CVEs published in January 2017
1,024 vulnerabilities, 167 critical, 2 exploited.
- libminglistmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file,...6.5 Medium
- libmingThe printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a...5.5 Medium
- libmingBuffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote...5.5 Medium
- libgdDouble free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd)...9.8 Critical
- canonical ubuntu linux, debian linux, littlecms little cms color engine +16 more +18 moreThe Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to...7.1 High
- wiresharkIn Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop,...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite...7.5 High
- autodesk fbx software development kitMultiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute...9.8 Critical
- autodesk fbx software development kitMultiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute...9.8 Critical
- autodesk fbx software development kitImproper handling in the Autodesk FBX-SDK before 2017.1 of type mismatches and previously deleted...9.8 Critical
- autodesk fbx software development kitMultiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute...8.8 High
- autodesk fbx software development kitMultiple buffer overflows in the Autodesk FBX-SDK before 2017.1 can allow attackers to execute...9.8 Critical
- pagekitPagekit Weak Password Recovery Mechanism for Forgotten Password7.5 High
- emc rsa security analyticsEMC RSA Security Analytics 10.5.3 and 10.6.2 contains fixes for a Reflected Cross-Site Scripting...6.1 Medium
- emc avamar data store, avamar virtual edition +1 moreEMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3.0 and 7.3.1 contain a...6.7 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in the Media Decoder when working with media files when some...9.8 Critical
- mozilla firefoxThe "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla...6.1 Medium
- mozilla firefoxSpecial "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreThe JSON viewer in the Developer Tools uses insecure methods to create a communication channel...9.8 Critical
- mozilla firefoxWebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the...6.1 Medium
- mozilla firefoxA STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used...7.5 High
- mozilla firefoxThe existence of a specifically requested local file can be found due to the double firing of the...3.3 Low
- mozilla firefox, firefox esr, debian linux +6 more +8 moreWebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions...7.3 High
- mozilla firefoxData sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will...7.5 High
- mozilla firefoxProxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with...5.9 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreURLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger...5.3 Medium
- mozilla firefoxFeed preview for RSS feeds can be used to capture errors and exceptions generated by privileged...7.5 High
- mozilla firefoxThe "export" function in the Certificate Viewer can force local filesystem navigation when the ...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA potential use-after-free found through fuzzing during DOM manipulation of SVG content. This...9.8 Critical
- mozilla firefoxUse-after-free vulnerability in Web Animations when interacting with cycle collection found...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreHashed codes of JavaScript objects are shared between pages. This allows for pointer leaks...7.5 High
- mozilla firefoxA memory corruption vulnerability in Skia that can occur when using transforms to make gradients,...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird <...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreJIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential...9.8 Critical
- mozilla firefoxMemory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMemory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed...9.8 Critical
- adobe acrobat, reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and...7.8 High
- adobe acrobat, reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and...7.8 High
- adobe acrobat, reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and...7.8 High
- adobe acrobatAdobe Acrobat Chrome extension version 15.1.0.3 and earlier have a DOM-based cross-site scripting...6.1 Medium
- quaggaAll versions of Quagga, 0.93 through 1.1.0, are vulnerable to an unbounded memory allocation in...7.5 High
- phpThe php_wddx_pop_element function in ext/wddx/wddx.c in PHP 7.0.x before 7.0.15 and 7.1.x before...7.5 High
- phpThe object_common1 function in ext/standard/var_unserializer.c in PHP before 5.6.30, 7.0.x before...7.5 High
- php, debian linux, netapp clustered data ontap +2 moreOff-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and...9.8 Critical
- php, debian linux +1 moreInteger overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and...7.5 High
- phpThe exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15...7.5 High
- hesiod project hesiodThe read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu"...9.8 Critical
- hesiod project hesiodThe hesiod_init function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine...7.0 High
- sap netweaverThe function msp (aka MSPRuntimeInterface) in the P4 SERVERCORE component in SAP AS JAVA allows...7.5 High
- sybase adaptive server enterpriseOdata Server in SAP Adaptive Server Enterprise (ASE) 16 allows remote attackers to cause a denial...7.5 High
- Show moreLoading…