Skip to content
OpenAdvisories

Archive

29 January 2016

Vulnerabilities first published on this day (UTC), newest first.

← December 2015 2016 / January /29 February 2016 →
  1. 112
  2. 227
  3. 316
  4. 433
  5. 510
  6. 613
  7. 7 
  8. 847
  9. 916
  10. 105
  11. 1110
  12. 1224
  13. 1328
  14. 1420
  15. 1540
  16. 167
  17. 177
  18. 188
  19. 1911
  20. 2013
  21. 21216
  22. 2215
  23. 232
  24. 24 
  25. 2511
  26. 2612
  27. 2715
  28. 281
  29. 2919
  30. 3015
  31. 3116
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • High 8.3
    CVE-2015-7521

    High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service

    The authorization framework in Apache Hive 1.0.0, 1.0.1, 1.1.0, 1.1.1, 1.2.0 and 1.2.1, on clusters protected by Ranger and SqlStdHiveAuthorization, allows attackers to bypass intended parent table access restrictions via unspecified partition-level operation…

    org.apache.hive:hive-exec org.apache.hive:hive org.apache.hive:hive-service Maven
  • Unscored —
    CVE-2015-8773

    Stack-based buffer overflow in McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows attacker…

  • Unscored —
    CVE-2015-8772

    McPvDrv.sys 4.6.111.0 in McAfee File Lock 5.x in McAfee Total Protection allows local users to obtain sensitive informa…

  • High 7.5
    CVE-2016-0737

    OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service

    OpenStack Object Storage (Swift) before 2.4.0 does not properly close client connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted requests to a Large Object URL.

    swift swift swift Debian Ubuntu PyPI
  • Unscored —
    CVE-2016-0755

    The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy c…

    curl curl Debian Ubuntu
  • Unscored —
    CVE-2016-0756

    The generate_dialback function in the mod_dialback module in Prosody before 0.9.10 does not properly separate fields wh…

    prosody prosody Debian Ubuntu
  • Unscored —
    CVE-2016-0754

    cURL before 7.47.0 on Windows allows attackers to write to arbitrary files in the current working directory on a differ…

  • High 7.5
    CVE-2016-0738

    OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service

    OpenStack Object Storage (Swift) before 2.3.1 (Kilo), 2.4.x, and 2.5.x before 2.5.1 (Liberty) do not properly close server connections, which allows remote attackers to cause a denial of service (proxy-server resource consumption) via a series of interrupted …

    swift swift swift Debian Ubuntu PyPI
  • Unscored —
    CVE-2016-1493

    Intel Driver Update Utility before 2.4 retrieves driver updates in cleartext, which makes it easier for man-in-the-midd…

  • Unscored —
    CVE-2015-8770 Public exploit EPSS 22%

    Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube befor…

    roundcube Debian
  • Unscored —
    CVE-2015-8793

    Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2…

    roundcube Debian
  • Unscored —
    CVE-2015-8789

    Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attacker…

    libebml libebml Debian Ubuntu
  • Unscored —
    CVE-2015-8790

    The EbmlUnicodeString::UpdateFromUTF8 function in libEBML before 1.3.3 allows context-dependent attackers to obtain sen…

    libebml libebml Debian Ubuntu
  • Unscored —
    CVE-2015-8791

    The EbmlElement::ReadCodedSizeValue function in libEBML before 1.3.3 allows context-dependent attackers to obtain sensi…

    libebml libebml Debian Ubuntu
  • Unscored —
    CVE-2015-8794

    Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before…

    roundcube Debian
  • Unscored —
    CVE-2015-8792

    The KaxInternalBlock::ReadData function in libMatroska before 1.4.4 allows context-dependent attackers to obtain sensit…

    libmatroska libmatroska Debian Ubuntu
  • Unscored —
    CVE-2016-1882

    FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service (kernel…

  • Unscored —
    CVE-2016-1879 Public exploit EPSS 13%

    The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, …

  • Unscored —
    CVE-2015-7464

    Report Builder in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-…