CVEs published in December 2016
584 vulnerabilities, 57 critical, 4 exploited.
- sap hybris Hybris Management Console (HMC) in SAP Hybris before 6.0 allows remote attackers to obtain... 4.3 Medium
- sap hybris Cross-site scripting (XSS) vulnerability in the Create Employee feature in Hybris Management... 5.4 Medium
- sap hybris Cross-site scripting (XSS) vulnerability in the Create Catalogue feature in Hybris Management... 5.4 Medium
- sap hybris Cross-site scripting (XSS) vulnerability in the Inbox Search feature in Hybris Management Console... 6.1 Medium
- libvncserver project libvncserver Heap-based buffer overflow in ultra.c in LibVNCClient in LibVNCServer before 0.9.11 allows remote... 9.8 Critical
- libvncserver project libvncserver Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before 0.9.11 allows... 9.8 Critical
- linux kernel, embysupport security +1 more It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an... 4.4 Medium
- qemu, citrix xenserver, debian linux +7 more +9 more A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display... 5.5 Medium
- qemu, debian linux +1 more Qemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A... 7.6 High
- artifex ghostscript, gpl ghostscript, jbig2dec +1 more +3 more ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in... 5.3 Medium
- red hat spice, debian linux, redhat enterprise linux desktop +4 more +6 more A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An... 7.5 High
- ntp, freebsd, hpe hpux-ntp +2 more +4 more An exploitable denial of service vulnerability exists in the origin timestamp check functionality... 3.7 Low
- apple icloud, itunes, safari +1 more +3 more An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10... 8.8 High
- apple icloud, itunes, safari +1 more +3 more An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10... 8.8 High
- apple icloud, itunes, safari +1 more +3 more An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10... 8.8 High
- apple icloud, itunes, safari +1 more +3 more An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10... 8.8 High
- apple icloud, itunes, safari +1 more +3 more An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10... 8.8 High
- apple icloud, itunes, safari +1 more +3 more An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10... 8.8 High
- apple icloud, itunes, safari +1 more +3 more An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10... 8.8 High
- apple icloud, itunes, safari +1 more +3 more An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10... 8.8 High
- apple safari, iphone os +1 more An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10... 6.5 Medium
- apple icloud, itunes, safari +1 more +3 more An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10... 6.5 Medium
- apple icloud, itunes, safari +1 more +3 more An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10... 4.3 Medium
- apple icloud, itunes, safari +2 more +4 more An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10... 8.8 High
- apple icloud, itunes, safari +1 more +3 more An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10... 6.5 Medium
- openssl, canonical ubuntu linux, debian linux +1 more +3 more A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user... 5.5 Medium
- libgd The read_image_tga function in gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.4... 5.5 Medium
- oracle java se, java se embedded, jrockit +2 more +4 more Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent... 5.3 Medium
- oracle java se, java se embedded, jdk +1 more +3 more Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:... 6.5 Medium
- oracle java se, java se embedded, jdk +1 more +3 more Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:... 6.5 Medium
- oracle java se, java se embedded, jrockit +2 more +4 more Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent... 5.3 Medium
- oracle java se, java se embedded, jrockit +2 more +4 more Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent... 7.5 High
- libevent project libevent, debian linux +1 more The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a... 7.5 High
- libevent project libevent, debian linux, mozilla firefox +1 more +3 more Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent... 7.5 High
- libevent project libevent, debian linux +1 more The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have... 9.8 Critical
- libgd Integer overflow in gd_io.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote... 7.8 High
- libgd The gdImageCreateFromGd2Ctx function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2... 5.5 Medium
- libgd Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics... 9.8 Critical
- x.org libxpm Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM... 9.8 Critical
- linux kernel Use-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in... 9.8 Critical
- imagemagick Multiple memory leaks in the caption and label handling code in ImageMagick allow remote... 7.5 High
- imagemagick Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified... 9.8 Critical
- imagemagick coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a... 9.8 Critical
- muscle pcsc-lite, canonical ubuntu linux +1 more Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial... 7.5 High
- libtiff Off-by-one error in the t2p_readwrite_pdf_image_tile function in tools/tiff2pdf.c in LibTIFF 4.0... 7.8 High
- libtiff Integer overflow in tools/tiffcp.c in LibTIFF 4.0.7, 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0... 7.8 High
- libtiff Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4... 7.8 High
- imagemagick The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of... 5.5 Medium
-
trackerMageia Updated tracker packages fix security vulnerability No score - swiftmailer Swift Mailer mail transport Command Injection 9.8 Critical
- Show olderLoading…