# CVEs published 2017-03-26

9 CVEs were published on March 26, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-5622](https://cve.now/CVE-2017-5622.md): With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts with adbd enabled. (no CVSS)
- [CVE-2017-2641](https://cve.now/CVE-2017-2641.md): In Moodle 2.x and 3.x, SQL injection can occur via user preferences. (no CVSS, Moodle 2.x and 3.x · moodle/moodle)
- [CVE-2017-2643](https://cve.now/CVE-2017-2643.md): In Moodle 3.2.x, global search displays user names for unauthenticated users. (no CVSS, Moodle 3.2.x · moodle/moodle)
- [CVE-2017-2644](https://cve.now/CVE-2017-2644.md): In Moodle 3.x, XSS can occur via evidence of prior learning. (no CVSS, Moodle 3.x · moodle/moodle)
- [CVE-2017-2645](https://cve.now/CVE-2017-2645.md): In Moodle 3.x, XSS can occur via attachments to evidence of prior learning. (no CVSS, Moodle 3.x · moodle/moodle)
- [CVE-2016-10273](https://cve.now/CVE-2016-10273.md): Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. (no CVSS)
- [CVE-2017-7263](https://cve.now/CVE-2017-7263.md): The bm\_readbody\_bmp function in bitmap\_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-rea (no CVSS)
- [CVE-2017-7264](https://cve.now/CVE-2017-7264.md): Use-after-free vulnerability in the fz\_subsample\_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a (CVSS 5.3)
- [CVE-2017-7266](https://cve.now/CVE-2017-7266.md): Netflix Security Monkey before 0.8.0 has an Open Redirect. (no CVSS, security-monkey)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-03-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.