CVEs published in January 2016
725 vulnerabilities, 69 critical, 4 exploited.
- wordpressMultiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in...6.1 Medium
- inspircd, debian linux +1 moreThe DNS::GetResult function in dns.cpp in InspIRCd before 2.0.19 allows remote DNS servers to...8.6 High
- mcafee application control, microsoft windows +1 moreThe swin.sys kernel driver in McAfee Application Control (MAC) 6.1.0 before build 706, 6.1.1...6.6 Medium
- joomla joomla\!SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL...7.3 High
- huawei te30, te40, te50 +2 more +4 moreHuawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before...6.8 Medium
- huawei te60 firmwareThe presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and...5.3 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +6 more +8 moreBIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the...9.8 Critical
- malaterre grassroots dicomThe JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in...8.2 High
- malaterre grassroots dicomInteger overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat...10.0 Critical
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +5 more +7 moreBIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the...3.7 Low
- f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +17 more +19 moredcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0...7.4 High
- nghttp2, apple iphone os, mac os x +2 more +4 moreThe idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via...10.0 Critical
- s9y serendipityCross-site scripting (XSS) vulnerability in Serendipity before 2.0.3 allows remote attackers to...5.4 Medium
- shellinabox project shellinabox, fedoraproject fedora +1 moreThe HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier...7.4 High
- huawei mate 7 firmware, p8 firmware +1 moreThe HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00...5.5 Medium
- huawei p8 firmwareBuffer overflow in the HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA...7.8 High
- f5 big-ip access policy managerF5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF4 allow...9.8 Critical
- huawei mate 7 firmware, p8 firmware +1 moreHeap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00...7.8 High
- avm fritz\! osCross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before...6.1 Medium
- swim team project teamAbsolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44...5.3 Medium
- rename project renameAbsolute path traversal vulnerability in mysqldump_download.php in the WordPress Rename plugin 1...5.3 Medium
- opencartCross-site scripting (XSS) vulnerability in OpenCart before 2.1.0.2 allows remote attackers to...6.1 Medium
openvpnMageiaUpdated openvpn packages fix security vulnerabilityNo scoremariadbMageiaUpdated mariadb packages fix security vulnerabilityNo score- python rsa, fedoraproject fedora, opensuse leap +1 more +3 morePython RSA allows attackers to spoof signatures5.3 Medium
- ruby-lang ruby, apple mac os x +1 moreThe Fiddle::Handle implementation in ext/fiddle/handle.c in Ruby before 2.0.0-p648, 2.1 before 2...8.4 High
- qemu, oracle linux, redhat openstack +2 moreThe (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when...8.1 High
- claws-mail, opensuse leap, opensuse +2 moreMultiple stack-based buffer overflows in the (1) conv_jistoeuc, (2) conv_euctojis, and (3)...7.3 High
- isc dhcp, canonical ubuntu linux, debian linux +1 more +3 moreISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to...6.5 Medium
- openstack novaOpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using...3.5 Low
- huawei vcn500Huawei VCN500 with software before V100R002C00SPC201 logs passwords in cleartext, which allows...6.5 Medium
- huawei vcn500The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200...7.1 High
- huawei vcn500The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200...7.4 High
- huawei espace 7910, espace 7950 +1 moreHuawei eSpace 7910 and 7950 IP phones with software before V200R002C00SPC800 allow remote...7.5 High
- huawei espace 8950Memory leak in Huawei eSpace 8950 IP phones with software before V200R003C00SPC300 allows remote...7.5 High
- ssp-europe secure data spaceMultiple cross-site scripting (XSS) vulnerabilities in Secure Data Space SDS-API before 3.5.7...6.1 Medium
- zarafa collaboration platform, fedoraproject fedora +1 morezarafa-autorespond in Zarafa Collaboration Platform (ZCP) before 7.2.1 allows local users to gain...8.4 High
- ibm integration bus, websphere message broker +1 moreIBM WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.6 and IBM Integration Bus 9...5.3 Medium
- apple mac os xUntrusted search path vulnerability in Apple OS X before 10.11.1 allows local users to bypass...6.7 Medium
- apple mac os xDirectory Utility in Apple OS X before 10.11.1 mishandles authentication for new sessions, which...7.8 High
- qemu, debian linux, redhat openstack +1 more +3 moreUse-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support...8.8 High
- perl pathtools, canonical ubuntu linux, debian linux +2 moreThe canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does...7.3 High
- ibm jazz reporting serviceLifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM...3.1 Low
- ibm jazz reporting serviceCross-site request forgery (CSRF) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz...8.8 High
- ibm websphere commerceMultiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0...7.4 High
- apple tvos, iphone os, mac os x +2 morelibxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers...4.3 Medium
- apple tvos, iphone os, mac os x +2 morelibxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers...4.3 Medium
- prosody, debian linux, fedoraproject fedora +2 moreThe mod_dialback module in Prosody before 0.9.9 does not properly generate random values for the...7.5 High
- prosody, debian linux, fedoraproject fedora +2 moreDirectory traversal vulnerability in the HTTP file-serving module (mod_http_files) in Prosody 0.9...5.9 Medium
rtmpdumpMageiaUpdated rtmpdump packages fix security vulnerabilitiesNo score- Show moreLoading…