CVEs published in January 2017
1,024 vulnerabilities, 167 critical, 2 exploited.
- paessler prtg network monitorXML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote...6.5 Medium
- treasuryxpress c2boxB.A.S C2Box before 4.0.0 (r19171) relies on client-side validation, which allows remote attackers...7.5 High
- nodejs node.jsXSS Filter Bypass via Encoded URL in validator6.1 Medium
- vivint sky control panel firmwareVivint Sky Control Panel 1.1.1.9926 allows remote attackers to enable and disable the alarm...9.8 Critical
- nodejs node.jsMultiple XSS Filter Bypasses in validator6.1 Medium
- nodejs node.jsModerate severity vulnerability that affects validator6.1 Medium
- nodejs node.jsModerate severity vulnerability that affects validator6.1 Medium
- nodejs node.jsModerate severity vulnerability that affects validator6.1 Medium
- eclinicalworks patient portalAn issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL...8.8 High
- eclinicalworks patient portalAn issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL...9.8 Critical
- micro focus international open enterprise serverRemote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read...7.5 High
- hyperHeaders containing newline characters can split messages in hyper5.3 Medium
- metalgenix genixcmsSQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote...9.8 Critical
- metalgenix genixcmsSQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users...9.8 Critical
- foxitsoftware foxit reader, phantompdf +1 moreThe ConvertToPDF plugin in Foxit Reader before 8.2 and PhantomPDF before 8.2 on Windows, when the...8.1 High
- oneplus oxygenosAn issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can...8.1 High
- b2evolutionCross-site scripting (XSS) vulnerability in plugins/markdown_plugin/_markdown.plugin.php in...5.4 Medium
- fiberhome fengine s5800 firmwareAn issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker...5.9 Medium
- b2evolutionThe patch for directory traversal (CVE-2017-5480) in b2evolution version 6.8.4-stable has a...9.1 Critical
- emc isilon onefsEMC Isilon OneFS 8.0.0.0, EMC Isilon OneFS 7.2.1.0 - 7.2.1.2, EMC Isilon OneFS 7.2.0.x, EMC...6.7 Medium
- emc documentum administrator, documentum capital projects, documentum taskspace +1 more +3 moreEMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC...6.1 Medium
- akamai netsessionAkamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without...9.8 Critical
- systemd project systemdA flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created...7.8 High
- hiteksoftware automizeInformation Disclosure can occur in sshProfiles.jsd in Hitek Software's Automize because of the...5.9 Medium
- hiteksoftware automizeInformation Disclosure can occur in encryptionProfiles.jsd in Hitek Software's Automize because...8.1 High
- hiteksoftware automizehitek.jar in Hitek Software's Automize uses weak encryption when encrypting SSH/SFTP and...8.1 High
- hiteksoftware automizeInformation Disclosure can occur in Hitek Software's Automize 10.x and 11.x passManager.jsd....8.1 High
- libtiffLibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in...8.8 High
- libpngThe png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4...7.5 High
- oracle mysql, mysql server, debian linux +1 more +3 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB)....6.5 Medium
- apache groovy, redhat enterprise linux server +1 moreDeserialization of Untrusted Data in Groovy9.8 Critical
- libimobiledevice libplistThe main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to...9.1 Critical
- netbsdmail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to...7.8 High
- viprinet multichannel vpn router 300 firmwareThe hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does...7.5 High
- viprinet multichannel vpn router 300 firmwareThe hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does...5.9 Medium
- viprinet multichannel vpn router 300 firmwareMultiple cross-site scripting (XSS) vulnerabilities in the old and new interfaces in Viprinet...6.1 Medium
- intelliants subrionSubrion CMS PHP Object Injection9.8 Critical
- getsymphony symphonyCross-site scripting (XSS) vulnerability in template/usererror.missing_extension.php in Symphony...6.1 Medium
- getsymphony symphonyDirectory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS...5.3 Medium
- moodleMoodle Cross-site Scripting in assignment submission page6.1 Medium
- moodleMoodle Incorrect sanitation of attributes in forums5.3 Medium
- moodleIn Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.5.3 Medium
- moodleIn Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.4.3 Medium
- moodleMoodle Unauthenticated Access5.3 Medium
- moodleMoodle Weak Password Recovery Mechanism for Forgotten Password7.3 High
- moodleMoodle sensitive information disclosure5.4 Medium
- moodleMoodle Does Not Escape Characters In Email Headers5.4 Medium
- moodleMoodle Glossary search displays entries without checking user permissions to view them5.3 Medium
- tiki tikiwiki cms\/groupwareA vulnerability in Tiki Wiki CMS 15.2 could allow a remote attacker to read arbitrary files on a...7.5 High
- firejail project firejailFirejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a...8.8 High
- Show moreLoading…