CVEs published in November 2016
516 vulnerabilities, 55 critical, 9 exploited.
- curlThe base64 encode function in curl before version 7.51.0 is prone to a buffer being under...3.3 Low
- curlA flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case...3.7 Low
- curlA flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file...5.3 Medium
- spipecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to conduct server...7.4 High
- spipThe SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users...8.8 High
- spipDirectory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows...7.5 High
- spipCross-site scripting (XSS) vulnerability in valider_xml.php in SPIP 3.1.2 and earlier allows...6.1 Medium
- spipCross-site request forgery (CSRF) vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and...8.8 High
- libtiffAn exploitable heap-based buffer overflow exists in the handling of TIFF images in LibTIFF's...7.0 High
- libtiffHeap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers...6.5 Medium
- libtiffStack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows...6.5 Medium
- libtiffBuffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6...5.5 Medium
- oxide project oxideA malicious webview could install long-lived unload handlers that re-use an incognito...1.8 Low
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 moreDjango DNS Rebinding Vulnerability8.1 High
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 moreDjango user with hardcoded password created when running tests on Oracle9.8 Critical
- isc bind, debian linux, netapp data ontap edge +8 more +10 morenamed in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1...7.5 High