CVEs published April 1, 2017
9 CVEs were published on April 1, 2017: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- dweeves/magmi
- 1
- movingbytes/social-network
- 1
Medium, low and unrated 9
- CVE-2017-7388A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'.
- CVE-2017-7389Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release_3.5.4'.
- CVE-2017-7390A Cross-Site Scripting (XSS) was discovered in 'SocialNetwork v1.2.1'.movingbytes/social-network
- CVE-2017-7391A Cross-Site Scripting (XSS) was discovered in 'Magmi 0.7.22'.dweeves/magmi
- CVE-2017-7392In TigerVNC 1.7.1 (SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt), an unauthenticated client can cause a small memory leak in t
- CVE-2017-7393In TigerVNC 1.7.1 (VNCSConnectionST.cxx VNCSConnectionST::fence), an authenticated client can cause a double free, leading to denial of serv
- CVE-2017-7394In TigerVNC 1.7.1 (SSecurityPlain.cxx SSecurityPlain::processMsg), unauthenticated users can crash the server by sending long usernames.
- CVE-2017-7395In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the serv
- CVE-2017-7396In TigerVNC 1.7.1 (CConnection.cxx CConnection::CConnection), an unauthenticated client can cause a small memory leak in the server.