CVEs published April 5, 2017
34 CVEs were published on April 5, 2017: 0 critical, 0 high.
- Published
- 34
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 34
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Nvidia Android
- 7
- Nextcloud Server
- 6
- IBM Cognos Analytics
- 2
- IBM Atlas Policy Suite
- 1
- IBM TRIRIGA Application Platform
- 1
- Symantec Blue Coat ASG · Symantec Blue Coat CAS
- 1
Medium, low and unrated 34
- CVE-2017-7448The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers to cause a denial of
- CVE-2017-7450AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface.
- CVE-2017-7446HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.
- CVE-2017-7447HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.
- CVE-2015-9019In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage
- CVE-2017-0883Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue.Nextcloud Server
- CVE-2017-0884Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue.Nextcloud Server
- CVE-2017-0885Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share.Nextcloud Server
- CVE-2017-0886Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack.Nextcloud Server
- CVE-2017-0887Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation.Nextcloud Server
- CVE-2017-0888Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app.Nextcloud Server
- CVE-2017-7443apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of block
- CVE-2017-7444In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to t
- CVE-2016-3015IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting.IBM Cognos Analytics
- CVE-2016-3031IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting.IBM Cognos Analytics
- CVE-2016-6100IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite IBM Atlas Policy Suite
- CVE-2017-1180The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have accessIBM TRIRIGA Application Platform
- CVE-2014-9829coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted sun file.
- CVE-2015-4680FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.
- CVE-2017-6338Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, re
- CVE-2017-6339Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 mismanages certain key and certificate data.
- CVE-2017-6340Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 does not sanitize a rest/commonlog/report/template name fiel
- CVE-2016-9091Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS comSymantec Blue Coat ASG · Symantec Blue Coat CAS
- CVE-2017-0325An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execute arbitrary code wiNvidia Android
- CVE-2017-0327An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code witNvidia Android
- CVE-2017-0328An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of itsNvidia Android
- CVE-2017-0329An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application Nvidia Android
- CVE-2017-0330An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of itsNvidia Android
- CVE-2017-0332An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code witNvidia Android
- CVE-2017-0339An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code witNvidia Android
- CVE-2017-6956On the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack buffer overflow occurs when handling an 802.11r (FT) authentication response, l
- CVE-2017-6975Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point.
- CVE-2017-2671The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cann
- CVE-2017-7358In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path loc