Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2017
January

CVEs published in January 2017

1,024 vulnerabilities, 167 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

b2evolutionCross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote attackers...CVE-2016-71496.1 MediumJanuary 18, 2017
unrealircdThe m_authenticate function in modules/m_sasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0...CVE-2016-7144Public exploit8.1 HighJanuary 18, 2017
samsung mobileThe SmartCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6...CVE-2016-65277.8 HighJanuary 18, 2017
samsung mobileThe SpamCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6...CVE-2016-65267.8 HighJanuary 18, 2017
hexchat project hexchatStack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2...CVE-2016-2233Public exploitFix availableEPSS 34.1%7.5 HighJanuary 18, 2017
hexchat project hexchatDirectory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to...CVE-2016-2087Public exploitFix available7.4 HighJanuary 18, 2017
exponentcms exponent cmsExponent CMS before 2.3.7 does not properly restrict the types of files that can be uploaded,...CVE-2015-86846.1 MediumJanuary 18, 2017
exponentcms exponent cmsCross-site scripting (XSS) vulnerability in Reset Your Password module in Exponent CMS before 2.3...CVE-2015-86676.1 MediumJanuary 18, 2017
google androidAn elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local...CVE-2014-99107.0 HighJanuary 18, 2017
google androidAn elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local...CVE-2014-99097.0 HighJanuary 18, 2017
oracle mysql, mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2017-3320Fix available2.4 LowJanuary 18, 2017
oracle mysql, mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: X Plugin)....CVE-2017-3319Fix available3.1 LowJanuary 18, 2017
oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling...CVE-2017-3318Fix available4.0 MediumJanuary 18, 2017
oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported...CVE-2017-3317Fix available4.0 MediumJanuary 18, 2017
oracle mysql, mysql server, canonical ubuntu linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM)....CVE-2017-3313Fix available4.7 MediumJanuary 18, 2017
oracle mysql, mysql server, debian linux +1 more +3 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)....CVE-2017-3312Fix available6.7 MediumJanuary 18, 2017
oracle mysql, debian linux, mariadb +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)....CVE-2017-3291Fix available6.3 MediumJanuary 18, 2017
oracle mysql, mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2017-3273Fix available6.5 MediumJanuary 18, 2017
oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)....CVE-2017-3265Fix available5.6 MediumJanuary 18, 2017
oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2017-3258Fix available6.5 MediumJanuary 18, 2017
oracle mysql, mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2017-3256Fix available6.5 MediumJanuary 18, 2017
oracle mysql, mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-3251Fix available4.9 MediumJanuary 18, 2017
oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....CVE-2017-3244Fix available6.5 MediumJanuary 18, 2017
oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets)....CVE-2017-3243Fix available4.4 MediumJanuary 18, 2017
oracle java se, java se embedded, jrockit +2 more +4 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-3241Public exploitFix availableEPSS 32.8%9.0 CriticalJanuary 18, 2017
oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-3238Fix available6.5 MediumJanuary 18, 2017
oracle java se, java se embedded, jdk +1 more +3 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2017-3231Fix available4.3 MediumJanuary 18, 2017
oracle mysql, mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2016-8327Fix available4.4 MediumJanuary 18, 2017
oracle mysql, mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2016-8318Fix available6.8 MediumJanuary 18, 2017
linux kernelcrypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of...CVE-2016-10147Fix available5.5 MediumJanuary 18, 2017
netgear ac1450 firmware, d6220 firmware, d6300 firmware +11 more +13 moreAn issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2,...CVE-2017-5521In KEVPublic exploitEPSS 89.4%8.1 HighJanuary 17, 2017
metalgenix genixcmsThe media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file...CVE-2017-55208.8 HighJanuary 17, 2017
metalgenix genixcmsSQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers...CVE-2017-55199.8 CriticalJanuary 17, 2017
metalgenix genixcmsThe media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF...CVE-2017-55187.4 HighJanuary 17, 2017
metalgenix genixcmsSQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote...CVE-2017-55179.8 CriticalJanuary 17, 2017
metalgenix genixcmsMultiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8...CVE-2017-55166.1 MediumJanuary 17, 2017
metalgenix genixcmsCross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8...CVE-2017-55155.4 MediumJanuary 17, 2017
saltstack saltSalt allows deleted minions to read or write to minions with the same idCVE-2016-9639Fix available9.1 CriticalJanuary 17, 2017
imagemagick, debian linux +1 morecoders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an...CVE-2017-5511Fix available9.8 CriticalJanuary 17, 2017
imagemagick, debian linux +1 morecoders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD...CVE-2017-5510Fix available7.8 HighJanuary 17, 2017
imagemagickHeap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x...CVE-2017-5508Fix available5.5 MediumJanuary 17, 2017
imagemagick, debian linux +1 moreMemory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote...CVE-2017-5507Fix available7.5 HighJanuary 17, 2017
imagemagick, debian linux +1 moreDouble free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have...CVE-2017-5506Fix available7.8 HighJanuary 17, 2017
iucode-tool, debian linux +1 moreiucode-tool: heap buffer overflow on -tr loaderCVE-2017-0357Fix available9.8 CriticalJanuary 17, 2017
kde ark, fedoraproject fedora +1 moreark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an...CVE-2017-5330Fix available7.8 HighJanuary 16, 2017
phpmailer project phpmailerLocal file disclosure in PHPMailerCVE-2017-5223Public exploitFix available5.5 MediumJanuary 16, 2017
cmsmadesimple cms made simpleCross-site request forgery (CSRF) vulnerability in CMS Made Simple before 2.1.6 allows remote...CVE-2016-79048.0 HighJanuary 16, 2017
otrsCross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.3.x before 3.3.16...CVE-2016-9139Fix available6.1 MediumJanuary 16, 2017
botan project botanIn Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which...CVE-2016-9132Fix available9.8 CriticalJanuary 16, 2017
b2evolutionMultiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution...CVE-2017-54945.4 MediumJanuary 15, 2017
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open