CVEs published in December 2016
584 vulnerabilities, 57 critical, 4 exploited.
- open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev8. References to external...4.3 Medium
- open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure...5.8 Medium
- open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Script code can be...6.1 Medium
- open-xchange ox guardAn issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. OX Guard uses an...7.5 High
- open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10. App Suite frontend...3.5 Low
- open-xchange appsuiteAn issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The content sanitizer...6.1 Medium
- open-xchange appsuiteAn issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The "defer" servlet...7.4 High
- open-xchange appsuiteAn issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The aria-label parameter...5.4 Medium
- open-xchange appsuiteAn issue was discovered in Open-Xchange Server 6 / OX AppSuite before 7.8.0-rev26. The "session"...6.1 Medium
- open-xchange ox guardAn issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is...8.8 High
- game-music-emu project game-music-emu, fedoraproject fedora, novell suse linux enterprise desktop +3 more +5 moregame-music-emu before 0.6.1 mishandles unspecified integer values.9.8 Critical
- game-music-emu project game-music-emu, fedoraproject fedora, novell suse linux enterprise desktop +3 more +5 moregame-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and...5.5 Medium
- game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 moregame-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.7.8 High
- game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 moregame-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.7.8 High
- game-music-emu project game-music-emu, opensuse leap, opensuse +5 more +7 moreStack-based buffer overflow in game-music-emu before 0.6.1.7.8 High
- nagiosbase/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the...7.8 High
- sisco ax-s4 iccp firmware, mms-ease firmware +1 moreThe SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers...7.5 High
- sap download managerSAP Download Manager 2.1.142 and earlier generates an encryption key from a small key space on...4.7 Medium
- sap download managerSAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data,...4.7 Medium
- redhat enterprise virtualizationRed Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys...5.5 Medium
- mailcwp project mailcwpMailcwp remote file upload vulnerability incomplete fix v1.1009.8 Critical
- joyent smartosAn exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system...7.0 High
- joyent smartosAn exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system...7.0 High
- joyent smartosAn exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system...7.0 High
- joyent smartosAn exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system...7.0 High
- joyent smartosAn exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file...7.8 High
- joyent smartosAn exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file...7.8 High
- netgear d6220 firmware, d6400 firmware, multiple routers +9 more +11 moreNETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900,...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable...8.8 High
- cisco ios xrA vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in...7.8 High
- cisco identity services engine (ise), identity services engine software +1 moreCisco Identity Services Engine (ISE) contains a vulnerability that could allow an unauthenticated...6.1 Medium
- cisco web security applianceA vulnerability in the Decrypt for End-User Notification configuration parameter of Cisco AsyncOS...7.5 High
- cisco ons 15454 sdh multiservice platform softwareA vulnerability in TCP port management in Cisco ONS 15454 Series Multiservice Provisioning...7.5 High
- cisco unified communications managerA vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified...7.5 High
- Show moreLoading…