CVEs published in January 2017
1,024 vulnerabilities, 167 critical, 2 exploited.
- ibm websphere application server, vmware spring security +1 moreSecurity Constraint Bypass in Spring Security7.5 High
- emc scaleioAn issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the...5.5 Medium
- emc scaleioAn issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker...5.5 Medium
- emc scaleioAn issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker...8.8 High
- foxit readerA large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be...6.8 Medium
- hyland software, inc. perceptive document filtersAn exploitable heap overflow vulnerability exists in the Compound Binary File Format (CBFF)...7.8 High
- hyland software, inc. perceptive document filtersAn exploitable out-of-bounds write exists in the Bzip2 parsing of the Lexmark Perspective...9.8 Critical
- hyland software, inc. perceptive document filtersAn exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document...8.4 High
- kaspersky anti-virus, bitdefender total security, kaspersky internet security +2 moreA local denial of service vulnerability exists in window broadcast message handling functionality...5.5 Medium
- bitdefender internet securityA denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky...5.5 Medium
- bitdefender total securityMultiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security...5.5 Medium
- bitdefender internet securityA denial of service vulnerability exists in the syscall filtering functionality of Kaspersky...5.5 Medium
- bitdefender internet securityA denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky...5.5 Medium
- hancom office 2014When opening a Hangul HShow Document (.hpt) and processing a structure within the document,...7.8 High
- hancom office, office 2014 +1 moreWhen opening a Hangul Hcell Document (.cell) and processing a record that uses the CSSValFormat...7.8 High
- hancom office, office 2014 +1 moreWhen opening a Hangul Hcell Document (.cell) and processing a particular record within the...7.8 High
- hancom office, office 2014 +1 moreWhen opening a Hangul Hcell Document (.cell) and processing a property record within the Workbook...7.8 High
- hancom office, office 2014 +1 moreWhen opening a Hangul HShow Document (.hpt) and processing a structure within the document,...7.8 High
- hancom office, office 2014 +1 moreWhen opening a Hangul HShow Document (.hpt) and processing a structure within the document,...7.8 High
- hancom office, office 2014 +1 moreWhen opening a Hangul HShow Document (.hpt) and processing a structure within the document,...7.8 High
- bluestacks app player, bluestacks +1 moreA local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App...8.4 High
- hackerone rubyType confusion exists in two methods of Ruby's WIN32OLE class, ole_invoke and ole_query_interface...9.8 Critical
- trane comfortlink ii firmware, comfortlink ii scc firmware +1 moreAn exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware...9.8 Critical
- trane comfortlink ii scc firmware, comfortlink ii firmware +1 moreA design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote...9.8 Critical
- gnu bash, debian linux, redhat enterprise linux desktop +5 more +7 morepopd in bash might allow local users to bypass the restricted shell and cause a use-after-free...5.5 Medium
- unrtf project unrtfMultiple stack-based buffer overflows in unrtf 0.21.9 allow remote attackers to cause a denial-of...7.5 High
- irssiIrssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds...7.5 High
- irssiIrssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds...7.5 High
- irssi, debian linux +1 moreUse-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of...7.5 High
- irssi, debian linux +1 moreThe nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service ...7.5 High
- hackerone rubyAn exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize"...9.8 Critical
- hackerone ruby, tcl tcl/tk +1 moreType confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different...9.8 Critical
- tenable nessusCross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.3 allows remote...5.4 Medium
- mcafee security information and event managementAuthentication bypass vulnerability in Enterprise Security Manager (ESM) and License Manager (LM)...4.4 Medium
- matrixsslThe x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a...7.5 High
- matrixsslMatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read)...7.5 High
- matrixsslHeap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary...9.8 Critical
- genexia drgosThe Parental Control panel in Genexis devices with DRGOS before 1.14.1 allows remote...8.8 High
kopeteSUSESecurity update for kopeteNo scorekopeteSUSESecurity update for kopeteNo score- schedmd slurmThe _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17...8.1 High
python-cryptoDebianpython-crypto - regression updateNo score- linux kernelThe ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the...7.8 High
- dotclearDotclear before 2.10.3, when the Host header is not part of the web server routing process,...3.7 Low
- dotclearUnrestricted file upload vulnerability in the fileUnzip->unzip method in Dotclear before 2.10.3...8.8 High
- veritas netbackup appliance firmwarescripts/license.pl in Veritas NetBackup Appliance 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1...9.8 Critical
- arista dcs-7050q eos software, dcs-7050s eos software, dcs-7050t eos software +2 moreArista EOS 4.15 before 4.15.8M, 4.16 before 4.16.7M, and 4.17 before 4.17.0F on DCS-7050 series...7.5 High
- docker** DISPUTED ** The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause...6.5 Medium
- netgear arlo base station firmware, arlo q camera firmware, arlo q plus camera firmware +2 moreNETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8...8.1 High
- netgear arlo base station firmware, arlo q camera firmware, arlo q plus camera firmware +2 moreNETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8...9.8 Critical
- Show moreLoading…