CVEs published in December 2016
584 vulnerabilities, 57 critical, 4 exploited.
- phpmailer project phpmailer, joomla joomla\!, wordpress +2 moreRemote code execution in PHPMailer9.8 Critical
- zend zend-mail, framework +1 morezend-mail remote code execution via Sendmail adapter9.8 Critical
- php phpmailer, joomla joomla\!, wordpress +2 moreRemote code execution in PHPMailer9.8 Critical
- piwigoadmin/languages.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct...7.2 High
- piwigoadmin/batch_manager.php in Piwigo through 2.8.3 allows remote authenticated administrators to...7.2 High
- piwigoCross-site scripting (XSS) vulnerability in admin/plugin.php in Piwigo through 2.8.3 allows...6.1 Medium
- s9y serendipityinclude/functions_installer.inc.php in Serendipity through 2.0.5 is vulnerable to File Inclusion...9.8 Critical
- linux kernelThe sg implementation in the Linux kernel through 4.9 does not properly restrict write operations...7.0 High
- qemuQEMU (aka Quick Emulator) built with the Rocker switch emulation support is vulnerable to an off...6.5 Medium
- gstreamerThe _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers...5.5 Medium
- gstreamerThe gst_mpegts_section_new function in the mpegts decoder in GStreamer before 1.10.2 allows...7.5 High
- dotclearCross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear...5.4 Medium
- shutter-project shutter/usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute...7.8 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the kernel networking subsystem could enable a local...7.0 High
- pivotal software spring frameworkPivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized7.5 High
- vmware esxiCross-site scripting (XSS) vulnerability in the Host Client in VMware vSphere Hypervisor (aka...5.4 Medium
- vmware vrealize operationsThe Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote...8.5 High
- vmware fusion, fusion pro, workstation player +1 more +3 moreThe drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware...8.8 High
- vmware vrealize automationThe Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and...9.1 Critical
- vmware vcenter serverVMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read...7.7 High
- vmware vsphere clientVMware vSphere Client 5.5 before U3e and 6.0 before U2a allows remote vCenter Server and ESXi...5.8 Medium
- vmware vrealize operationsVMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain...10.0 Critical
- vmware vsphere data protectionVMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly...9.8 Critical
- vmware horizon viewDirectory traversal vulnerability in the Connection Server in VMware Horizon View 5.x before 5.3...5.3 Medium
- vmware workstation player, workstation pro +1 moreThe installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x...7.8 High
- vmware workstation player, workstation pro +1 moreUntrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0...7.8 High
- vmware workstation player, workstation pro +1 moretpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before...7.8 High
- vmware workstation player, workstation pro +1 moreVMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on...7.8 High
- vmware workstation player, workstation pro +1 moreVMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on...7.8 High
- vmware workstation player, workstation pro +1 moreMultiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware...7.8 High
- vmware toolsThe graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local...7.8 High
- vmware toolsThe graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local...7.8 High
- vmware identity manager, vrealize automation +1 moreVMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote...5.3 Medium
- vmware fusionVMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows...5.5 Medium
- vmware toolsVMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is...5.5 Medium
- hp thinproHP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard...7.8 High
- gstreamerThe gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in...5.5 Medium
- gstreamerThe FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service ...7.5 High
- gstreamerThe flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote...5.5 Medium
libxiDebianlibxi - regression updateNo score- qemu, debian linux +1 moreMemory leak in hw/9pfs/9p-proxy.c in QEMU (aka Quick Emulator) allows local privileged guest OS...6.5 Medium
- qemu, debian linux +1 moreMemory leak in hw/9pfs/9p-handle.c in QEMU (aka Quick Emulator) allows local privileged guest OS...6.5 Medium
- qemu, debian linux +1 moreMemory leak in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users...6.5 Medium
- qemuMemory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick...6.5 Medium
- pivotal software rabbitmq, broadcom rabbitmq server +1 moreAn issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ...9.8 Critical
- qemuQEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to a...6.5 Medium
- qemuQEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an...6.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is...5.5 Medium
- linux kernelkernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks...7.0 High
- linux kernelkernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks...7.0 High
- Show moreLoading…