CVEs published in January 2016
725 vulnerabilities, 69 critical, 4 exploited.
- cisco 300 series managed switch firmwareThe web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote...5.3 Medium
- cisco wide area application servicescifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and...7.5 High
- cisco rv series router firmware, sun opensolaris +1 moreSQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows...9.8 Critical
- uclouvain openjpegThe opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of...6.5 Medium
- uclouvain openjpegHeap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows...6.5 Medium
- golang go, opensuse leap +1 moreThe Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry...7.5 High
rubygem-mail-2_4SUSESecurity update for rubygem-mail-2_4No score- haxx curlcURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working...5.3 Medium
- lexmark printer firmwareRace condition in the initialization process on Lexmark printers with firmware ATL before ATL.02...9.8 Critical
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote...6.1 Medium
- ibm spectrum scaleIBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol...5.9 Medium
- ibm maximo asset management, smartcloud control desk, change and configuration management database +10 more +12 moreIBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before...4.1 Medium
- ibm rational software architect, rational software architect for websphere software, rational software architect realtime +1 more +3 moreCross-site scripting (XSS) vulnerability in InfoSphere Data Architect (IDA), as distributed in...6.1 Medium
- haxx curl, canonical ubuntu linux, debian linux +2 moreThe ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM...7.3 High
- greenbone os, security assistant, fedoraproject fedora +2 moreCross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant ...6.1 Medium
- tuxfamily chronychrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when...8.1 High
- lenovo shareitThe Wifi hotspot in Lenovo SHAREit before 3.5.48_ww for Android, when configured to receive files...6.1 Medium
- lenovo shareitThe Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files,...8.8 High
- lenovo shareitThe Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain...4.1 Medium
- lenovo shareitLenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files...8.0 High
- microsys promoticHeap-based buffer overflow in MICROSYS PROMOTIC before 8.3.11 allows remote authenticated users...5.0 Medium
- cakephpCakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter8.8 High
- cisco unified contact center expressMultiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Contact Center Express 10.0...6.1 Medium
- cisco application policy infrastructure controller enterprise moduleCross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller...6.1 Medium
- linux kernel, canonical ubuntu linux +1 moreRace condition in arch/x86/mm/tlb.c in the Linux kernel before 4.4.1 allows local users to gain...7.4 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox 43.x mishandles attempts to connect to the Application Reputation service, which...4.7 Medium
- mozilla firefox, opensuse leap, opensuse +2 moreThe MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox...9.8 Critical
- mozilla firefox, opensuse leap, opensuse +2 moreThe nsZipArchive function in Mozilla Firefox before 44.0 might allow remote attackers to cause a...8.8 High
- mozilla firefox, opensuse leap, opensuse +2 moreThe Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozilla Firefox before 44.0,...9.8 Critical
- mozilla firefox, opensuse leap, opensuse +2 moreMozilla Firefox before 44.0 allows user-assisted remote attackers to spoof a trailing substring...7.4 High
- mozilla firefox, opensuse leap, opensuse +2 moreMozilla Firefox before 44.0 stores cookies with names containing vertical tab characters, which...5.3 Medium
- mozilla firefox, nss, opensuse leap +1 more +3 moreThe s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3...6.5 Medium
- mozilla firefox, opensuse leap, opensuse +2 moreThe protocol-handler dialog in Mozilla Firefox before 44.0 allows remote attackers to conduct...6.1 Medium
- mozilla firefox, opensuse leap, opensuse +1 more +3 moreBuffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x...8.8 High
- mozilla firefox, opensuse leap, opensuse +2 moreInteger overflow in the image-deinterlacing functionality in Mozilla Firefox before 44.0 allows...6.5 Medium
- mozilla firefox, opensuse leap, opensuse +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 allow...10.0 Critical
- mozilla firefox, opensuse leap, opensuse +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 44.0 and...9.8 Critical
- f5 nginx, apple xcode, canonical ubuntu linux +2 more +4 moreThe resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME...5.3 Medium
- f5 nginx, apple xcode, canonical ubuntu linux +2 more +4 moreUse-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9...9.8 Critical
- f5 nginx, apple xcode, canonical ubuntu linux +3 more +5 moreThe resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a...7.5 High
- radicaleRadicale regex metacharacters injection in the user name5.3 Medium
- radicaleRadicale vulnerable to arbitrary file read or write10.0 Critical
- ntp, debian linux, netapp clustered data ontap +3 more +5 moreNTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys...7.7 High
jakarta-commons-collectionsSUSESecurity update for jakarta-commons-collectionsNo score- google chromeMultiple integer overflows in the (1) sycc422_to_rgb and (2) sycc444_to_rgb functions in fxcodec...7.6 High
- google chromeThe CustomButton::AcceleratorPressed function in ui/views/controls/button/custom_button.cc in...4.3 Medium
- google chromeThe Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof...6.5 Medium
- google chromeMultiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in...7.6 High
apache-commons-collectionsSUSESecurity update for apache-commons-collectionsNo score- opensuseHeap-based buffer overflow in the gdk_pixbuf_flip function in gdk-pixbuf-scale.c in gdk-pixbuf 2...7.8 High
- Show moreLoading…