CVEs published March 28, 2017
39 CVEs were published on March 28, 2017: 0 critical, 0 high.
- Published
- 39
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 39
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Revive Adserver All versions before
- 11
- Nextcloud Server & ownCloud Server Nextcloud Server before…
- 9
- Revive Adserver All versions before 3.2.5 and
- 3
- Apache Software Foundation Apache Ambari · org.apache.ambar…
- 1
- Apache Software Foundation Apache Camel · org.apache.camel:…
- 1
- Brave Software Brave Browser iOS before 1.2.18 and Brave Br…
- 1
- GitLab Community Edition & GitLab Enterprise Edition 8.13.0…
- 1
- GitLab Community Edition and GitLab Enterprise Edition 8.7.…
- 1
- Go JOSE All versions before · github.com/square/go-jose
- 1
- Go JOSE All versions before · gopkg.in/square/go-jose.v1
- 1
Medium, low and unrated 39
- CVE-2016-6807Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to unauthorized access to operatiApache Software Foundation Apache Ambari · org.apache.ambar…
- CVE-2016-8749Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.Apache Software Foundation Apache Camel · org.apache.camel:…
- CVE-2014-6440VideoLAN VLC media player before 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service.
- CVE-2016-8031Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local users to bypass local secuIntel Anti-Virus Engine
- CVE-2016-10152The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configurat
- CVE-2016-8884The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to cause a denial of service (NULL pointer der
- CVE-2017-7277The TCP stack in the Linux kernel through 4.10.6 mishandles the SCM_TIMESTAMPING_OPT_STATS feature, which allows local users to obtain sensi
- CVE-2016-9121go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm.Go JOSE All versions before · gopkg.in/square/go-jose.v1 +1
- CVE-2016-9122go-jose before 1.0.4 suffers from multiple signatures exploitation.Go JOSE All versions before · gopkg.in/square/go-jose.v1
- CVE-2016-9123go-jose before 1.0.5 suffers from a CBC-HMAC integer overflow on 32-bit architectures.Go JOSE All versions before · github.com/square/go-jose
- CVE-2016-9124Revive Adserver before 3.2.3 suffers from Improper Restriction of Excessive Authentication Attempts.Revive Adserver All versions before
- CVE-2016-9125Revive Adserver before 3.2.3 suffers from session fixation, by allowing arbitrary session identifiers to be forced and, at the same time, byRevive Adserver All versions before
- CVE-2016-9126Revive Adserver before 3.2.3 suffers from persistent XSS.Revive Adserver All versions before
- CVE-2016-9127Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF).Revive Adserver All versions before
- CVE-2016-9128Revive Adserver before 3.2.3 suffers from reflected XSS.Revive Adserver All versions before
- CVE-2016-9129Revive Adserver before 3.2.3 suffers from Information Exposure Through Discrepancy.Revive Adserver All versions before
- CVE-2016-9130Revive Adserver before 3.2.3 suffers from Persistent XSS.Revive Adserver All versions before
- CVE-2016-9454Revive Adserver before 3.2.3 suffers from Persistent XSS.Revive Adserver All versions before
- CVE-2016-9455Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF).Revive Adserver All versions before
- CVE-2016-9456Revive Adserver before 3.2.3 suffers from Cross-Site Request Forgery (CSRF).Revive Adserver All versions before
- CVE-2016-9457Revive Adserver before 3.2.3 suffers from Reflected XSS.Revive Adserver All versions before
- CVE-2016-9459Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a log pollution vulnerability potentially leading to a localNextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9460Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are vulnerable to a content-spoofing attack in the files app.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9461Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying edit check permissions on WebDAV copy actions.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9462Nextcloud Server before 9.0.52 & ownCloud Server before 9.0.4 are not properly verifying restore privileges when restoring a file.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9463Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer from SMB User Authentication Bypass.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9464Nextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on removing shares.Nextcloud Server Nextcloud Server before 9.0.54 and
- CVE-2016-9465Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Stored XSS in CardDAV image export.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9466Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9467Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the files app.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9468Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the dav app.Nextcloud Server & ownCloud Server Nextcloud Server before…
- CVE-2016-9469Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and MergeRequesGitLab Community Edition & GitLab Enterprise Edition 8.13.0…
- CVE-2016-9470Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download.Revive Adserver All versions before 3.2.5 and
- CVE-2016-9471Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection.Revive Adserver All versions before 3.2.5 and
- CVE-2016-9472Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS.Revive Adserver All versions before 3.2.5 and
- CVE-2016-9473Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trBrave Software Brave Browser iOS before 1.2.18 and Brave Br…
- CVE-2017-0881An error in the implementation of an autosubscribe feature in the check_stream_exists route of the Zulip group chat application server beforZulip Server Versions 1.4.2 and below
- CVE-2017-0882Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request.GitLab Community Edition and GitLab Enterprise Edition 8.7.…
- CVE-2017-6964dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the (1) setuid or (2) setgid fu