CVEs published in November 2016
516 vulnerabilities, 55 critical, 9 exploited.
- mozilla firefoxAn issue where a "<select>" dropdown menu can be used to cover location bar content, resulting in...5.9 Medium
- mozilla firefoxAn issue where WebExtensions can use the mozAddonManager API to elevate privilege due to...9.8 Critical
- mozilla firefoxContent Security Policy combined with HTTP to HTTPS redirection can be used by malicious server...5.3 Medium
- mozilla firefoxA maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged...8.0 High
- mozilla firefoxA use-after-free in nsINode::ReplaceOrInsertBefore during DOM operations resulting in potentially...7.8 High
- mozilla firefoxA use-after-free during web animations when working with timelines resulting in a potentially...7.5 High
- mozilla firefoxTwo use-after-free errors during DOM operations resulting in potentially exploitable crashes....6.5 Medium
- mozilla firefox, debian linux, python +2 moreAn integer overflow during the parsing of XML using the Expat library. This vulnerability affects...9.8 Critical
- mozilla nss, network security services, redhat enterprise linux desktop +5 more +7 moreIt was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to...5.3 Medium
- mozilla firefoxDuring URL parsing, a maliciously crafted URL can cause a potentially exploitable crash. This...6.5 Medium
- mozilla firefoxMemory safety bugs were reported in Firefox 49. Some of these bugs showed evidence of memory...9.8 Critical
libarchiveMageiaUpdated libarchive packages fix security vulnerabilityNo score- linux kernelThe hid_input_field function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows...5.5 Medium
- linux kernelUse-after-free vulnerability in the ffs_user_copy_worker function in drivers/usb/gadget/function...7.8 High
- linux kernelThe __ext4_journal_stop function in fs/ext4/ext4_jbd2.c in the Linux kernel before 4.3.3 allows...7.8 High
postgresql-9.1Debianpostgresql-9.1 - bugfix updateNo score- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn existing mitigation of timing side-channel attacks is insufficient in some circumstances. This...5.9 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA buffer overflow resulting in a potentially exploitable crash due to memory allocation issues...7.5 High
- mozilla firefox, firefox esr +1 moreAdd-on updates failed to verify that the add-on ID inside the signed package matched the ID of...5.9 Medium
- linux kernelThe nfnetlink_rcv_batch function in net/netfilter/nfnetlink.c in the Linux kernel before 4.5 does...5.0 Medium
- linux kernelRace condition in the environ_read function in fs/proc/base.c in the Linux kernel before 4.5.4...5.5 Medium
- linux kernelThe assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel...5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreThe xc2028_set_config function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before...7.8 High
- linux kernelRace condition in the get_task_ioprio function in block/ioprio.c in the Linux kernel before 4.6.6...7.8 High
- linux kernelUse-after-free vulnerability in the disk_seqf_stop function in block/genhd.c in the Linux kernel...7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn error in argument length checking in JavaScript, leading to potential integer overflows or...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization,...7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA same-origin policy bypass with local shortcut files to load arbitrary local content from disk....5.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed...9.8 Critical
- mozilla network security services, avaya aura application enablement services, aura application server 5300 +25 more +27 moreNull pointer dereference vulnerability exists in K11_SignWithSymKey /...7.5 High
- linux kernelThe tty_set_termios_ldisc function in drivers/tty/tty_ldisc.c in the Linux kernel before 4.5...5.5 Medium
- linux kernelRace condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain...7.0 High
- linux kernelDouble free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux...7.3 High
- siemens primary setup tool, security configuration tool, simatic it production suite +15 more +17 moreA vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1),...6.4 Medium
- novell open enterprise server 11, open enterprise server 2015 +1 moreVulnerability in Novell Open Enterprise Server (OES2015 SP1 before Scheduled Maintenance Update...9.1 Critical
- emc avamar data store, avamar server virtual edition +1 moreEMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3 and older contain a...8.4 High
- obdev little snitchLittle Snitch version 3.0 through 3.6.1 suffer from a buffer overflow vulnerability that could be...8.4 High
- exponentcms exponent cmsIn /framework/modules/notfound/controllers/notfoundController.php of Exponent CMS 2.4.0 patch1,...9.8 Critical
akonadiDebianakonadi - updateNo score- gstreamerThe ROM mappings in the NSF decoder in gstreamer 0.10.x allow remote attackers to cause a denial...7.8 High
- xmlsoft libxml2, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreCVE-2016-9318 does not affect BellSoft software5.5 Medium
- dotcmsSQL injection vulnerability in the "Site Browser > HTML pages" screen in dotCMS before 3.3.1...8.8 High
- dotcmsSQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS before 3.3.1...8.8 High
- dotcmsSQL injection vulnerability in the "Site Browser > Links pages" screen in dotCMS before 3.3.1...8.8 High
- dotcmsSQL injection vulnerability in the JSONTags servlet in dotCMS before 3.3.1 allows remote...8.8 High
- dotcmsSQL injection vulnerability in the "Site Browser > Containers pages" screen in dotCMS before 3.3...8.8 High
- dotcmsSQL injection vulnerability in the "Site Browser > Templates pages" screen in dotCMS before 3.3.1...8.8 High
- dotcmsSQL injection vulnerability in the categoriesServlet servlet in dotCMS before 3.3.1 allows remote...9.8 Critical
- mmonit monitMonit before version 5.20.0 is vulnerable to a cross site request forgery attack. Successful...6.5 Medium
- moinmo moinmoin, canonical ubuntu linux, debian linux +2 moreMoinMoin Cross-site Scripting (XSS) vulnerability6.1 Medium
- Show moreLoading…