CVEs published in December 2016
584 vulnerabilities, 57 critical, 4 exploited.
- microsoft officeMicrosoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreUniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...8.8 High
- microsoft windows 10, windows server 2016 +1 moreThe Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016...8.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...8.8 High
- microsoft windows 10, windows server 2016 +1 moreThe Secure Kernel Mode implementation in Microsoft Windows 10 Gold, 1511, and 1607 and Windows...7.8 High
- microsoft .net frameworkThe Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer...7.5 High
- microsoft office, office compatibility pack, office web apps +4 more +6 moreMicrosoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word...7.1 High
- microsoft excelMicrosoft Excel 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 misparses file formats, which makes it...5.5 Medium
- microsoft excel, excel viewer, office compatibility pack +1 more +3 moreMicrosoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office...7.8 High
- microsoft excel, excel viewer, office compatibility pack +1 more +3 moreMicrosoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office...7.1 High
- microsoft excel, excel for mac, excel viewer +1 more +3 moreMicrosoft Excel 2007 SP3, Office Compatibility Pack SP3, Excel Viewer, Excel for Mac 2011, and...7.1 High
- microsoft excel for macMicrosoft Excel for Mac 2011 and Excel 2016 for Mac allow remote attackers to execute arbitrary...7.8 High
- microsoft excel, excel viewer, office compatibility pack +2 moreMicrosoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe Graphics Component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server...7.8 High
- microsoft windows 10, windows server 2016 +1 moreThe kernel in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 mishandles page...5.5 Medium
- microsoft office for mac, windows 7, windows server 2008 +1 more +3 moreThe GDI component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7...6.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe Crypto driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7...5.5 Medium
- microsoft edgeCross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject...6.1 Medium
- microsoft edgeMicrosoft Edge allows remote attackers to execute arbitrary code or cause a denial of service ...7.5 High
- flightgear, debian linux, fedoraproject fedora +2 moreThe route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary...7.5 High
- debian postgresql-commonThe pg_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in...7.8 High
- torproject tor, debian linux, fedoraproject fedora +2 more +4 moreTor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via...7.5 High
- dotcmsSQL injection vulnerability in the REST API in dotCMS before 3.3.2 allows remote attackers to...9.8 Critical
- ntp, hpe hpux-ntp +1 moreThe read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of...7.5 High
- ntpNTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote...5.3 Medium
- ntpNTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism...5.3 Medium
- ntpntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast...4.3 Medium
- ntpThe broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote...4.3 Medium
- sap solution managerWebdynpro in SAP Solman 7.1 through 7.31 allows remote attackers to obtain sensitive information...7.5 High
- sambaSamba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of...6.5 Medium
- [unknown] samba, redhat enterprise linux desktop, enterprise linux server +5 more +7 moreIt was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets...6.4 Medium
- [unknown] sambaA flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains...8.1 High
- spipSPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/info_plugin...6.1 Medium
- spipSPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec...6.1 Medium
- siemens simatic pcs 7, simatic wincc +1 moreA vulnerability in SIEMENS SIMATIC WinCC (All versions < SIMATIC WinCC V7.2) and SIEMENS SIMATIC...8.1 High
- siemens simatic s7-300 cpu family (incl. related et200 cpus and siplus variants), simatic s7-400 pn/dp v6 and below cpu family (incl. siplus variants), simatic s7-400 pn/dp v7 cpu family (incl. siplus variants) +7 more +9 moreA vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300...5.9 Medium
- siemens simatic s7-300 cpu family (incl. related et200 cpus and siplus variants), simatic s7-400 pn/dp v6 and below cpu family (incl. siplus variants), simatic s7-400 pn/dp v7 cpu family (incl. siplus variants) +5 more +7 moreA vulnerability has been identified in SIMATIC S7-300 CPU family (All versions), SIMATIC S7-300...7.5 High
- technicolor xfinity gateway router dpc3941t firmwareCSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware...8.0 High
tomcat6Debiantomcat6 - regression updateNo score- nvidia geforce experienceNVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper...6.5 Medium
- nvidia corporation windows gpu display driver, nvidia gpu driver +1 moreAll versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia corporation windows gpu display driver, nvidia gpu driver +1 moreAll versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia corporation windows gpu display driver, nvidia gpu driver +1 moreAll versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia corporation windows gpu display driver, nvidia gpu driver +1 moreAll versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia corporation windows gpu display driver, nvidia gpu driver +1 moreAll versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia gpu driver, nvidia corporation quadro, nvs, geforce, grid and tesla +1 moreAll versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...6.1 Medium
- nvidia gpu driver, nvidia corporation quadro, nvs, geforce, grid and tesla +1 moreAll versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia gpu driver, nvidia corporation quadro, nvs, geforce, grid and tesla +1 moreAll versions of NVIDIA Windows GPU Display contain a vulnerability in the kernel mode layer ...7.8 High
- nvidia gpu driver, nvidia corporation quadro, nvs, geforce, grid and tesla +1 moreAll versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- Show moreLoading…