CVEs published in January 2017

1,024 vulnerabilities, 167 critical, 2 exploited.

• docker Information Exposure in RunC CVE-2016-9962 Fix available 6.4 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more Cross-site scripting (XSS) vulnerability in the Users module in the Admin control panel in MyBB ... CVE-2016-9421 6.1 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers... CVE-2016-9420 9.8 CriticalJanuary 31, 2017
• mybb Cross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard)... CVE-2016-9419 6.1 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows... CVE-2016-9418 7.5 HighJanuary 31, 2017
• mybb merge system, mybb +1 more The fetch_remote_file function in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System... CVE-2016-9417 7.4 HighJanuary 31, 2017
• mybb merge system, mybb +1 more SQL injection vulnerability in the users data handler in MyBB (aka MyBulletinBoard) before 1.8.8... CVE-2016-9416 9.8 CriticalJanuary 31, 2017
• mybb merge system, mybb +1 more MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows... CVE-2016-9415 7.5 HighJanuary 31, 2017
• mybb merge system, mybb +1 more MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers... CVE-2016-9414 7.5 HighJanuary 31, 2017
• mybb merge system, mybb +1 more The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1... CVE-2016-9413 6.5 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to... CVE-2016-9412 9.8 CriticalJanuary 31, 2017
• mybb merge system, mybb +1 more The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1... CVE-2016-9411 5.3 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote... CVE-2016-9410 7.5 HighJanuary 31, 2017
• mybb merge system, mybb +1 more Cross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard)... CVE-2016-9409 6.1 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more Cross-site scripting (XSS) vulnerability in the Mod control panel in MyBB (aka MyBulletinBoard)... CVE-2016-9408 6.1 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB... CVE-2016-9407 6.1 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more Cross-site scripting (XSS) vulnerability in the User control panel in MyBB (aka MyBulletinBoard)... CVE-2016-9406 6.1 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more Cross-site scripting (XSS) vulnerability in member validation in MyBB (aka MyBulletinBoard)... CVE-2016-9405 6.1 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB... CVE-2016-9404 6.1 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more newreply.php in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows... CVE-2016-9403 9.8 CriticalJanuary 31, 2017
• mybb merge system, mybb +1 more SQL injection vulnerability in the moderation tool in MyBB (aka MyBulletinBoard) before 1.8.7 and... CVE-2016-9402 9.8 CriticalJanuary 31, 2017
• tenable nessus Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9 allows remote authenticated... CVE-2016-9260 5.4 MediumJanuary 31, 2017
• potrace project potrace The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified... CVE-2016-8686 Fix available 7.8 HighJanuary 31, 2017
• potrace project potrace The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of... CVE-2016-8685 Fix available 5.5 MediumJanuary 31, 2017
• atlassian jira Cross-site scripting (XSS) vulnerability in includes/decorators/global-translations.jsp in... CVE-2016-6285 6.1 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8... CVE-2015-8977 7.5 HighJanuary 31, 2017
• mybb merge system, mybb +1 more Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x... CVE-2015-8976 6.1 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more Cross-site scripting (XSS) vulnerability in the error handler in MyBB (aka MyBulletinBoard)... CVE-2015-8975 6.1 MediumJanuary 31, 2017
• mybb merge system, mybb +1 more SQL injection vulnerability in the Group Promotions module in the admin control panel in MyBB ... CVE-2015-8974 10.0 CriticalJanuary 31, 2017
• mybb merge system, mybb +1 more xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge... CVE-2015-8973 8.3 HighJanuary 31, 2017
• joyent smartos An exploitable denial of service exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file... CVE-2016-9039 6.2 MediumJanuary 31, 2017
• phpmyadmin phpMyAdmin server-side request forgery (SSRF) CVE-2016-6621 Fix available 8.6 HighJanuary 31, 2017
• openntpd OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote... CVE-2016-5117 Fix available 5.9 MediumJanuary 31, 2017
• mrf web panel An issue was discovered in Radisys MRF Web Panel (SWMS) 9.0.1. The MSM_MACRO_NAME POST parameter... CVE-2016-10043 Public exploit 10.0 CriticalJanuary 31, 2017
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 more An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may... CVE-2016-9249 7.5 HighJanuary 31, 2017
• google chrome Insufficient data validation in V8 in Google Chrome prior to 56.0.2924.76 allowed a remote... CVE-2017-5028 Fix available 6.5 MediumJanuary 31, 2017
• google chrome Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for... CVE-2017-5027 Fix available 4.3 MediumJanuary 31, 2017
• google chrome A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924... CVE-2017-5021 Fix available 4.3 MediumJanuary 31, 2017
• google chrome Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android,... CVE-2017-5020 Fix available 6.1 MediumJanuary 31, 2017
• google chrome Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had... CVE-2017-5018 Fix available 6.1 MediumJanuary 31, 2017
• google chrome Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for... CVE-2017-5016 Fix available 6.5 MediumJanuary 31, 2017
• google chrome Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android,... CVE-2017-5015 Fix available 6.5 MediumJanuary 31, 2017
• google chrome Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non... CVE-2017-5013 Fix available 6.5 MediumJanuary 31, 2017
• samsung exynos fimg2d NULL pointer dereference in Samsung Exynos fimg2d driver for Android L(5.0/5.1) and M(6.0) allows... CVE-2016-6604 9.8 CriticalJanuary 30, 2017
• trendmicro virtual mobile infrastructure The handle_certificate function in /vmi/manager/engine/management/commands/apns_worker.py in... CVE-2016-6270 8.8 HighJanuary 30, 2017
• trendmicro smart protection server Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before... CVE-2016-6269 9.1 CriticalJanuary 30, 2017
• trendmicro smart protection server Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before... CVE-2016-6268 7.8 HighJanuary 30, 2017
• trendmicro smart protection server SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106,... CVE-2016-6267 Public exploit EPSS 54.9% 8.8 HighJanuary 30, 2017
• trendmicro smart protection server ccca_ajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before... CVE-2016-6266 8.8 HighJanuary 30, 2017
• putty Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute... CVE-2016-6167 7.8 HighJanuary 30, 2017
• Show olderLoading…