CVEs published in December 2016
584 vulnerabilities, 57 critical, 4 exploited.
- xenXen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF...6.5 Medium
- xenXen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that...5.5 Medium
- xenXen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that...5.5 Medium
- pwc ace-advanced business application programmingPricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users...9.9 Critical
- phpmyadminphpMyAdmin CSRF Vulnerability9.8 Critical
- phpmyadminAn issue was discovered in phpMyAdmin. Due to a bug in serialized string parsing, it was possible...9.8 Critical
- phpmyadminAn issue was discovered in phpMyAdmin. With a crafted username or a table name, it was possible...7.5 High
- phpmyadminphpMyAdmin Bypass white-list protection for URL redirection7.5 High
- phpmyadminphpMyAdmin Denial of Service (DoS)5.9 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to...5.3 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. With a crafted request parameter value it is possible to...5.3 Medium
- phpmyadminphpMyAdmin XSS Vulnerability6.1 Medium
- phpmyadminphpMyAdmin XSS Vulnerability6.1 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an...5.3 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an...5.3 Medium
- phpmyadminphpMyAdmin path disclosure5.3 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. By calling some scripts that are part of phpMyAdmin in an...5.3 Medium
- phpmyadminphpMyAdmin Bypass logout timeout5.3 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. Username matching for the allow/deny rules may result in...5.3 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg[...9.8 Critical
- phpmyadminAn issue was discovered in phpMyAdmin. phpinfo (phpinfo.php) shows PHP information including...5.3 Medium
- phpmyadminphpMyAdmin Cryptographic Vulnerability5.3 Medium
- openbsd openssh** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows...7.5 High
- linux kernelRace condition in the ion_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel...7.8 High
- intel proset/wireless software and drivers, proset\/wireless software and drivers +1 moreBuffer overflow in Intel PROSet/Wireless Software and Drivers in versions before 19.20.3 allows a...5.5 Medium
- intel nuc kits, canyon bios, citry bios +2 more +4 moreSMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System...6.7 Medium
- intel wireless bluetooth driversUnquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18...7.8 High
- barclamp-trove project barclamp-trove, crowbar-openstack project crowbar-openstack +1 moreThe trove service user in (1) Openstack deployment (aka crowbar-openstack) and (2) Trove Barclamp...9.8 Critical
- bluez project bluezIn BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump" function in "monitor...7.5 High
- bluezIn BlueZ 5.42, a buffer overflow was observed in "read_n" function in "tools/hcidump.c" source...7.5 High
- gnome libgsfAn error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured...5.5 Medium
- linux kernelThe sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles...7.8 High
- linux kernelarch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 does not properly initialize Code...5.5 Medium
- ntpntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a...5.9 Medium
- ntpThe control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to...6.5 Medium
- ntpNTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a...3.7 Low
- ntp, canonical ubuntu linux, hpe hpux-ntp +6 more +8 moreNTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting...7.5 High
- roundcube webmailsteps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is...7.5 High
- linux kernelThe icmp6_send function in net/ipv6/icmp.c in the Linux kernel through 4.8.12 omits a certain...7.5 High
- linux kernel, google android +1 morearch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the "strict...7.8 High
- linux kernelarch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 4.4 allows local users to gain...7.8 High
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote...6.5 Medium
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote...6.5 Medium
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote...6.5 Medium
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote...6.5 Medium
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote...6.5 Medium
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote...6.5 Medium
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. w3m allows remote...6.5 Medium
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion...6.5 Medium
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion...6.5 Medium
- Show moreLoading…