CVEs published in November 2016
516 vulnerabilities, 55 critical, 9 exploited.
- [unknown] sudosudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if...6.4 Medium
- todd miller sudosudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec...7.0 High
- enlightenment terminology, debian linux +1 moreTerminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that...7.8 High
- 7-zip p7zipA null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null...7.5 High
- artifex mujsArtifex Software, Inc. MuJS before 5008105780c0b0182ea6eda83ad5598f225be3ee allows context...7.5 High
- exponentcms exponent cmsIn framework/modules/navigation/controllers/navigationController.php in Exponent CMS v2.4.0 or...9.8 Critical
- exponentcms exponent cmsframework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0patch1 does not...5.3 Medium
- exponentcms exponent cmsframework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows...5.3 Medium
- exponentcms exponent cmsgetUsersByJSON in framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0...5.3 Medium
- exponentcms exponent cmsSQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote...7.5 High
- exponentcms exponent cmsSQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0...7.5 High
- samsung mobileInteger overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers...7.5 High
- git for windows project for windowsUntrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges...7.8 High
- exponentcms exponent cmsA Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array...9.1 Critical
- openssl, nodejs node.js +1 moreThere is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in...5.9 Medium
- google chrome, chromium-browser +1 morebrowser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS,...9.1 Critical
- google chromeV8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840...8.8 High
- google chromeAn off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to...8.8 High
- dotclearUnrestricted file upload vulnerability in the Blog appearance in the "Install or upgrade manually...7.2 High
- jasper project jasper, fedoraproject fedora +1 moreThe jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote...5.5 Medium
- jasper project jasperThe jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote...7.8 High
- jasper project jasperThe bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote...5.5 Medium
- jasper project jasper, fedoraproject fedora +1 moreThe bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer 1.900.5 allows remote attackers to...5.5 Medium
- jasper project jasperThe jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to...5.5 Medium
- jasper project jasperThe jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote...5.5 Medium
- jasper project jasper, fedoraproject fedora, opensuse +2 moreDouble free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10...7.8 High
- jasper project jasper, debian linux, fedoraproject fedora +2 moreThe jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows...5.5 Medium
- jasper project jasper, debian linux, fedoraproject fedora +2 moreThe jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.4 allows...5.5 Medium
- jasper project jasper, fedoraproject fedora +1 moreThe bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.5 allows remote...5.5 Medium
- teradata studio expressThe installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates...7.8 High
- teradata virtual machine community edition, virtual machine +1 moreTeradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl...9.8 Critical
- teradata virtual machine community edition, virtual machine +1 moreTeradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex...7.8 High
- adobe acrobat, acrobat reader dc, reader +1 more +3 moreAdobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006...9.8 Critical
- microsoft windows, windows 7, windows 8.1 +8 more +10 moreatmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and...8.8 High
- microsoft win32k, windows 7, windows 8.1 +8 more +10 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft sql serverMicrosoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a cast of an unspecified...8.8 High
- microsoft sql serverThe agent in Microsoft SQL Server 2012 SP2, 2012 SP3, 2014 SP1, 2014 SP2, and 2016 does not...8.8 High
- microsoft sql serverMicrosoft SQL Server 2016 mishandles the FILESTREAM path, which allows remote authenticated users...6.5 Medium
- microsoft sql serverCross-site scripting (XSS) vulnerability in the MDS API in Microsoft SQL Server 2016 allows...6.1 Medium
- microsoft sql serverMicrosoft SQL Server 2014 SP1, 2014 SP2, and 2016 does not properly perform a cast of an...8.8 High
- microsoft sql serverMicrosoft SQL Server 2016 does not properly perform a cast of an unspecified pointer, which...8.8 High
- microsoft windows 10, windows 7, windows 8.1 +2 more +4 moreMicrosoft Video Control in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8...7.8 High
- microsoft windows 10, windows 8.1, windows rt 8.1 +2 more +4 moreMicrosoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511,...7.5 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1,...7.8 High
- microsoft officeMicrosoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, and Office 2016...7.8 High
- microsoft officeMicrosoft Office 2007 SP3 allows remote attackers to cause a denial of service (application hang)...5.5 Medium
- microsoft edgeChakraCore RCE Vulnerability7.5 High
- microsoft edgeChakraCore RCE Vulnerability7.5 High
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary...7.5 High
- microsoft edgeChakraCore RCE Vulnerability7.5 High
- Show moreLoading…