Skip to content
OpenAdvisories

Archive

12 January 2016

Vulnerabilities first published on this day (UTC), newest first.

← December 2015 2016 / January /12 February 2016 →
  1. 112
  2. 227
  3. 316
  4. 433
  5. 510
  6. 613
  7. 7 
  8. 847
  9. 916
  10. 105
  11. 1110
  12. 1224
  13. 1328
  14. 1420
  15. 1540
  16. 167
  17. 177
  18. 188
  19. 1911
  20. 2013
  21. 21216
  22. 2215
  23. 232
  24. 24 
  25. 2511
  26. 2612
  27. 2715
  28. 281
  29. 2919
  30. 3015
  31. 3116
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2015-7393

    dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-I…

  • Unscored —
    CVE-2015-7759

    BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtu…

  • Unscored —
    CVE-2015-8673

    Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not…

  • Unscored —
    CVE-2015-8672

    The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video con…

  • Unscored —
    CVE-2015-8397

    The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) …

    gdcm gdcm Debian Ubuntu
  • Unscored —
    CVE-2015-8611

    BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 700…

  • Unscored —
    CVE-2015-8396 Public exploit EPSS 16%

    Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.c…

    gdcm gdcm Debian Ubuntu
  • Unscored —
    CVE-2015-8769

    SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL commands via unspecif…

  • Unscored —
    CVE-2016-1715

    The swin.sys kernel driver in McAfee Application Control (MAC) 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 be…

  • Unscored —
    CVE-2016-1232

    The mod_dialback module in Prosody before 0.9.9 does not properly generate random values for the secret token for serve…

    prosody prosody Debian Ubuntu
  • Unscored —
    CVE-2016-1231

    Directory traversal vulnerability in the HTTP file-serving module (mod_http_files) in Prosody 0.9.x before 0.9.9 allows…

    prosody prosody Debian Ubuntu
  • Unscored —
    CVE-2015-7548

    OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instanc…

    nova nova Debian Ubuntu
  • Unscored —
    CVE-2015-7242

    Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote at…

  • Unscored —
    CVE-2015-1779

    The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumptio…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2015-4703

    Absolute path traversal vulnerability in mysqldump_download.php in the WordPress Rename plugin 1.0 for WordPress allows…

  • Unscored —
    CVE-2015-4671

    Cross-site scripting (XSS) vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2015-8337

    The HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220,…

  • Unscored —
    CVE-2015-8098

    F5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF4 allow remote attackers to ca…

  • Unscored —
    CVE-2015-8088 Public exploit

    Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT…

  • Unscored —
    CVE-2015-8659

    The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a…

    nghttp2 Debian
  • Unscored —
    CVE-2015-8400

    The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers …

    shellinabox shellinabox Debian Ubuntu
  • Unscored —
    CVE-2015-8603

    Cross-site scripting (XSS) vulnerability in Serendipity before 2.0.3 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2015-8306

    Buffer overflow in the HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before G…

  • Unscored —
    CVE-2015-5471 Public exploit EPSS 32%

    Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress all…