Skip to content
OpenAdvisories

Archive

27 January 2016

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —

    SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to ex…

  • Unscored —

    cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) d…

  • Unscored —

    The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Cisco Unity Connection (UC) 10.5(2.3009) allows remote attackers to inject …

  • Unscored —

    Incorrect calculation affecting RSA computations in math/big

    The Int.Exp Montgomery code in the math/big library in Go 1.5.x before 1.5.3 mishandles carry propagation and produces incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors.

  • Unscored —

    The client_host function in parsers.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (in…

  • Unscored —

    The opj_tgt_reset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service (out-of-bounds re…

  • Unscored —

    The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a de…

  • Unscored —

    Heap-based buffer overflow in the opj_j2k_update_image_data function in OpenJpeg 2016.1.18 allows remote attackers to c…

  • Unscored —

    The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x …

  • Unscored —

    IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4.2.0.1, in certain LDAP File protocol configurations, allow…

  • Unscored —

    IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maxim…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in InfoSphere Data Architect (IDA), as distributed in IBM Rational Software Ar…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF09 allows remote attackers to inject ar…

  • Unscored —

    Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.0…