CVEs published in January 2017
1,024 vulnerabilities, 167 critical, 2 exploited.
- awebsupport aweb cart watching system for virtuemartSQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2...9.8 Critical
- woocommerceCross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.6.9 for WordPress...4.8 Medium
python-cryptoDebianpython-crypto - regression updateNo score- phpThe unserialize implementation in ext/standard/var.c in PHP 7.x before 7.0.14 allows remote...9.8 Critical
- openbsd opensshThe shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH...7.8 High
- openbsd opensshauthfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on...5.5 Medium
- openbsd opensshsshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain...7.0 High
- openbsd opensshUntrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows...7.3 High
- phpThe get_icu_disp_value_src_php function in ext/intl/locale/locale_methods.c in PHP before 5.3.29,...9.8 Critical
- html5libCross-site Scripting in html5lib6.1 Medium
- html5libImproper Neutralization of Input During Web Page Generation in html5lib6.1 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 moreVirtual servers in F5 BIG-IP systems 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2, when...5.9 Medium
- western digital mycloud nasUnauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11...9.8 Critical
- netgear fvs318gv2 firmware, fvs318n firmware, fvs336gv3 firmware +1 more +3 moreDirectory traversal vulnerability in scgi-bin/platform.cgi on NETGEAR FVS336Gv3, FVS318N,...6.5 Medium
- piwigoadmin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to...9.8 Critical
libphp-phpmailerDebianlibphp-phpmailer - regression updateNo scorelibphp-phpmailerDebianlibphp-phpmailer - regression updateNo score- western digital mycloud nasUnauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11...9.8 Critical
- quickheal antivirus pro, internet security, total security +2 moreStack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total...9.8 Critical
- borgBorg (aka BorgBackup) before 1.0.9 has a flaw in the way duplicate archive names were processed...5.3 Medium
- borg project borgBorg (aka BorgBackup) before 1.0.9 has a flaw in the cryptographic protocol used to authenticate...5.3 Medium
- forgerock openamXML External Entity (XXE) Vulnerability in /SSOPOST/metaAlias/%realm%/idpv2 in OpenAM - Access...7.5 High
- genixcmsGeniXCMS SQL injection vulnerability7.3 High
- dlitz pycrypto, fedoraproject fedora +1 moreBuffer Overflow in pycrypto9.8 Critical