CVEs published in January 2016
725 vulnerabilities, 69 critical, 4 exploited.
- seeds acmailerSeeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to...9.1 Critical
- dena h2oCRLF injection vulnerability in the on_req function in lib/handler/redirect.c in H2O before 1.6.2...3.7 Low
- hp arcsight loggerHPE ArcSight Logger before 6.1P1 allows remote authenticated users to execute arbitrary code via...6.3 Medium
- hp arcsight loggerHPE ArcSight Logger before 6.1P1 allows remote attackers to execute arbitrary code via...7.3 High
- redhen project redhenMultiple cross-site scripting (XSS) vulnerabilities in the Redhen module 7.x-1.x before 7.x-1.11...5.4 Medium
- dolibarrDolibarr ERP and CRM contain XSS Vulnerabilities5.4 Medium
- sap netweaverMultiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver 7.4 allow remote attackers...6.1 Medium
- sap netweaverThe User Management Engine (UME) in SAP NetWeaver 7.4 allows attackers to decrypt unspecified...5.3 Medium
- fortinet fortiosFortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3;...9.8 Critical
- juniper junosJuniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and...5.9 Medium
- juniper junosJuniper Junos OS before 13.2X51-D36, 14.1X53 before 14.1X53-D25, and 15.2 before 15.2R1 on EX4300...5.3 Medium
- juniper junosEmbedthis Appweb, as used in J-Web in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46...5.3 Medium
- juniper junosThe Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before...5.9 Medium
- juniper junosJuniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3...5.3 Medium
- gajimGajim before 0.16.5 allows remote attackers to modify the roster and intercept messages via a...5.4 Medium
- dolibarrMultiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 and earlier allow...6.1 Medium
- huawei s5300 firmwareHuawei S5300 Campus Series switches with software before V200R005SPH008 do not mask the password...6.2 Medium
- advantech webaccessBuffer overflow in the BwpAlarm subsystem in Advantech WebAccess before 8.1 allows remote...7.5 High
- advantech webaccessInteger overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers...9.8 Critical
- advantech webaccessRace condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary...8.1 High
- advantech webaccessMultiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to...9.8 Critical
- advantech webaccessMultiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to...9.8 Critical
- advantech webaccessDirectory traversal vulnerability in Advantech WebAccess before 8.1 allows remote attackers to...7.5 High
- advantech webaccessUnrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction...9.8 Critical
- advantech webaccessAdvantech WebAccess before 8.1 allows remote attackers to obtain sensitive information via...7.5 High
- advantech webaccessAdvantech WebAccess before 8.1 allows remote attackers to bypass an intended administrative...7.5 High
- advantech webaccessAdvantech WebAccess before 8.1 allows remote attackers to cause a denial of service (out-of...7.5 High
- samsung web viewerWeb Viewer 1.0.0.193 on Samsung SRN-1670D devices allows attackers to bypass filesystem...7.5 High
- samsung web viewerWeb Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to discover credentials...7.5 High
- samsung web viewerWeb Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files...8.6 High
- advantech webaccessAdvantech WebAccess before 8.1 allows remote attackers to execute arbitrary code via vectors...8.1 High
- cisco adaptive security appliance softwareThe DCERPC Inspection implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1...4.3 Medium
- cisco aironet access point softwareCisco Aironet 1800 devices with software 7.2, 7.3, 7.4, 8.1(112.3), 8.1(112.4), and 8.1(15.14)...7.3 High
- cisco identity services engine softwareThe Admin portal in Cisco Identity Services Engine (ISE) 1.1.x, 1.2.0 before patch 17, 1.2.1...9.8 Critical
- cisco aironet access point softwareThe IP ingress packet handler on Cisco Aironet 1800 devices with software 8.1(112.3) and 8.1(112...7.5 High
- cisco wireless lan controller softwareCisco Wireless LAN Controller (WLC) devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1...9.8 Critical
- ibm websphere commerceCross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7...8.8 High
- advantech webaccessCross-site scripting (XSS) vulnerability in Advantech WebAccess before 8.1 allows remote...5.4 Medium
- advantech webaccessSQL injection vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users...8.1 High
- advantech webaccessCross-site request forgery (CSRF) vulnerability in Advantech WebAccess before 8.1 allows remote...8.8 High
- advantech webaccessAdvantech WebAccess before 8.1 allows remote attackers to read sensitive cleartext information...5.3 Medium
ruby-mailMageiaUpdated ruby-mail packages fix security vulnerabilityNo score- gnome librsvg, debian linux +1 morelibrsvg DoS via Cyclic References7.5 High
- gnome librsvgThe _rsvg_node_poly_build_path function in rsvg-shapes.c in librsvg before 2.40.7 allows context...7.5 High
dbconfig-commonDebiandbconfig-common - security updateNo score- openbsd openssh, debian linux, redhat enterprise linux desktop +5 more +7 moreThe client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding...9.8 Critical
- libdwarf project libdwarflibdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer...6.5 Medium
- openstack novaOpenStack Nova Potential Xen connection password leak via StorageError5.9 Medium
- giflib project giflib, fedoraproject fedora +1 moreHeap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a...5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreUntrusted search path vulnerability in Adobe Download Manager, as used in Adobe Reader and...7.8 High
- Show moreLoading…