CVEs published March 29, 2017
32 CVEs were published on March 29, 2017: 0 critical, 0 high.
- Published
- 32
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 32
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- RUGGEDCOM ROX I All versions
- 5
- EMC Isilon OneFS EMC Isilon OneFS 8.0.0 8.0.0.1, EMC Isilon…
- 1
- github.com/rancher/rancher
- 1
- glance
- 1
- moodle/moodle
- 1
- org.apache.ambari:ambari
- 1
- RSA Archer Security Operations Management with RSA Unified…
- 1
Medium, low and unrated 32
- CVE-2017-4977EMC RSA Archer Security Operations Management with RSA Unified Collector Framework versions prior to 1.3.1.52 contain a sensitive informatioRSA Archer Security Operations Management with RSA Unified…
- CVE-2017-4980EMC Isilon OneFS is affected by a path traversal vulnerability that may potentially be exploited by attackers to compromise the affected sysEMC Isilon OneFS EMC Isilon OneFS 8.0.0 8.0.0.1, EMC Isilon…
- CVE-2017-7310A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 1
- CVE-2014-3582In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certif
- CVE-2016-2379The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by levera
- CVE-2016-4976Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitiveorg.apache.ambari:ambari
- CVE-2016-6349The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by ru
- CVE-2017-7258HTTP Exploit in eMLi Portal in AuroMeera Technometrix Pvt.
- CVE-2017-7308The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data
- CVE-2017-7299The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code
- CVE-2017-7300The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aou
- CVE-2017-7301The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aou
- CVE-2017-7302The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h
- CVE-2017-7303The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) bec
- CVE-2017-7304The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) bec
- CVE-2009-5147DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names.
- CVE-2015-4556The string-translate* procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service (c
- CVE-2015-8234The image signature algorithm in OpenStack Glance 11.0.0 allows remote attackers to bypass the signature verification process via a crafted glance
- CVE-2016-6846Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite backend before 7.6.2-rev59, 7.8.0 before 7.8.0-rev38, 7.8.2 before 7.
- CVE-2016-9924Zimbra Collaboration Suite (ZCS) before 8.7.4 allows remote attackers to conduct XML External Entity (XXE) attacks.
- CVE-2017-5671Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have
- CVE-2017-5900Cross-site scripting (XSS) vulnerability in the NetComm NB16WV-02 router with firmware NB16WV_R0.09 allows remote authenticated users to inj
- CVE-2017-7285A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaus
- CVE-2017-7298In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVGmoodle/moodle
- CVE-2017-7294The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.6 does not validate additi
- CVE-2017-2686Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability that could allow an authenticated user to read arbitrary files through the weRUGGEDCOM ROX I All versions
- CVE-2017-2687Siemens RUGGEDCOM ROX I (all versions) contain a vulnerability in the integrated web server at port 10000/TCP which is prone to reflected CrRUGGEDCOM ROX I All versions
- CVE-2017-2688The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow remote attackers to perform actions with tRUGGEDCOM ROX I All versions
- CVE-2017-2689Siemens RUGGEDCOM ROX I (all versions) allow an authenticated user to bypass access restrictions in the web interface at port 10000/TCP to oRUGGEDCOM ROX I All versions
- CVE-2017-6864The integrated web server in Siemens RUGGEDCOM ROX I (all versions) at port 10000/TCP could allow an authenticated user to perform stored CrRUGGEDCOM ROX I All versions
- CVE-2017-5226When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push
- CVE-2017-7297Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call.github.com/rancher/rancher