CVEs published March 22, 2017
29 CVEs were published on March 22, 2017: 0 critical, 0 high.
- Published
- 29
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 29
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Cisco Application-Hosting Framework
- 2
- Cisco IOS and IOS XE
- 2
- Cisco IOS XE
- 2
- Cisco IOS XE Software for Cisco ASR 920 Series Routers
- 1
- Cisco IOx
- 1
Medium, low and unrated 29
- CVE-2017-6972AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl co
- CVE-2017-3851A Directory Traversal vulnerability in the web framework code of the Cisco application-hosting framework (CAF) component of the Cisco IOx apCisco Application-Hosting Framework
- CVE-2017-3852A vulnerability in the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an authenticCisco Application-Hosting Framework
- CVE-2017-3853A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an unauthenticated, remCisco IOx
- CVE-2017-3856A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affecCisco IOS XE
- CVE-2017-3857A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco ICisco IOS and IOS XE
- CVE-2017-3858A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands thaCisco IOS XE
- CVE-2017-3859A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow anCisco IOS XE Software for Cisco ASR 920 Series Routers
- CVE-2017-3864A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could Cisco IOS and IOS XE
- CVE-2017-7230A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET req
- CVE-2017-7231pngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it fails to properly process a specially crafted
- CVE-2017-5673In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS.
- CVE-2017-7223GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the
- CVE-2017-7224The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt b
- CVE-2017-7225The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name ar
- CVE-2017-7226The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to
- CVE-2017-7227GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a progr
- CVE-2014-9832Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file.
- CVE-2014-9833Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.
- CVE-2014-9834Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.
- CVE-2014-9835Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.
- CVE-2014-9836ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file.
- CVE-2014-9838magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash).
- CVE-2014-9839magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access).
- CVE-2014-9840ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file.
- CVE-2017-6970AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an
- CVE-2017-6971AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged
- CVE-2017-5874CSRF exists on D-Link DIR-600M Rev.
- CVE-2017-7222A cross-site scripting (XSS) vulnerability in MantisBT before 2.1.1 allows remote attackers to inject arbitrary HTML or JavaScript (if Manti