CVEs published March 30, 2017
45 CVEs were published on March 30, 2017: 0 critical, 0 high.
- Published
- 45
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 45
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Fortinet FortiOS
- 2
- NetIQ Sentinel Server
- 2
Medium, low and unrated 45
- CVE-2017-7346The vmw_gb_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.7 does not validate cer
- CVE-2017-7253Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1.
- CVE-2017-5184A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account enumeration).NetIQ Sentinel Server
- CVE-2017-5185A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote denial of service.NetIQ Sentinel Server
- CVE-2017-6182In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remo
- CVE-2017-6183In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory
- CVE-2017-6184In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remo
- CVE-2017-6412In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.
- CVE-2014-9804vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "too many object."
- CVE-2014-9805ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted pnm file.
- CVE-2014-9806ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file.
- CVE-2014-9807The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors.
- CVE-2014-9808ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted dpc image.
- CVE-2014-9809ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted xwd image.
- CVE-2014-9810The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a ma
- CVE-2014-9811The xwd file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a ma
- CVE-2014-9812ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file.
- CVE-2014-9813ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file.
- CVE-2014-9814ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted wpg file.
- CVE-2014-9815ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file.
- CVE-2014-9816ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file.
- CVE-2014-9817Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file.
- CVE-2014-9818ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.
- CVE-2014-9819Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerabil
- CVE-2014-9820Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file.
- CVE-2014-9821Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.
- CVE-2014-9822Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file.
- CVE-2014-9823Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerabil
- CVE-2014-9824Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerabili
- CVE-2014-9825Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerabili
- CVE-2014-9826ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.
- CVE-2016-7541Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updatesFortinet FortiOS
- CVE-2016-7542A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write adFortinet FortiOS
- CVE-2016-10305Trango Apex <= 2.1.1, ApexLynx < 2.0, ApexOrion < 2.0, ApexPlus <= 3.2.0, Giga <= 2.6.1, GigaLynx < 2.0, GigaOrion < 2.0, GigaPlus <= 3.2.3,
- CVE-2016-10306Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234.
- CVE-2016-10307Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in, hidden root account, with a def
- CVE-2016-10308Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the sam
- CVE-2016-10309In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by adding an ALBATROSS cookie with t
- CVE-2017-7290SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitra
- CVE-2017-7318Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability.
- CVE-2017-7320setup/controllers/language.php in MODX Revolution 2.5.4-pl and earlier does not properly constrain the language parameter, which allows remo
- CVE-2017-7321setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the config_k
- CVE-2017-7322The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier do not verify X.509 certificates from SSL serve
- CVE-2017-7323The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier use http://rest.modx.com by default, which allo
- CVE-2017-7324setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the core_path