CVEs published in December 2016
584 vulnerabilities, 57 critical, 4 exploited.
- linux kernelThe sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles...7.8 High
- linux kernelRace condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel...7.8 High
- linux kernelKVM in the Linux kernel before 4.8.12, when I/O APIC is enabled, does not properly restrict the...7.8 High
- linux kernelThe netfilter subsystem in the Linux kernel before 4.9 mishandles IPv6 reassembly, which allows...7.8 High
- linux kernelMultiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel before 4.5.1...5.5 Medium
- linux kernelarch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the #BP and #OF exceptions, which...5.5 Medium
- uclouvain openjpeg, the openjpeg project openjpeg2 +1 moreAn infinite loop vulnerability in tiftoimage that results in heap buffer overflow in...3.3 Low
- uclouvain openjpeg, the openjpeg project openjpeg2 +1 moreAn integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting...3.3 Low
- the openjpeg project openjpeg, debian linux, redhat enterprise linux desktop +4 more +6 moreAn out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool....6.5 Medium
- the openjpeg project openjpeg, debian linux +1 moreA NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images....5.9 Medium
- wampserver** DISPUTED ** WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a...7.5 High
- wampserver** DISPUTED ** WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with...7.5 High
- cisco jabber guestA vulnerability in the Cisco Jabber Guest Server could allow an unauthenticated, remote attacker...6.5 Medium
- cisco cloudcenter orchestratorA vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator (CCO;...9.8 Critical
- cisco intercloud fabricA vulnerability in Cisco Intercloud Fabric for Business and Cisco Intercloud Fabric for Providers...8.8 High
- cryptopp crypto\+\+, debian linux +1 moreCrypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bug in its ASN.1 BER decoding routine....7.5 High
- s9y serendipityMultiple cross-site scripting (XSS) vulnerabilities in Serendipity before 2.0.5 allow remote...5.4 Medium
- sprecher-automation sprecon-e service programAn issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under...7.5 High
- qemuThe cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus...5.5 Medium
- antisamy project antisamyOWASP AntiSamy vulnerable to Cross-site Scripting6.1 Medium
- modx revolutionDirectory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote...7.3 High
- modx revolutionDirectory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote...7.3 High
- modx revolutionDirectory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote...7.3 High
- graphicsmagick, debian linux, opensuse leap +1 more +3 moreThe MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause...5.5 Medium
- qemuQuick Emulator (Qemu) built with the 'chardev' backend support is vulnerable to a use after free...5.5 Medium
- tarantoolAn exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode function...7.5 High
- tarantool msgpuck, msgpuck library +1 moreAn exploitable incorrect return value vulnerability exists in the mp_check function of Tarantool...7.5 High
- kde kmailKMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. HTML Mail...6.5 Medium
- kde kmailKMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the...8.1 High
- kde kscreenlocker, plasma-workspace, fedoraproject fedora +1 more +3 moreTurning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can...6.8 Medium
- google androidThe non-existent notification listener vulnerability was introduced in the initial Android 5.0.2...5.5 Medium
- imagemagickHeap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in...5.5 Medium
- curlcurl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal...6.5 Medium
- tiki tikiwiki cms\/groupwareSome forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10...6.1 Medium
- ffmpegThe che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote...5.5 Medium
- siemens desigo web module pxa30-w0 firmware, desigo web module pxa30-w1 firmware, desigo web module pxa30-w2 firmware +3 more +5 moreSiemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers...7.5 High
- ffmpegThe gsm_parse function in libavcodec/gsm_parser.c in FFmpeg before 3.1.5 allows remote attackers...5.5 Medium
- ffmpegThe ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to...7.8 High
- ffmpegThe avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to...5.5 Medium
- ffmpegThe zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers...5.5 Medium
- ffmpegThe raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to...7.8 High
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry uaa +2 moreCloud Foundry before 248; UAA 2.x before 2.7.4.12, 3.x before 3.6.5, and 3.7.x through 3.9.x...8.1 High
- qemu, debian linux, redhat openstack +1 more +3 moreQuick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a...6.5 Medium
- qemuQuick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to a memory...6.5 Medium
- qemu, debian linux, redhat openstack +1 more +3 moreQuick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage...6.5 Medium
- qemuQuick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to an...3.3 Low
- qemu, debian linux, redhat openstack +1 more +3 moreQuick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory...6.5 Medium
- bundlerBundler allows attacker to inject arbitrary code via secondary Gem source9.8 Critical
- squid-cache squidIncorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1...7.5 High
- squid-cache squid, debian linux +1 moreIncorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP...7.5 High
- Show moreLoading…