CVEs published in December 2016
584 vulnerabilities, 57 critical, 4 exploited.
- cisco firepower, firepower services for adaptive security appliance +1 moreA vulnerability in TCP processing in Cisco FirePOWER system software could allow an...4.3 Medium
- cisco emergency responderA vulnerability in the File Management Utility, the Download File form, and the Serviceability...6.5 Medium
- cisco expresswayA vulnerability in the HTTP traffic server component of Cisco Expressway could allow an...6.5 Medium
- cisco unified communications manager (cucm), unified communications manager +1 moreA vulnerability in the ccmadmin page of Cisco Unified Communications Manager (CUCM) could allow...6.1 Medium
- cisco ios xrA vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an...7.5 High
- cisco nexus 1000v intercloud firmwareA vulnerability in the Cisco Intercloud Fabric (ICF) Director could allow an unauthenticated,...6.5 Medium
- cisco asr 5000 series softwareA vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco ASR 5000 Series...7.5 High
- cisco email security appliance (esa), email security appliance +1 moreA vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA)...6.1 Medium
- cisco iosA vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could...7.5 High
- cisco prime collaboration assuranceA vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an...6.1 Medium
- cisco ioxA vulnerability in the Cisco application-hosting framework (CAF) of Cisco IOx could allow an...6.5 Medium
- cisco identity services engine (ise), identity services engine +1 moreA vulnerability in the Active Directory integration component of Cisco Identity Services Engine ...7.5 High
- cisco firesight system software, secure firewall management center +1 moreA vulnerability in the malicious file detection and blocking features of Cisco Firepower...7.5 High
- cisco anyconnect secure mobility clientA vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an...7.8 High
- cisco iosA vulnerability in the implementation of X.509 Version 3 for SSH authentication functionality in...7.3 High
- cisco iosA vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an...6.5 Medium
- cisco firepower management center, firesight system software +1 moreA vulnerability in the web-based management interface of Cisco Firepower Management Center...6.5 Medium
- cisco hybrid media serviceA vulnerability in the installation procedure of the Cisco Hybrid Media Service could allow an...7.8 High
- cisco web security appliance (wsa), web security appliance +1 moreA vulnerability in HTTP URL parsing of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could...7.5 High
- cisco emergency responderA vulnerability in the web-based management interface of Cisco Emergency Responder could allow an...8.8 High
- cisco asr 5000 series softwareA vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services...7.5 High
- cisco email security applianceA vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email...4.3 Medium
- cisco unified communications manager, unified communications manager im and presence service +1 moreA vulnerability in the web management interface of the Cisco Unified Communications Manager IM...7.5 High
- cisco fireamp connector endpoint softwareA vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP...7.8 High
- cisco email security appliance, web security appliance, content security management appliance +2 moreA vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security...5.9 Medium
- apport project apportAn issue was discovered in Apport before 2.20.4. A malicious Apport crash file can contain a...6.5 Medium
- apport project apport, canonical ubuntu linux +1 moreAn issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport...7.8 High
- apport project apport, canonical ubuntu linux +1 moreAn issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field...7.8 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...8.8 High
- naver ngrinderMultiple cross-site scripting (XSS) vulnerabilities in nGrinder before 3.4 allow remote attackers...6.1 Medium
- 7-zip, fedoraproject fedora, oracle solaris +2 moreHeap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before...7.8 High
- linux kernelRace condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA...7.8 High
- linux kernelThe blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not...7.8 High
- mariadb, oracle mysql, percona server +1 more +3 moremysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14;...7.0 High
- bmc bladelogic server automation consoleBMC BladeLogic Server Automation (BSA) before 8.7 Patch 3 allows remote attackers to bypass...9.8 Critical
- google androidAn information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4...5.5 Medium
- google androidAn information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4...5.5 Medium
- google androidA remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5...5.5 Medium
- google androidA remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5...5.5 Medium
- google androidAn elevation of privilege vulnerability in libstagefright in Mediaserver in Android 7.0 before...7.8 High
- google androidA remote code execution vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016...7.8 High
- intel graphics driverThe igdkmd64 module in the Intel Graphics Driver through 15.33.42.435, 15.36.x through 15.36.30...7.8 High
- wolfsslThe C software implementation of RSA in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier...5.5 Medium
- wolfsslThe C software implementation of ECC in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier...5.5 Medium
- phpext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a...7.5 High
- libgdStack consumption vulnerability in the gdImageFillToBorder function in gd.c in the GD Graphics...7.5 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...7.5 High
- mozilla firefoxMozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. If an...6.1 Medium
- mozilla firefox, firefox esr, redhat enterprise linux desktop +4 more +6 moreThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...7.5 High
- mozilla firefox, firefox esr, redhat enterprise linux aus +4 more +6 moreHTML tags received from the Pocket server will be processed without sanitization and any...9.8 Critical
- Show moreLoading…