Skip to content
OpenAdvisories

Archive

9 December 2016

Vulnerabilities first published on this day (UTC), newest first.

← November 2016 2016 / December /9 January 2017 →
  1. 111
  2. 22
  3. 39
  4. 4 
  5. 57
  6. 62
  7. 7 
  8. 813
  9. 919
  10. 1017
  11. 1148
  12. 1234
  13. 1342
  14. 1442
  15. 1559
  16. 1625
  17. 179
  18. 1813
  19. 192
  20. 2044
  21. 213
  22. 226
  23. 2329
  24. 244
  25. 252
  26. 263
  27. 272
  28. 2813
  29. 2943
  30. 309
  31. 316
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2016-5423

    PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow re…

    postgresql-9.3 postgresql-9.5 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2016-5424

    PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might al…

    postgresql-9.3 postgresql-9.5 postgresql-9.1 Ubuntu
  • Unscored —
    CVE-2016-6501

    JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted se…

  • High 7.5
    CVE-2016-6321 EPSS 16%

    Directory traversal vulnerability in the safer_name_suffix function in GNU tar 1.14 through 1.29 might allow remote att…

    tar tar tar Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-6496

    The LDAP directory connector in Atlassian Crowd before 2.8.8 and 2.9.x before 2.9.5 allows remote attackers to execute …

  • Unscored —
    CVE-2016-9103

    The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obta…

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9104

    Multiple integer overflows in the (1) v9fs_xattr_read and (2) v9fs_xattr_write functions in hw/9pfs/9p.c in QEMU (aka Q…

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9101

    Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of…

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9106

    Memory leak in the v9fs_write function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrator…

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9105

    Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators…

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9102

    Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS adminis…

    qemu qemu qemu Debian Ubuntu Alpine
  • Unscored —
    CVE-2015-8786

    The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a den…

    rabbitmq-server rabbitmq-server Debian Ubuntu
  • Unscored —
    CVE-2016-6523

    Multiple cross-site scripting (XSS) vulnerabilities in the media manager in Dotclear before 2.10 allow remote attackers…

  • High 7.5
    CVE-2016-6301

    The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of s…

    busybox busybox Debian Alpine
  • Unscored —
    CVE-2016-6829

    The trove service user in (1) Openstack deployment (aka crowbar-openstack) and (2) Trove Barclamp (aka barclamp-trove a…

  • High 8.1
    CVE-2016-9014

    Django DNS Rebinding Vulnerability

    Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOSTS.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Critical 9.8
    CVE-2016-9013

    Django user with hardcoded password created when running tests on Oracle

    Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database se…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Unscored —
    CVE-2016-9832

    PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injec…

  • High 7.5
    CVE-2016-8858 Public exploit EPSS 29%

    The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of…

    openssh openssh Debian Ubuntu