CVEs published in January 2017
1,024 vulnerabilities, 167 critical, 2 exploited.
- b2evolutionDirectory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows...8.1 High
- wordpresswp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not...7.5 High
- wordpressCross-site request forgery (CSRF) vulnerability in the widget-editing accessibility-mode feature...8.8 High
- wordpresswp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting...5.3 Medium
- wordpressCross-site scripting (XSS) vulnerability in the theme-name fallback functionality in wp-includes...6.1 Medium
- wordpressCross-site request forgery (CSRF) vulnerability in WordPress before 4.7.1 allows remote attackers...8.8 High
- wordpressMultiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress...6.1 Medium
- wordpresswp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation...5.3 Medium
python-bottleDebianpython-bottle - regression updateNo scorewireless-regdbDebianwireless-regdb - new upstream versionNo scorepython-bottleDebianpython-bottle - regression updateNo scoregolangMageiaUpdated golang package fixes security vulnerabilityNo score- brocade network advisorA Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor...7.5 High
- brocade network advisorA Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor...7.5 High
- brocade network advisorA Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor...9.8 Critical
- broadcom brocade network advisorA Directory Traversal vulnerability in FileReceiveServlet in the Brocade Network Advisor versions...9.8 Critical
- brocade virtual traffic managerA CSRF vulnerability in Brocade Virtual Traffic Manager versions released prior to and including...8.0 High
- s9y serendipitySerendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin.8.8 High
- s9y serendipitycomment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments.8.8 High
- s9y serendipityOpen redirect vulnerability in comment.php in Serendipity through 2.0.5 allows remote attackers...6.1 Medium
- ntop ntopngCross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to...8.8 High
- ietf ipv6An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB)...8.6 High
gcc-mozillaDebiangcc-mozilla - new packageNo scorelibx11Debianlibx11 - regression updateNo score- linux kernelarch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive...7.1 High
- liferay portalShell command injection in Liferay Portal8.8 High
- google androidAn information disclosure vulnerability in Audioserver could enable a local malicious application...5.5 Medium
- ntpntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of...7.5 High
- otr gajim-otrThe OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote...7.5 High
- matrixsslThe pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular...5.9 Medium
- google androidAn elevation of privilege vulnerability in the bootloader could enable a local attacker to...5.5 Medium
- matrixsslThe pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular...5.9 Medium
- matrixsslThe pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of...7.5 High
- matrixsslThe pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of...7.5 High
- freedesktop libbsd, canonical ubuntu linux, debian linux +1 more +3 moreOff-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have...9.8 Critical
- apache stormApache Storm remote code execution vulnerability9.8 Critical
webminMageiaUpdated webmin package fixes security vulnerabilityNo score- dbd-mysql project dbd-mysqlThe DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support,...5.9 Medium
- foxitsoftware foxit pdf toolkitMemory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of...7.8 High
- blackberry appliance-x, workspaces vapp +1 moreA reflected cross-site scripting vulnerability in the BlackBerry WatchDox Server components...6.1 Medium
- cloudfoundry capi-release, cf-release +1 moreAn issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI...7.5 High
- blackberry enterprise serviceAn information disclosure vulnerability in the Core and Management Console in BlackBerry...8.1 High
- blackberry enterprise serviceA spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2...8.2 High
- artifex mujsAn integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex...9.8 Critical
- zoneminderInformation disclosure and authentication bypass vulnerability exists in the Apache HTTP Server...7.5 High
- adups fotaAn issue was discovered on BLU R1 HD devices with Shanghai Adups software. The two package names...7.8 High
- adups fotaAn issue was discovered on BLU Advance 5.0 and BLU R1 HD devices with Shanghai Adups software....7.8 High
- adups fotaAn issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider...7.8 High
- adups fotaAn issue was discovered on BLU R1 HD devices with Shanghai Adups software. The content provider...7.8 High
- lg mobileAn issue was discovered on LG devices using the MTK chipset with L(5.0/5.1), M(6.0/6.0.1), and N...5.5 Medium
- Show moreLoading…