CVEs published in January 2017
1,024 vulnerabilities, 167 critical, 2 exploited.
- adobe flash playerAdobe Flash Player versions 24.0.0.186 and earlier have a security bypass vulnerability related...6.5 Medium
- adobe flash playerAdobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free...8.8 High
- adobe flash playerAdobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free...8.8 High
- adobe flash playerAdobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow...8.8 High
- adobe flash playerAdobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow...8.8 High
- adobe flash playerAdobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow...8.8 High
- adobe flash playerAdobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free...8.8 High
- adobe flash playerAdobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption...8.8 High
- adobe flash playerAdobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption...8.8 High
- adobe flash playerAdobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption...8.8 High
- adobe flash playerAdobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow...8.8 High
- adobe flash playerAdobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption...8.8 High
- adobe flash playerAdobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption...8.8 High
- php, netapp clustered data ontap +1 moreZend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that...9.8 Critical
- gnu gnutls, opensuse leap +1 moreMultiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3...9.8 Critical
- gnu gnutls, opensuse leap +1 moreStack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS...9.8 Critical
- gnu gnutls, opensuse leap +1 moreThe stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x...7.5 High
- gnu gnutls, opensuse leap +1 moreDouble free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26...9.8 Critical
- debian icoutils, canonical ubuntu linux, debian linux +8 more +10 moreInteger overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in...7.8 High
- debian icoutils, canonical ubuntu linux, debian linux +8 more +10 moreThe extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access...7.8 High
- debian icoutils, canonical ubuntu linux, debian linux +2 more +4 moreInteger overflow in the check_offset function in b/wrestool/fileread.c in icoutils before 0.31.1...7.8 High
- isc bindnamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...7.5 High
- isc bindnamed in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a...7.5 High
- isc bind, debian linux, netapp data ontap edge +9 more +11 morenamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...7.5 High
- phpIn all versions of PHP 7, during the unserialization process, resizing the 'properties' hash...9.8 Critical
- microsoft windows 7, windows server 2008, windows vista +2 moreThe Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows...7.5 High
- microsoft sharepoint enterprise server, word +1 moreMicrosoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute...7.8 High
- microsoft edgeMicrosoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the...8.8 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 moreUnder certain conditions for BIG-IP systems using a virtual server with an associated FastL4...5.9 Medium
- mantisbtCross-site scripting (XSS) vulnerability in MantisBT Filter API in MantisBT versions before 1.2...6.1 Medium
- python hpack, hyper +1 moreHPACK Denial of Service vulnerability (HPACK Bomb)7.5 High
- python priority librarypriority vulnerable to denial of service7.5 High
- call-cc http-clientThe "http-client" egg always used a HTTP_PROXY environment variable to determine whether HTTP...7.5 High
- call-cc http-clientThe "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTP_PROXY...7.5 High
- eclinicalworks population healtheClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When...9.8 Critical
- eclinicalworks population healtheClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF)...8.8 High
- eclinicalworks population healtheClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in...8.8 High
- eclinicalworks population healtheClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in...6.1 Medium
- splunkSplunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6...9.8 Critical
python-cryptoDebianpython-crypto - updateNo score- hp ethernet 10gb 2-port 562flr-sfp\+, ethernet 10gb 2-port 562sfp\+, ethernet 10gb 4-port 563sfp\+ +26 more +28 moreA Denial of Service in Intel Ethernet Controller's X710/XL710 with Non-Volatile Memory Images...5.9 Medium
- dlink dgs-1100 firmwareD-Link DGS-1100 devices with Rev.B firmware 1.01.018 have a hardcoded SSL private key, which...8.1 High
- samsung mobileInstalling a zero-permission Android application on certain Samsung Android devices with KK(4.4),...5.5 Medium
- netop remote controlStack-based buffer overflow vulnerability in Netop Remote Control versions 11.53, 12.21 and prior...5.5 Medium
- icoutils project icoutils, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to...8.8 High
- linuxcontainers lxcAn issue was discovered in Linux Containers (LXC) before 2016-02-22. When executing a program via...8.6 High
- jasper project jasper, fedoraproject fedora, opensuse leap +3 more +5 moreThe jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to...7.5 High
- jasper project jasperThe jas_seq2d_create function in jas_seq.c in JasPer before 1.900.25 allows remote attackers to...5.5 Medium
- apache tomcatConcurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat7.5 High
- pivotal software gemfire for pivotal cloud foundryAn issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x...9.8 Critical
- Show moreLoading…