CVEs published April 7, 2017
87 CVEs were published on April 7, 2017: 0 critical, 0 high.
- Published
- 87
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 87
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Google Android
- 49
- Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Ci…
- 5
- Cisco Firepower Detection Engine
- 2
- Cisco Unified Communications Manager
- 2
- Android Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1
- 1
- Android Kernel-3.10 Kernel-3.18
- 1
- Apple Music before 2.0 for Android
- 1
- Cisco Aironet 1800, 2800, and 3800 Series Access Point Plat…
- 1
- Cisco ASR 903 and ASR 920 Series Devices
- 1
- Cisco Integrated Management Controller
- 1
Medium, low and unrated 87
- CVE-2017-0454An elevation of privilege vulnerability in the Qualcomm audio driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0462An elevation of privilege vulnerability in the Qualcomm Seemp driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0538A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruGoogle Android
- CVE-2017-0539A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corrGoogle Android
- CVE-2017-0540A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corrGoogle Android
- CVE-2017-0541A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file to cause memory corrGoogle Android
- CVE-2017-0542A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruGoogle Android
- CVE-2017-0543A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruGoogle Android
- CVE-2017-0544An elevation of privilege vulnerability in CameraBase could enable a local malicious application to execute arbitrary code.Google Android
- CVE-2017-0545An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteGoogle Android
- CVE-2017-0546An elevation of privilege vulnerability in SurfaceFlinger could enable a local malicious application to execute arbitrary code within the coGoogle Android
- CVE-2017-0547An information disclosure vulnerability in libmedia in Mediaserver could enable a local malicious application to access data outside of its Google Android
- CVE-2017-0548A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or rebooGoogle Android
- CVE-2017-0549A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a deviceGoogle Android
- CVE-2017-0550A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a deviceGoogle Android
- CVE-2017-0551A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a deviceAndroid Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1
- CVE-2017-0552A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a deviceGoogle Android
- CVE-2017-0553An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the context of Google Android
- CVE-2017-0554An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outsideGoogle Android
- CVE-2017-0555An information disclosure vulnerability in libavc in Mediaserver could enable a local malicious application to access data outside of its peGoogle Android
- CVE-2017-0556An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its Google Android
- CVE-2017-0557An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its Google Android
- CVE-2017-0558An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission lGoogle Android
- CVE-2017-0559An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of its permission levelGoogle Android
- CVE-2017-0560An information disclosure vulnerability in the factory reset process could enable a local malicious attacker to access data from the previouGoogle Android
- CVE-2017-0561A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the conGoogle Android
- CVE-2017-0562An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary cGoogle Android
- CVE-2017-0563An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2017-0564An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code witAndroid Kernel-3.10 Kernel-3.18
- CVE-2017-0565An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code Google Android
- CVE-2017-0566An elevation of privilege vulnerability in the MediaTek camera driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2017-0567An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0568An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0569An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0570An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0571An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0572An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0573An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0574An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0575An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0576An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitraryGoogle Android
- CVE-2017-0577An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2017-0578An elevation of privilege vulnerability in the DTS sound driver could enable a local malicious application to execute arbitrary code within Google Android
- CVE-2017-0579An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0580An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary Google Android
- CVE-2017-0581An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary Google Android
- CVE-2017-0582An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicious application to execute arbitrary codeGoogle Android
- CVE-2017-0583An elevation of privilege vulnerability in the Qualcomm CP access driver could enable a local malicious application to execute arbitrary codGoogle Android
- CVE-2017-0584An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2017-0585An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2017-0586An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2017-6019An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830.Schneider Electric Conext ComBox
- CVE-2017-6033A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System (IGSS) Software, Version 12 and previous versiSchneider Electric Interactive Graphical SCADA System Softw…
- CVE-2007-6759Dataprobe iBootBar (with 2007-09-20 and possibly later released firmware) allows remote attackers to bypass authentication, and conduct powe
- CVE-2007-6760Dataprobe iBootBar (with 2007-09-20 and possibly later beta firmware) allows remote attackers to bypass authentication, and conduct power-cy
- CVE-2016-7786Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via direct object reference
- CVE-2017-7584Memory Corruption Vulnerability in Foxit PDF Toolkit before 2.1 allows an attacker to cause Denial of Service & Remote Code Execution when a
- CVE-2017-7585In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow
- CVE-2017-7586In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-ba
- CVE-2016-6805Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier documents.org.apache.ignite:ignite-core
- CVE-2017-7581SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arb
- CVE-2017-7583ILIAS before 5.2.3 has XSS via SVG documents.
- CVE-2016-9195A vulnerability in RADIUS Change of Authorization (CoA) request processing in the Cisco Wireless LAN Controller (WLC) could allow an unautheCisco Wireless LAN Controller
- CVE-2016-9196A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenCisco Aironet 1800, 2800, and 3800 Series Access Point Plat…
- CVE-2016-9197A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authentCisco Mobility Express 2800 and 3800 Series Wireless LAN Co…
- CVE-2017-3817A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could allow an authenticaCisco UCS Director
- CVE-2017-3848A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to Cisco Prime Infrastructure
- CVE-2017-3884A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an autheCisco Prime Infrastructure and Cisco Evolved Programmable N…
- CVE-2017-3885A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an Cisco Firepower Detection Engine
- CVE-2017-3886A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidCisco Unified Communications Manager
- CVE-2017-3887A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an uCisco Firepower Detection Engine
- CVE-2017-3888A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker Cisco Unified Communications Manager
- CVE-2017-3889A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a Cisco Registered Envelope Service
- CVE-2017-6597A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-GeneratiCisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Ci…
- CVE-2017-6598A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-GenCisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Ci…
- CVE-2017-6599A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthenticated, remote attaCisco IOS XR Software
- CVE-2017-6600A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW),Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Ci…
- CVE-2017-6601A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW),Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Ci…
- CVE-2017-6602A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), andCisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Ci…
- CVE-2017-6603A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to caCisco ASR 903 and ASR 920 Series Devices
- CVE-2017-6604A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attackeCisco Integrated Management Controller
- CVE-2017-6606A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted syCisco IOS XE
- CVE-2017-7579inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field.
- CVE-2017-2387The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from SSL servers, which Apple Music before 2.0 for Android
- CVE-2017-7570PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (s
- CVE-2017-7577XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request.
- CVE-2017-7578Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application c