CVEs published in January 2016
725 vulnerabilities, 69 critical, 4 exploited.
armagetronMageiaUpdated armagetron package fixes security vulnerabilitiesNo score- pitiviThe _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to...9.8 Critical
- mozilla firefox osThe lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed...4.6 Medium
- mozilla firefox osRace condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically...6.4 Medium
- mozilla firefox osCross-site scripting (XSS) vulnerability in the internationalization feature in the default...6.1 Medium
- unitronics visilogic oplc ideHeap-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.09 allows remote attackers...9.6 Critical
- advantech eki-1321 series firmware, eki-1322 series firmware +1 moreAdvantech EKI-132x devices with firmware before 2015-12-31 allow remote attackers to bypass...9.8 Critical
- apple quicktimeApple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial...6.6 Medium
- apple quicktimeApple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial...6.6 Medium
- apple quicktimeApple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial...6.6 Medium
- apple quicktimeApple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial...6.6 Medium
- apple quicktimeApple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial...6.6 Medium
- apple quicktimeApple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial...6.6 Medium
- apple quicktimeApple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial...6.6 Medium
- apple quicktimeApple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial...6.6 Medium
- apple quicktimeApple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial...6.6 Medium
- vmware esxi, fusion, player +1 more +3 moreThe VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1...6.3 Medium
- field group project groupCross-site scripting (XSS) vulnerability in the Field Group module 7.x-1.x before 7.x-1.5 for...6.1 Medium
- owncloud, owncloud server +1 moreownCloud Server before 8.0.9 and 8.1.x before 8.1.4 allow remote authenticated users to obtain...4.3 Medium
- owncloud, owncloud server +1 moreownCloud Server before 7.0.12, 8.0.x before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2,...3.1 Low
- owncloud, owncloud server +1 moreownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote...8.5 High
- owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in the OCS discovery provider component in ownCloud...6.1 Medium
- getsymphony symphonySymphony CMS XSS Vulnerabilities6.1 Medium
- getsymphony symphonyMultiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.6.3 allow remote attackers...6.1 Medium
- colorscore project colorscorecolorscore Command Injection vulnerability10.0 Critical
- nex-forms lite project liteMultiple cross-site scripting (XSS) vulnerabilities in the NEX-Forms Lite plugin 2.1.0 for...6.1 Medium
- titan framework project frameworkMultiple cross-site scripting (XSS) vulnerabilities in the Titan Framework plugin before 1.6 for...6.1 Medium
- mcafee epolicy orchestratorIntel McAfee ePolicy Orchestrator (ePO) 4.6.9 and earlier, 5.0.x, 5.1.x before 5.1.3 Hotfix...8.3 High
- zip attachments project attachmentsDirectory traversal vulnerability in download.php in the Zip Attachments plugin before 1.5.1 for...8.6 High
- avm fritz\! osAVM FRITZ!OS before 6.30 extracts the contents of firmware updates before verifying their...8.1 High
- values project valuesThe Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, which...9.0 Critical
- typo3TYPO3 allows remote attackers to embed Flash videos from external domain6.1 Medium
- typo3TYPO3 Cross-site Scripting vulnerability5.4 Medium
- typo3Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6...5.4 Medium
- typo3Cross-site scripting (XSS) vulnerability in the Extension Manager in TYPO3 6.2.x before 6.2.16...6.1 Medium
- typo3TYPO3 CMS indexed search Cross-site Scripting vulnerability5.4 Medium
- typo3Typo3 XSS Vulnerability5.4 Medium
- acquia mollomThe Mollom module 6.x-2.7 before 6.x-2.15 for Drupal allows remote attackers to bypass intended...7.5 High
- sap afariaSAP Afaria 7.0.6001.5 allows remote attackers to bypass authorization checks and wipe or lock...9.1 Critical
- xenThe hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of...5.0 Medium
- bluecoat advanced secure gateway, proxysg +1 moreOpen redirect vulnerability in Blue Coat ProxySG 6.5 before 6.5.8.8 and 6.6 and Advanced Secure...7.4 High
- atlassian jira core, jira service desk, jira server +2 moreAtlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer...3.1 Low
- huawei document security managementHuawei Document Security Management (DSM) with software before V100R002C05SPC661 does not clear...4.0 Medium
- huawei ale firmware, gem-703l firmware +1 moreThe Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with...5.5 Medium
- huawei ale firmware, gem-703l firmware +1 moreThe Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with...5.5 Medium
- gummi project gummi, opensuse leap, opensuse +2 moreGummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary...3.3 Low
- juniper screenosJuniper ScreenOS before 6.3.0r21, when ssh-pka is configured and enabled, allows remote attackers...8.1 High
- fortinet forticlientFortinet FortiClient Linux SSLVPN before build 2313, when installed on Linux in a home directory...7.8 High
- puppet enterprisePuppet Server in Puppet Enterprise before 3.8.x before 3.8.3 and 2015.2.x before 2015.2.3 uses...4.7 Medium
- dell pre-boot authentication driverDell Pre-Boot Authentication Driver (PBADRV.sys) 1.0.1.5 allows local users to write to arbitrary...7.8 High
- Show moreLoading…