Skip to content
OpenAdvisories

Archive

22 December 2016

Vulnerabilities first published on this day (UTC), newest first.

← November 2016 2016 / December /22 January 2017 →
  1. 111
  2. 22
  3. 39
  4. 4 
  5. 57
  6. 62
  7. 7 
  8. 813
  9. 919
  10. 1017
  11. 1148
  12. 1234
  13. 1342
  14. 1442
  15. 1559
  16. 1625
  17. 179
  18. 1813
  19. 192
  20. 2044
  21. 213
  22. 226
  23. 2329
  24. 244
  25. 252
  26. 263
  27. 272
  28. 2813
  29. 2943
  30. 309
  31. 316
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Critical 9.8
    CVE-2016-7954

    Bundler allows attacker to inject arbitrary code via secondary Gem source

    Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334.

    bundler bundler Ubuntu RubyGems
  • Unscored —
    CVE-2016-7091

    sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implem…

  • Unscored —
    CVE-2016-9179

    lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends wi…

    lynx lynx Debian Ubuntu
  • Unscored —
    CVE-2016-9180

    perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig d…

    libxml-twig-perl libxml-twig-perl Debian Ubuntu
  • Unscored —
    CVE-2016-9181

    perl-Image-Info: When parsing an SVG file, external entity expansion (XXE) was not disabled. An attacker could craft an…

    libimage-info-perl libimage-info-perl Debian Ubuntu
  • Unscored —
    CVE-2016-9675

    openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause t…

    openjpeg Ubuntu