# CVEs published 2017-03-30

45 CVEs were published on March 30, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-7346](https://cve.now/CVE-2017-7346.md): The vmw\_gb\_surface\_define\_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx\_surface.c in the Linux kernel through 4.10.7 does not validate cer (no CVSS)
- [CVE-2017-7253](https://cve.now/CVE-2017-7253.md): Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. (no CVSS)
- [CVE-2017-5184](https://cve.now/CVE-2017-5184.md): A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account enumeration). (no CVSS, NetIQ Sentinel Server)
- [CVE-2017-5185](https://cve.now/CVE-2017-5185.md): A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote denial of service. (no CVSS, NetIQ Sentinel Server)
- [CVE-2017-6182](https://cve.now/CVE-2017-6182.md): In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remo (no CVSS)
- [CVE-2017-6183](https://cve.now/CVE-2017-6183.md): In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory (no CVSS)
- [CVE-2017-6184](https://cve.now/CVE-2017-6184.md): In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remo (no CVSS)
- [CVE-2017-6412](https://cve.now/CVE-2017-6412.md): In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310. (no CVSS)
- [CVE-2014-9804](https://cve.now/CVE-2014-9804.md): vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "too many object." (no CVSS)
- [CVE-2014-9805](https://cve.now/CVE-2014-9805.md): ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted pnm file. (no CVSS)
- [CVE-2014-9806](https://cve.now/CVE-2014-9806.md): ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file. (no CVSS)
- [CVE-2014-9807](https://cve.now/CVE-2014-9807.md): The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors. (no CVSS)
- [CVE-2014-9808](https://cve.now/CVE-2014-9808.md): ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted dpc image. (no CVSS)
- [CVE-2014-9809](https://cve.now/CVE-2014-9809.md): ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted xwd image. (no CVSS)
- [CVE-2014-9810](https://cve.now/CVE-2014-9810.md): The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a ma (no CVSS)
- [CVE-2014-9811](https://cve.now/CVE-2014-9811.md): The xwd file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a ma (no CVSS)
- [CVE-2014-9812](https://cve.now/CVE-2014-9812.md): ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file. (no CVSS)
- [CVE-2014-9813](https://cve.now/CVE-2014-9813.md): ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file. (no CVSS)
- [CVE-2014-9814](https://cve.now/CVE-2014-9814.md): ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted wpg file. (no CVSS)
- [CVE-2014-9815](https://cve.now/CVE-2014-9815.md): ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file. (no CVSS)
- [CVE-2014-9816](https://cve.now/CVE-2014-9816.md): ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file. (no CVSS)
- [CVE-2014-9817](https://cve.now/CVE-2014-9817.md): Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file. (no CVSS)
- [CVE-2014-9818](https://cve.now/CVE-2014-9818.md): ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file. (no CVSS)
- [CVE-2014-9819](https://cve.now/CVE-2014-9819.md): Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerabil (no CVSS)
- [CVE-2014-9820](https://cve.now/CVE-2014-9820.md): Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file. (no CVSS)
- [CVE-2014-9821](https://cve.now/CVE-2014-9821.md): Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file. (no CVSS)
- [CVE-2014-9822](https://cve.now/CVE-2014-9822.md): Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file. (no CVSS)
- [CVE-2014-9823](https://cve.now/CVE-2014-9823.md): Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerabil (no CVSS)
- [CVE-2014-9824](https://cve.now/CVE-2014-9824.md): Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerabili (no CVSS)
- [CVE-2014-9825](https://cve.now/CVE-2014-9825.md): Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerabili (no CVSS)
- [CVE-2014-9826](https://cve.now/CVE-2014-9826.md): ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files. (no CVSS)
- [CVE-2016-7541](https://cve.now/CVE-2016-7541.md): Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during IPS signature updates (no CVSS, Fortinet FortiOS)
- [CVE-2016-7542](https://cve.now/CVE-2016-7542.md): A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have access to read-write ad (no CVSS, Fortinet FortiOS)
- [CVE-2016-10305](https://cve.now/CVE-2016-10305.md): Trango Apex \<= 2.1.1, ApexLynx \< 2.0, ApexOrion \< 2.0, ApexPlus \<= 3.2.0, Giga \<= 2.6.1, GigaLynx \< 2.0, GigaOrion \< 2.0, GigaPlus \<= 3.2.3, (no CVSS)
- [CVE-2016-10306](https://cve.now/CVE-2016-10306.md): Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234. (no CVSS)
- [CVE-2016-10307](https://cve.now/CVE-2016-10307.md): Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in, hidden root account, with a def (no CVSS)
- [CVE-2016-10308](https://cve.now/CVE-2016-10308.md): Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the sam (no CVSS)
- [CVE-2016-10309](https://cve.now/CVE-2016-10309.md): In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by adding an ALBATROSS cookie with t (no CVSS)
- [CVE-2017-7290](https://cve.now/CVE-2017-7290.md): SQL injection vulnerability in XOOPS 2.5.7.2 and other versions before 2.5.8.1 allows remote authenticated administrators to execute arbitra (no CVSS)
- [CVE-2017-7318](https://cve.now/CVE-2017-7318.md): Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. (no CVSS)
- [CVE-2017-7320](https://cve.now/CVE-2017-7320.md): setup/controllers/language.php in MODX Revolution 2.5.4-pl and earlier does not properly constrain the language parameter, which allows remo (no CVSS)
- [CVE-2017-7321](https://cve.now/CVE-2017-7321.md): setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the config\_k (no CVSS)
- [CVE-2017-7322](https://cve.now/CVE-2017-7322.md): The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier do not verify X.509 certificates from SSL serve (no CVSS)
- [CVE-2017-7323](https://cve.now/CVE-2017-7323.md): The (1) update and (2) package-installation features in MODX Revolution 2.5.4-pl and earlier use http://rest.modx.com by default, which allo (no CVSS)
- [CVE-2017-7324](https://cve.now/CVE-2017-7324.md): setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the core\_path (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-03-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.