Archive
15 December 2016
Vulnerabilities first published on this day (UTC), newest first.
59 results · Feed
-
Medium 5.3
Apache Tika Server exposes sensitive information
Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header.
-
Unscored —CVE-2016-9566 Public exploit
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain roo…
-
Unscored —
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write…
-
Unscored —
`cassandra` crate is unmaintained; use `cassandra-cpp` instead
The `cassandra` crate has not seen a release since December 2016, and its author is unresponsive. The `cassandra-cpp` crate is a maintained fork: https://github.com/Metaswitch/cassandra-rs
-
Unscored —
An issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is used to download a PG…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulne…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
-
Unscored —
Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corrupti…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vuln…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the …
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vuln…
-
Unscored —
Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could lead to info…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vuln…
-
Unscored —CVE-2016-7869 EPSS 11%
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / unde…
-
Unscored —CVE-2016-7870 EPSS 11%
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / unde…
-
Unscored —CVE-2016-7868 EPSS 11%
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / unde…
-
Unscored —
Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be u…
-
Unscored —
Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be…
-
Unscored —
Adobe DNG Converter versions 9.7 and earlier have an exploitable memory corruption vulnerability. Successful exploitati…
-
Unscored —
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitati…
-
Unscored —CVE-2016-7867 EPSS 11%
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / unde…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vuln…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
-
High 8.8
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
KEV Mar 25, 2022 -
Unscored —
Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-…
-
Unscored —
Adobe Digital Editions versions 4.5.2 and earlier has an important vulnerability that could lead to memory address leak.
-
Unscored —
Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used …
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
-
Unscored —
Adobe Experience Manager versions 6.2 and earlier have a vulnerability that could be used in Cross-Site Request Forgery…
-
Unscored —
Adobe ColdFusion Builder versions 2016 update 2 and earlier, 3.0.3 and earlier have an important vulnerability that cou…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The content sanitizer component has an issue w…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Script code can be embedded to RSS feeds using…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev8. References to external Open XML document type d…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10. App Suite frontend offers to control whether a…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts ca…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Custom messages can be shown at the login scre…
-
Unscored —
An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. OX Guard uses an authentication token to identify a…