CVEs published in January 2016
725 vulnerabilities, 69 critical, 4 exploited.
- google chrome, harfbuzz project harfbuzz +1 moreMultiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48...7.6 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreMultiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome...9.8 Critical
- mariadb, oracle mysql, canonical ubuntu linux +3 more +5 moreThe ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x...5.9 Medium
- enlightenment imlib2, debian linux +1 moreimlib2 before 1.4.7 allows remote attackers to cause a denial of service (segmentation fault) via...7.5 High
- enlightenment imlib2, debian linux +1 moreimlib2 before 1.4.7 allows remote attackers to cause a denial of service (divide-by-zero error...7.5 High
- enlightenment imlib2, debian linux +1 moreimlib2 before 1.4.7 allows remote attackers to cause a denial of service (segmentation fault) via...7.5 High
- ibm websphere application serverCross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 7.0 before 7.0.0.41,...5.4 Medium
- cisco identity services engine softwareCisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass...6.5 Medium
foomatic-filtersDebianfoomatic-filters - security updateNo score- privoxyThe client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a...7.5 High
- privoxyThe remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote...7.5 High
- xen, citrix xenserver +1 moreThe paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using...6.3 Medium
- xenThe PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x...8.5 High
- wolfssl, mariadb, opensuse leap +1 more +3 morewolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the...5.9 Medium
- wolfsslwolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service ...7.5 High
- oracle outside in technologyUnspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion...10.0 High
- oracle outside in technologyUnspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion...10.0 High
- oracle outside in technologyUnspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion...10.0 High
- harman amx firmwareThe setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2016-01-20 has a...9.8 Critical
- buffalotech bhr-4grv2 firmware, wex-300 firmware, whr-1166dhp firmware +5 more +7 moreCross-site scripting (XSS) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and...6.1 Medium
- buffalotech bhr-4grv2 firmware, wex-300 firmware, whr-1166dhp firmware +5 more +7 moreCross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04...8.8 High
- harman amx firmwareThe setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a...9.8 Critical
- hospira communication engine, lifecare pca infusion system +1 moreStack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA...7.3 High
- cisco unified computing system, firepower extensible operating system +1 moreAn unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified...9.8 Critical
- cisco modular encoding platform d9036 softwareCisco Modular Encoding Platform D9036 Software before 02.04.70 has hardcoded (1) root and (2)...9.8 Critical
- gnu cpio, debian linux +1 moreThe cpio_safer_name_suffix function in util.c in cpio 2.11 allows remote attackers to cause a...6.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite...5.5 Medium
- google chromeMultiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attackers to...8.8 High
- google chromeBlink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper...6.5 Medium
- google chromeThe CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the...4.3 Medium
- google chromeThe UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics...4.3 Medium
- google chromeThe LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0...7.6 High
- canonical ubuntu linuxThe crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS,...7.8 High
- dhcpcd project dhcpcddhcpcd before 6.10.0 allows remote attackers to cause a denial of service (invalid read and crash...7.5 High
- dhcpcd project dhcpcd, google android +1 moredhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1...9.8 Critical
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality...1.4 Low
- oracle business intelligence publisherUnspecified vulnerability in the Oracle BI Publisher component in Oracle Fusion Middleware 11.1.1...4.0 Medium
- oracle mysql, opensuse leap, opensuse +1 more +3 moreUnspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to...2.1 Low
- oracle vm virtualboxUnspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...6.2 Medium
- oracle mysqlUnspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect...3.5 Low
- oracle mysqlUnspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect...3.5 Low
- oracle mysql, opensuse leap, opensuse +2 moreUnspecified vulnerability in Oracle MySQL 5.6.21 and earlier allows remote authenticated users to...4.3 Medium
- oracle vm virtualbox, debian linux +1 moreUnspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization...2.1 Low
- oracle peoplesoft supply chain management purchasingUnspecified vulnerability in the PeopleSoft Enterprise SCM Purchasing component in Oracle...5.5 Medium
- oracle peoplesoft supply chain management order managementUnspecified vulnerability in the PeopleSoft Enterprise SCM Order Management component in Oracle...4.3 Medium
- oracle application object libraryUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...6.4 Medium
- oracle general ledgerUnspecified vulnerability in the Oracle General Ledger component in Oracle E-Business Suite 11.5...4.3 Medium
- oracle peoplesoft enterprise peopletoolsUnspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft...4.0 Medium
- oracle application object libraryUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...4.3 Medium
- oracle application object libraryUnspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business...5.0 Medium
- Show moreLoading…