CVEs published March 21, 2017
22 CVEs were published on March 21, 2017: 0 critical, 0 high.
- Published
- 22
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 22
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Cisco IOS and IOS XE
- 2
- EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint…
- 1
- glance
- 1
- imdbphp/imdbphp
- 1
- Meteocontrol WEB'log
- 1
- nova
- 1
Medium, low and unrated 22
- CVE-2017-7215Cross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68.js and the organisation landing page in app
- CVE-2017-7214An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1.nova
- CVE-2016-4504A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pro all versions, and Meteocontrol WEB'log
- CVE-2016-6650EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability tEMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint…
- CVE-2017-3849A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2 through 15.6) and CiCisco IOS and IOS XE
- CVE-2017-3850A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE SoftwareCisco IOS and IOS XE
- CVE-2017-5565Code injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet Security 11.0 (and earlier), and Antivirus+ Securi
- CVE-2017-5566Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and earlier), and AVG AntiVirus FREE 17.1 (and
- CVE-2017-5567Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), an
- CVE-2017-6186Code injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security 12.0 (and earlier), and Antivirus Plus 12.0
- CVE-2017-6417Code injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite 15.0 (and earlier), Internet Security Suit
- CVE-2014-9939ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
- CVE-2017-7200An SSRF issue was discovered in OpenStack Glance before Newton.glance
- CVE-2017-7202Multiple Cross-Site Scripting (XSS) were discovered in SLiMS 7 Cendana before 2017-03-16.
- CVE-2017-7203A Cross-Site Scripting (XSS) was discovered in ZoneMinder before 1.30.2.
- CVE-2017-7204A Cross-Site Scripting (XSS) was discovered in imdbphp 5.1.1.imdbphp/imdbphp
- CVE-2017-7205A Cross-Site Scripting (XSS) was discovered in GamePanelX-V3 3.0.12.
- CVE-2017-7206The ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-
- CVE-2017-7207The mem_get_bits_rectangle function in Artifex Software, Inc.
- CVE-2017-7208The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain s
- CVE-2017-7209The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binar
- CVE-2017-7210objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum