CVEs published in January 2017
1,024 vulnerabilities, 167 critical, 2 exploited.
- tcpdumpThe UDP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:udp_print().9.8 Critical
- tcpdumpThe RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtp_print().9.8 Critical
- tcpdumpThe RTCP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtcp_print().9.8 Critical
- tcpdumpThe PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print().9.8 Critical
- tcpdumpThe PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum().9.8 Critical
- tcpdumpThe MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().9.8 Critical
- tcpdumpThe LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print().9.8 Critical
- tcpdumpThe Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c...9.8 Critical
- tcpdumpThe IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().9.8 Critical
- tcpdumpThe IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c...9.8 Critical
- tcpdumpThe Ethernet parser in tcpdump before 4.9.0 has a buffer overflow in print-ether.c...9.8 Critical
- tcpdumpThe compressed SLIP parser in tcpdump before 4.9.0 has a buffer overflow in print-sl.c...9.8 Critical
- tcpdumpThe ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oam_print().9.8 Critical
- tcpdumpThe ARP parser in tcpdump before 4.9.0 has a buffer overflow in print-arp.c:arp_print().9.8 Critical
- tcpdumpThe AH parser in tcpdump before 4.9.0 has a buffer overflow in print-ah.c:ah_print().9.8 Critical
- libical project libical, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 morelibical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted...5.5 Medium
- aerospike database serverAn exploitable stack-based buffer overflow vulnerability exists in the querying functionality of...9.8 Critical
- aerospike database serverAn exploitable stack-based buffer overflow vulnerability exists in the querying functionality of...9.8 Critical
- aerospike database serverAn exploitable out-of-bounds read vulnerability exists in the client message-parsing...8.2 High
- fabrice bellard libbpgAn exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in...7.5 High
- lenovo transition, lenovo group ltd. transition application +1 morePrivilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and...7.8 High
- lenovo flex system x240 m5 bios, flex system x280 m6 bios, flex system x480 x6 bios +9 more +11 moreThe BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of...4.9 Medium
- lenovo slim usb keyboard driver, edge keyboard driver, lenovo group ltd. edge and slim usb keyboard driver +2 moreUnquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions...7.8 High
- opera browserCharacters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order...6.1 Medium
- sodiumoxide project sodiumoxidescalarmult() vulnerable to degenerate public keys6.5 Medium
dbus-1SUSE,dbus-1-x11SUSE +1 moreSecurity update for dbus-1No score- cisco ioxA vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could...5.3 Medium
- cisco nx-osA vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing...6.1 Medium
- cisco iosA vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches...4.7 Medium
- cisco unified communications managerA vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote...6.1 Medium
- cisco email security applianceA vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security...5.8 Medium
- cisco webex meeting centerA vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated,...5.4 Medium
- cisco unified communications managerA cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of...6.1 Medium
- cisco webex meetings serverA vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to...5.3 Medium
- cisco webex meetings serverA vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to...7.2 High
- cisco webex meetings serverA vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to...5.4 Medium
- cisco webex meetings serverA vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to...8.8 High
- cisco netflow generation applianceA vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could...6.1 Medium
- cisco aironet access point softwareA Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the...4.3 Medium
- cisco aironet access point softwareA Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility...4.3 Medium
- cisco hybrid meeting serverA vulnerability in Cisco Hybrid Meeting Server could allow an unauthenticated, remote attacker to...8.8 High
- cisco asr 5000 series softwareAn IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000...5.3 Medium
openjdk-7Debianopenjdk-7 - security updateNo score- openssl, nodejs node.js +1 moreBN_mod_exp may produce incorrect results on x86_645.9 Medium
- openssl, nodejs node.js +1 moreTruncated packet could crash via OOB read7.5 High
- libmingHeap-based buffer overflow in the parseSWF_RGBA function in parser.c in the listswf tool in...7.8 High
- libmingHeap-based buffer overflow in the parseSWF_DEFINEFONT function in parser.c in the listswf tool in...7.8 High
- libmingThe dumpBuffer function in read.c in the listswf tool in libming 0.4.7 allows remote attackers to...5.5 Medium
- libmingThe _iprintf function in outputtxt.c in the listswf tool in libming 0.4.7 allows remote attackers...5.5 Medium
- libgdThe gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote...5.5 Medium
- Show moreLoading…