CVEs published March 26, 2017
9 CVEs were published on March 26, 2017: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Moodle 3.x · moodle/moodle
- 2
- Moodle 2.x and 3.x · moodle/moodle
- 1
- Moodle 3.2.x · moodle/moodle
- 1
- security-monkey
- 1
Medium, low and unrated 9
- CVE-2017-5622With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts with adbd enabled.
- CVE-2017-2641In Moodle 2.x and 3.x, SQL injection can occur via user preferences.Moodle 2.x and 3.x · moodle/moodle
- CVE-2017-2643In Moodle 3.2.x, global search displays user names for unauthenticated users.Moodle 3.2.x · moodle/moodle
- CVE-2017-2644In Moodle 3.x, XSS can occur via evidence of prior learning.Moodle 3.x · moodle/moodle
- CVE-2017-2645In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.Moodle 3.x · moodle/moodle
- CVE-2016-10273Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev.
- CVE-2017-7263The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-rea
- CVE-2017-7264Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a
- CVE-2017-7266Netflix Security Monkey before 0.8.0 has an Open Redirect.security-monkey