CVEs published in January 2016
725 vulnerabilities, 69 critical, 4 exploited.
- wiresharkepan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x...5.5 Medium
- wiresharkBuffer overflow in the tvb_uncompress function in epan/tvbuff_zlib.c in Wireshark 1.12.x before 1...5.5 Medium
- wiresharkThe dissect_ber_GeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in...5.5 Medium
- wiresharkThe dissect_dns_answer function in epan/dissectors/packet-dns.c in the DNS dissector in Wireshark...5.5 Medium
- wiresharkDouble free vulnerability in epan/dissectors/packet-nlm.c in the NLM dissector in Wireshark 1.12...5.5 Medium
- wiresharkThe dissect_sdp function in epan/dissectors/packet-sdp.c in the SDP dissector in Wireshark 1.12.x...5.5 Medium
- wiresharkThe init_t38_info_conv function in epan/dissectors/packet-t38.c in the T.38 dissector in...5.5 Medium
- wiresharkepan/dissectors/packet-alljoyn.c in the AllJoyn dissector in Wireshark 1.12.x before 1.12.9 does...5.5 Medium
- wiresharkThe dissect_dcom_OBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in...5.5 Medium
- wiresharkepan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.9 does...5.5 Medium
- wiresharkThe dissect_hsdsch_channel_info function in epan/dissectors/packet-umts_fp.c in the UMTS FP...5.5 Medium
- wiresharkepan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x...5.5 Medium
- wiresharkepan/dissectors/packet-dec-dnart.c in the DECnet NSP/RT dissector in Wireshark 1.10.12 through 1...5.5 Medium
libvncserverDebianlibvncserver - security updateNo scorecactiDebiancacti - regression updateNo score- qemu, debian linux +1 moreQEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is...5.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is...5.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB...7.1 High
- mozilla bugzillaTemplate.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x...3.5 Low
- mozilla bugzillaCross-site scripting (XSS) vulnerability in showdependencygraph.cgi in Bugzilla 2.x, 3.x, and 4.x...4.7 Medium
- ibm maximo asset management, smartcloud control desk, maximo asset management essentials +6 more +8 moreIBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.2 IF1 and Maximo Asset...4.3 Medium
- ibm connectionsIBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 does...7.5 High
- ibm connectionsCross-site request forgery (CSRF) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0...5.4 Medium
- ibm connectionsCross-site scripting (XSS) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before...5.4 Medium
- ibm connectionsCross-site scripting (XSS) vulnerability in IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before...5.4 Medium
- ibm curam social program managementSQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote...5.4 Medium
- ibm maximo asset management, smartcloud control desk, change and configuration management database +10 more +12 moreIBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before...5.4 Medium
- ibm tivoli monitoringThe portal in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 before...8.5 High
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +5 more +7 moreJazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x...3.5 Low
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +5 more +7 moreRational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative...3.3 Low
- ibm qradar security information and event managerDirectory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.5 Patch 6 allows...5.0 Medium
- ibm mq appliance m2000The queue manager on IBM MQ M2000 appliances before 8.0.0.4 allows local users to bypass an...5.6 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +5 more +7 moreUnspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative...4.3 Medium
- nodejs node.jsNode.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the...7.5 High
- ibm maximo asset management, smartcloud control desk, maximo asset management essentials +6 more +8 moreIBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 before 7.6.0.3 FP3 and Maximo Asset...4.3 Medium
- ibm sterling b2b integrator, sterling integrator, tivoli common reporting +5 more +7 moreSerialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT...9.8 Critical
- ibm sterling b2b integratorIBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive cleartext web-services...4.7 Medium
- ibm sterling b2b integratorQueue Watcher in IBM Sterling B2B Integrator 5.2 allows local users to obtain sensitive...5.5 Medium
- ibm tivoli common reportingIBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0...2.5 Low
- ibm tivoli common reportingIBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0...2.5 Low
- ibm sterling b2b integratorCross-site scripting (XSS) vulnerability in Queue Watcher in IBM Sterling B2B Integrator 5.2...6.1 Medium
- apache hadoopThe Hadoop connector 1.1.1, 2.4, 2.5, and 2.7.0-0 before 2.7.0-3 for IBM Spectrum Scale and...8.4 High
- ibm spectrum protect for virtual environments, spectrum protect snapshot +1 moreThe Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual...10.0 Critical
- ibm i accessBuffer overflow in IBM i Access 7.1 on Windows allows local users to cause a denial of service ...5.5 Medium
- ibm i accessAFP Workbench Viewer in IBM i Access 7.1 on Windows allows remote attackers to cause a denial of...4.0 Medium
- ibm mashups centerCross-site request forgery (CSRF) vulnerability in Lotus Mashups in IBM Mashup Center 3.0.0.1...8.8 High
- ibm general parallel file system, spectrum scale +1 moreIBM Spectrum Scale 4.1.1.x before 4.1.1.3 and General Parallel File System (GPFS) 3.5.x before 3...4.0 Medium
- ibm mashups centerThe Lotus Mashups component in IBM Mashup Center 3.0.0.1 allows remote authenticated users to...7.7 High
- ibm maximo asset management, smartcloud control desk, maximo asset management essentials +6 more +8 moreThe Scheduler in IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.1 FP1...5.4 Medium
- ibm i accessBuffer overflow in IBM i Access 7.1 on Windows allows local users to gain privileges via...8.8 High
- Show moreLoading…