CVEs published in November 2016
516 vulnerabilities, 55 critical, 9 exploited.
- lenovo bios, notebook 110 14ibr bios, notebook 110 15ibr bios +27 more +29 moreA vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an...4.4 Medium
- lenovo system interface foundation, lenovo group ltd. all thinkpad, thinkcentre, thinkstation and lenovo-branded systems preloaded with the windows 10 operating system, or any system running lenovo companion, lenovo settings, or lenovo id. +1 moreDuring an internal security review, Lenovo identified a local privilege escalation vulnerability...7.8 High
- dbd-mysql project dbd-mysqlThere is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the...8.1 High
- dell emc idrac7 and idrac8, dell idrac7 firmware, idrac8 firmware +2 moreDell iDRAC7 and iDRAC8 devices with firmware before 2.40.40.40 allow authenticated users to gain...8.8 High
- microfocus host access management and security server, reflection for the web, reflection security gateway +1 more +3 moreAdministrative Server in Micro Focus Host Access Management and Security Server (MSS) and...6.5 Medium
- apache hadoopImproper Access Control in Apache Hadoop8.8 High
gst-plugins-good0.10Ubuntu,gst-plugins-good1.0Ubuntu +1 moregst-plugins-good0.10, gst-plugins-good1.0 vulnerabilityNo score- linux kernelThe hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local...5.5 Medium
- linux kernelcrypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation...5.5 Medium
- libtiff, debian linux, opensuse +2 moreThe t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of...7.8 High
- libtiff, opensuse +1 moreThe TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of...7.5 High
- google chromeA leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux,...6.5 Medium
- mcabber, canonical ubuntu linux, debian linux +2 moreMCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to...7.4 High
- linux kernelThe __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel 4.4.22 through...7.8 High
- linux kernelThe sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk...9.8 Critical
- linux kernelsecurity/keys/big_key.c in the Linux kernel before 4.8.7 mishandles unsuccessful crypto...7.8 High
- linux kernelThe cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain...5.5 Medium
- linux kernelThe __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel before 4.7.5...5.5 Medium
- linux kerneldrivers/vfio/pci/vfio_pci_intrs.c in the Linux kernel through 4.8.11 misuses the kzalloc function...7.8 High
- linux kerneldrivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass...7.8 High
- linux kernelThe mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure...5.5 Medium
- linux kernelThe TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local...5.5 Medium
- linux kernelThe tipc_msg_build function in net/tipc/msg.c in the Linux kernel through 4.8.11 does not...7.8 High
- icu-project international components for unicodeStack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in...9.8 Critical
- linux kerneldrivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware...6.8 Medium
- linux kernelThe x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM...5.5 Medium
- imagemagick, debian linux +1 morecoders/tiff.c in ImageMagick before 7.0.3.7 allows remote attackers to cause a denial of service ...6.5 Medium
- imagemagickcoders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service ...5.5 Medium
- imagemagick, opensuse leap +1 moreHeap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4...5.5 Medium
- imagemagick, opensuse project leap +1 morecoders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service ...5.5 Medium
- imagemagick, opensuse leap +1 moreThe MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of...5.5 Medium
- imagemagickmagick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of...7.5 High
- imagemagickBuffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5...5.5 Medium
- imagemagick, opensuse leap +1 moreThe ReadVIFFImage function in coders/viff.c in ImageMagick before 7.0.1-0 allows remote attackers...7.8 High
- imagemagick, opensuse leap +1 moreBuffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a...7.8 High
- imagemagickBuffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a...7.8 High
- imagemagickThe ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the...6.5 Medium
- imagemagickBuffer overflow in coders/tiff.c in ImageMagick before 6.9.4-1 allows remote attackers to cause a...7.8 High
- ibm bigfix remote controlIBM BigFix Remote Control before 9.1.3 does not properly restrict password choices, which makes...8.1 High
- ibm bigfix remote controlIBM BigFix Remote Control before 9.1.3 allows remote authenticated users to obtain sensitive...4.3 Medium
- ibm bigfix remote controlIBM BigFix Remote Control before 9.1.3 does not properly restrict the set of available encryption...5.9 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreCross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0...5.4 Medium
- ibm jazz reporting serviceThe XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before...7.5 High
- ibm jazz reporting serviceLifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006...5.0 Medium
- ibm jazz reporting serviceLifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006...6.5 Medium
- ibm jazz reporting serviceCross-site scripting (XSS) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting...5.4 Medium
- drupalDrupal Denial of service via transliterate mechanism6.5 Medium
- drupalDrupal Incorrect cache context on password reset page7.5 High
- google androidA remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1...8.8 High
- google androidAn information disclosure vulnerability in kernel components, including the process-grouping...5.5 Medium
- Show moreLoading…