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a d
- CVE-2017-6834Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3
- CVE-2017-6835The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a de
- CVE-2017-6836Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile
- CVE-2017-6837WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a l
- CVE-2017-6838Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service
- CVE-2017-6839Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (cr
- CVE-2017-7187The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based b
- CVE-2014-9938contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to
- CVE-2017-7186libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read acces