CVEs published in December 2016
584 vulnerabilities, 57 critical, 4 exploited.
- linux kernel, canonical ubuntu linux +1 moreRace condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to...7.8 High
- bluezIn BlueZ 5.42, a buffer overflow was observed in "commands_dump" function in "tools/parser/csr.c"...5.3 Medium
- bluezIn BlueZ 5.42, an out-of-bounds read was observed in "le_meta_ev_dump" function in "tools/parser...5.3 Medium
- bluezIn BlueZ 5.42, a buffer over-read was identified in "l2cap_packet" function in "monitor/packet.c"...5.3 Medium
- bluezIn BlueZ 5.42, a buffer overflow was observed in "set_ext_ctrl" function in "tools/parser/l2cap.c...5.3 Medium
- bluezIn BlueZ 5.42, a buffer overflow was observed in "pin_code_reply_dump" function in "tools/parser...5.3 Medium
- bluezIn BlueZ 5.42, a buffer overflow was observed in "pklg_read_hci" function in "btsnoop.c" source...5.3 Medium
- bluezIn BlueZ 5.42, a use-after-free was identified in "conf_opt" function in "tools/parser/l2cap.c"...5.3 Medium
- bluezIn BlueZ 5.42, a buffer over-read was observed in "l2cap_dump" function in "tools/parser/l2cap.c"...5.3 Medium
- alcatel-lucent omnivista 8770 network management systemAlcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be...9.8 Critical
- openafsOpenAFS 1.6.19 and earlier allows remote attackers to obtain sensitive directory information via...5.3 Medium
- bmc patrolIn BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit....7.8 High
- b2evolutionThe "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset...7.5 High
- pcre, pcre pcre2, ibm powerkvm +2 morePCRE 7.8 and 8.32 through 8.37, and PCRE2 10.10 mishandle group empty matches, which might allow...7.5 High
- libgit2 project libgit2, fedoraproject fedora, opensuse leap +2 more +4 moreThe git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a...5.5 Medium
- libgit2 project libgit2, fedoraproject fedora, opensuse leap +2 more +4 moreThe git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to...5.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreThe postinst script in the tomcat6 package before 6.0.45+dfsg-1~deb7u4 on Debian wheezy, before 6...7.8 High
- s9y serendipityIn Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP...8.6 High
- piwigoCross-site scripting (XSS) vulnerability in the search results front end in Piwigo 2.8.3 allows...6.1 Medium
- ibm filenet workplaceIBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read...8.1 High
- ibm filenet workplaceOpen redirect vulnerability in IBM FileNet Workplace 4.0.2 through 4.0.2.14 IF001 allows remote...6.8 Medium
- ibm powerkvmThe Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.3-65.10 and 3.1 before 3.1.0.2 allows...6.5 Medium
- ibm appscan sourceIBM AppScan Source 8.7 through 9.0.3.3 allows remote authenticated users to read arbitrary files...8.1 High
- ibm api connect, network path manager +1 moreIBM API Connect (aka APIConnect) before 5.0.3.0 with NPM before 2.2.8 includes certain internal...7.5 High
- ibm urbancode deployCross-site scripting (XSS) vulnerability in IBM UrbanCode Deploy 6.2.x before 6.2.1.2 allows...5.4 Medium
- ibm lotus protector for mail securityMultiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Protector for Mail Security 2.8...5.4 Medium
- ibm connectionsCross-site scripting (XSS) vulnerability in IBM Connections 5.0 before CR4 and 5.5 before CR1...5.4 Medium
- ibm tivoli monitoringStack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM...7.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreThe postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0...7.8 High
- apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10...8.8 High
- apple itunes, safari, tvos +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 10 is affected. Safari before 10 is...8.8 High
- webkitgtk+, canonical ubuntu linux, webkitgtk webkitgtk\+ +2 moreWebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS8.8 High
- apple safari, tvos, iphone os +2 moreAn issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10...8.8 High
- apple tv, icloud, itunes +1 more +3 moreAn issue was discovered in certain Apple products. Safari before 10.0.1 is affected. iCloud...6.5 Medium