CVEs published March 31, 2017
36 CVEs were published on March 31, 2017: 1 critical, 2 high. 1 is now in CISA KEV.
- Published
- 36
- Critical
- 1
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 33
- Now in CISA KEV
- 1
- Fix available
- 3
Most affected products
- IBM Rational Collaborative Lifecycle Management
- 4
- mantisbt/mantisbt
- 3
- Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244…
- 2
- illumos osnet-incorporation
- 2
- IBM Algo One
- 1
- IBM Cram Social Program Management
- 1
- IBM iNotes
- 1
- IBM Kenexa LMS on Cloud
- 1
- IBM Sterling Order Management
- 1
- IBM TRIRIGA Application Platform
- 1
Critical 1
High 2
Medium, low and unrated 33
- CVE-2017-7386citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php (model parameter).
- CVE-2017-7387TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php (episodeID parameter
- CVE-2016-8032Software Integrity Attacks vulnerability in Intel Security Anti-Virus Engine (AVE) 5200 through 5800 allows local attackers to bypass local Intel Anti-Virus Engine
- CVE-2017-7374Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer d
- CVE-2016-6560illumos osnet-incorporation bcopy() and bzero() implementations make signed instead of unsigned comparisons allowing a system crash.illumos osnet-incorporation
- CVE-2016-6561illumos smbsrv NULL pointer dereference allows system crash.illumos osnet-incorporation
- CVE-2016-6022IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting.IBM Rational Collaborative Lifecycle Management
- CVE-2016-6031IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting.IBM Rational Collaborative Lifecycle Management
- CVE-2016-6036IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting.IBM Rational Collaborative Lifecycle Management
- CVE-2016-6111IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) erroIBM Cram Social Program Management
- CVE-2016-8917IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and uIBM Sterling Order Management
- CVE-2016-8935IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting.IBM Kenexa LMS on Cloud
- CVE-2016-9707IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data.IBM Rational Collaborative Lifecycle Management
- CVE-2016-9990IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting.IBM iNotes
- CVE-2017-1154IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which sIBM Algo One
- CVE-2017-1171The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute ApplicationIBM TRIRIGA Application Platform
- CVE-2008-7313The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands.
- CVE-2014-5008Snoopy allows remote attackers to execute arbitrary commands.
- CVE-2014-5009Snoopy allows remote attackers to execute arbitrary commands.
- CVE-2015-4624Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens.
- CVE-2016-6209Cross-site scripting (XSS) vulnerability in Nagios.
- CVE-2017-3009Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow vuAdobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244…
- CVE-2017-3010Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244…
- CVE-2017-2647The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (NULL pointer derefere
- CVE-2017-6973A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to injemantisbt/mantisbt
- CVE-2017-7241A cross-site scripting (XSS) vulnerability in the MantisBT Move Attachments page (move_attachments_page.php, part of admin tools) allows remmantisbt/mantisbt
- CVE-2017-7309A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to injemantisbt/mantisbt
- CVE-2017-7359Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack.
- CVE-2017-7360Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack.
- CVE-2017-7361Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack.
- CVE-2017-7362Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack.
- CVE-2017-7363Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.
- CVE-2016-9319There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398.