CVEs published in November 2016
516 vulnerabilities, 55 critical, 9 exploited.
libtcnative-1-0SUSESecurity update for libtcnative-1-0No score- clusterlabs pacemaker, opensuse leap, redhat enterprise linux high availability +3 more +5 morePacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a...7.5 High
- siemens ccid1445-dn18 firmware, ccid1445-dn28 firmware, ccid1445-dn36 firmware +12 more +14 moreThe following SIEMENS branded IP Camera Models CCMW3025, CVMW3025-IR, CFMW3025 prior to version 1...9.8 Critical
- libtifftools/tiffcp.c in libtiff 4.0.6 has an out-of-bounds write on tiled images with odd tile width...9.8 Critical
- libtifftools/tiffcrop.c in libtiff 4.0.6 has an out-of-bounds read in readContigTilesIntoBuffer()....9.8 Critical
- libtifftools/tiffcrop.c in libtiff 4.0.6 reads an undefined buffer in readContigStripsIntoBuffer()...9.8 Critical
- libtifftools/tiffcrop.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in buffers. Reported as...9.8 Critical
- libtifftools/tiff2pdf.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated...9.8 Critical
- libtifftif_predict.h and tif_predict.c in libtiff 4.0.6 have assertions that can lead to assertion...9.8 Critical
- libtifftif_write.c in libtiff 4.0.6 has an issue in the error code path of TIFFFlushData1() that didn't...9.8 Critical
- libtifftif_pixarlog.c in libtiff 4.0.6 has out-of-bounds write vulnerabilities in heap allocated buffers...9.8 Critical
- vim, debian linux +1 morevim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and ...7.8 High
- sniffit project sniffit, debian linux +1 moresniffit 0.3.7 and prior: A configuration file can be leveraged to execute code as root7.8 High
- paloaltonetworks pan-osPalo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6...7.8 High
- paloaltonetworks pan-osBuffer overflow in the management web interface in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x...9.8 Critical
- paloaltonetworks pan-osThe Addresses Object parser in Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0...6.5 Medium
- cisco unified communications managerA vulnerability in several parameters of the ccmivr page of Cisco Unified Communication Manager ...6.1 Medium
- cisco virtualized packet core, asr 5000 series software +1 moreA vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an...7.5 High
- cisco email security appliance firmwareA vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email...5.3 Medium
- cisco email security appliance firmwareA vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email...5.3 Medium
- cisco adaptive security appliance softwareA vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security...5.9 Medium
- cisco firesight system softwareA vulnerability in the FTP Representational State Transfer Application Programming Interface ...7.5 High
- cisco telepresence tc softwareCisco TelePresence endpoints running either CE or TC software contain a vulnerability that could...5.5 Medium
- cisco email security appliance firmwareA vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email...7.5 High
- cisco application policy infrastructure controller, nx-os +1 moreA vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric...6.5 Medium
- cisco ios xeA vulnerability in the package unbundle utility of Cisco IOS XE Software could allow an...2.5 Low
- siemens simatic cp, simatic cp 1543-1 firmware, siplus net cp 1543-1 firmware +2 moreA vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP...7.5 High
- siemens simatic cp 1543-1 firmwareA vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP...6.6 Medium
- hdfgroup hdf5The HDF5 1.8.16 library allocating space for the array using a value from the file has an impact...8.6 High
- hdfgroup hdf5The library's failure to check if certain message types support a particular flag, the HDF5 1.8...8.6 High
- hdfgroup hdf5When decoding data out of a dataset encoded with the H5Z_NBIT decoding, the HDF5 1.8.16 library...8.6 High
- hdfgroup hdf5In the HDF5 1.8.16 library's failure to check if the number of dimensions for an array read from...8.6 High
- mozilla firefoxWebExtensions can bypass security checks to load privileged URLs and potentially escape the...7.5 High
- libtiff, debian linux +1 moreInteger overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0...5.5 Medium
- libtiffThe TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of...7.5 High
- libtifftiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds...5.5 Medium
- dracut project dracutA local information disclosure issue was found in dracut before 045 when generating initramfs...5.0 Medium
- gnu chessStack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka...9.8 Critical
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 moreSerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux...9.8 Critical
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the OpenFlow dissector could crash with memory...5.9 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DTN dissector could go into an infinite loop,...5.9 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the AllJoyn dissector could crash with a buffer...5.9 Medium
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.1 and 2.0.0 to 2.0.7, the DCERPC dissector could crash with a use-after...5.9 Medium
- wiresharkIn Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by...5.9 Medium
akonadiDebianakonadi - security updateNo score- drupalDrupal Open Redirect6.8 Medium
- drupalDrupal sensitive information disclosure4.3 Medium
- gstreamer, fedoraproject fedora, redhat enterprise linux desktop +5 more +7 moreThe vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote...7.5 High
- gstreamerInteger overflow in the vmnc decoder in the gstreamer allows remote attackers to cause a denial...7.5 High
- mozilla firefoxCanvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The...7.0 High
- Show moreLoading…