CVEs published April 3, 2017
48 CVEs were published on April 3, 2017: 0 critical, 0 high.
- Published
- 48
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 1
- Unrated
- 46
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Apache Software Foundation Apache Ambari
- 1
- horizon
- 1
- Intel Compute Stick STK2MV64CC
- 1
- Intel NUC NUC6i5SYSH/K, Intel NUC6i3SYSH/K
- 1
- Intel NUC NUC6i7KYK
- 1
Medium, low and unrated 48
- CVE-2017-7410Multiple SQL injection vulnerabilities in account/signup.php and account/signup2.php in WebsiteBaker 2.10.0 and earlier allow remote attacke
- CVE-2017-5684The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical acIntel Compute Stick STK2MV64CC
- CVE-2017-5685The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version KY0045 may allow may allow an attacker with physical aIntel NUC NUC6i7KYK
- CVE-2017-5686The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version SY0059 may allow may allow an attacker with physical aIntel NUC NUC6i5SYSH/K, Intel NUC6i3SYSH/K
- CVE-2016-10317The fill_threshhold_buffer function in base/gxht_thresh.c in Artifex Software, Inc.
- CVE-2017-7397BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd CPU consumption) via a flood of packets with Martian sourc
- CVE-2017-7407The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from p
- CVE-2017-7402Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=f
- CVE-2017-5642During installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with proper ACLs.Apache Software Foundation Apache Ambari
- CVE-2013-7450Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations.
- CVE-2014-1677Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.
- CVE-2014-3927mrlg-lib.php in mrlg4php before 1.0.8 allows remote attackers to execute arbitrary shell code.
- CVE-2014-3928Cougar-LG stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credenti
- CVE-2014-3929The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow
- CVE-2014-3930lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to
- CVE-2017-7400OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via ahorizon
- CVE-2017-7401Incorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c in collectd 5.7.1 and earlier allows remote
- CVE-2016-10209The archive_wstring_append_from_mbs function in archive_string.c in libarchive 3.2.2 allows remote attackers to cause a denial of service (N
- CVE-2016-10210libyara/lexer.l in YARA 3.5.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a cr
- CVE-2016-10211libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted ru
- CVE-2016-10217The pdf14_open function in base/gdevp14.c in Artifex Software, Inc.
- CVE-2016-10218The pdf14_pop_transparency_group function in base/gdevp14.c in the PDF Transparency module in Artifex Software, Inc.
- CVE-2016-10219The intersect function in base/gxfill.c in Artifex Software, Inc.
- CVE-2016-10220The gs_makewordimagedevice function in base/gsdevmem.c in Artifex Software, Inc.
- CVE-2016-10221The count_entries function in pdf-layer.c in Artifex Software, Inc.
- CVE-2016-10222runtime/JSONObject.cpp in JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause
- CVE-2016-10226JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 18, allows remote attackers to cause a denial of service (bitf
- CVE-2016-10312Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev.
- CVE-2016-10313Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev.
- CVE-2016-10314Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev.
- CVE-2016-10315Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev.
- CVE-2016-10316Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev.
- CVE-2017-5923libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) v
- CVE-2017-5924libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted ru
- CVE-2017-5949JavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote attackers to cause a denial of service (heap
- CVE-2017-5950The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack con
- CVE-2017-5951The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc.
- CVE-2017-6181The parse_char_class function in regparse.c in the Onigmo (aka Oniguruma-mod) regular expression library, as used in Ruby 2.4.0, allows remo
- CVE-2017-6194The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service (heap-based buffer overfl
- CVE-2017-6441The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers to cause a denial of service (NULL pointer dereference and
- CVE-2017-6448The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-base
- CVE-2017-7378The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-bas
- CVE-2017-7379The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of se
- CVE-2017-7380The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and applicati
- CVE-2017-7381The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and applicati
- CVE-2017-7382The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and applic
- CVE-2017-7383The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and applic
- CVE-2017-1001000The register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before