Skip to content
OpenAdvisories

Archive

16 September 2016

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —

    Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —

    Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —

    Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —

    Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —

    Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —

    Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —

    Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service (memory cor…

  • Unscored —

    Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code via unsp…

  • Unscored —

    Adobe AIR SDK & Compiler before 23.0.0.257 on Windows does not support Android runtime-analytics transport security, wh…

  • Unscored —

    Crypto++ (aka cryptopp) through 5.6.4 does not document the requirement for a compile-time NDEBUG definition disabling …

  • Unscored —
    CVE-2016-6303 EPSS 32%

    Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers …

  • Unscored —
    CVE-2016-6302 EPSS 28%

    The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validati…

  • Unscored —
    CVE-2016-2181 EPSS 23%

    The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number i…

  • Unscored —
    CVE-2016-2179 EPSS 27%

    The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated wit…

  • Unscored —
    CVE-2016-2182 EPSS 44%

    The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, whi…