CVEs published in December 2016
584 vulnerabilities, 57 critical, 4 exploited.
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreExternal resources that should be blocked when loaded by SVG images can bypass security...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free while manipulating DOM events and removing audio elements due to errors in the...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...7.5 High
- mozilla firefoxUse-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not...8.1 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...6.1 Medium
- mozilla firefoxA buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...9.8 Critical
- unzip project unzipBuffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote...4.0 Medium
- phpPHP through 5.6.27 and 7.x through 7.0.12 mishandles property modification during __wakeup...9.8 Critical
- mozilla firefoxMemory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory...9.8 Critical
- phpZend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote...7.5 High
- canonical ubuntu linux, debian advanced package tool +1 moreThe apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu...5.9 Medium
- unzip project unzipBuffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote...4.0 Medium
- digium asterisk, certified asterisk +1 moreAn issue was discovered in Asterisk Open Source 11.x before 11.25.1, 13.x before 13.13.1, and 14...5.3 Medium
- digium asteriskAn issue was discovered in Asterisk Open Source 13.12.x and 13.13.x before 13.13.1 and 14.x...7.5 High
monitDebianmonit - regression updateNo score- ceph, redhat ceph storage, ceph storage mon +4 more +6 moreA flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the...6.5 Medium
python-tornadoMageiaUpdated python-tornado package fixes security vulnerabilityNo score- phpmyadminphpMyAdmin DoS Vulnerability7.5 High
- phpmyadminAn issue was discovered in phpMyAdmin. With a crafted login request it is possible to inject...7.5 High
- phpmyadminAn issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used...8.1 High
- phpmyadminphpMyAdmin Cross-site Scripting (XSS)6.1 Medium
- phpmyadminAn issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to...4.4 Medium
imagemagickDebianimagemagick - regression updateNo score- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote...6.5 Medium
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote...6.5 Medium
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Infinite recursion...6.5 Medium
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. w3m allows remote...6.5 Medium
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Buffer overflow in the...8.8 High
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Heap-based buffer...8.8 High
- tats w3mAn issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-31. Integer overflow...8.8 High
- google chromeInteger overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and...6.5 Medium
- google chromePDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for...6.5 Medium
- google chromeThe extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0...6.5 Medium
- google chromeThe extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0...6.5 Medium
- google chromeA use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and...6.3 Medium
- google chromeGoogle Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a...4.3 Medium
- google chromeA use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and...8.8 High
- google chromeHeap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75...8.8 High
- google chromeThe PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883...8.8 High
- google chromeA use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and...8.8 High
- jasper project jasper, debian linux, redhat enterprise linux desktop +5 more +7 moreStack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1...7.8 High
- qemuThe (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig...4.4 Medium
- qemuThe mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local...6.0 Medium
- jasper project jasperInteger overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows...7.8 High
- jfrog artifactoryJFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP...9.8 Critical
- atlassian crowdThe LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote...9.8 Critical
- dotclearMultiple cross-site scripting (XSS) vulnerabilities in the media manager in Dotclear before 2.10...6.1 Medium
- pivotal software rabbitmq, oracle solaris +1 moreThe Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain...6.5 Medium
- Show moreLoading…