Archive
December 2016
Vulnerabilities first published in this month (UTC), newest first.
518 results · Feed
-
Unscored —
Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform loca…
-
Unscored —
Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform loca…
-
Unscored —
Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewe…
-
Unscored —
KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is execu…
-
Unscored —
KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. HTML Mail contents were not sanit…
-
Unscored —
A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually…
-
Unscored —
Turning all screens off in Plasma-workspace and kscreenlocker while the lock screen is shown can result in the screen b…
-
High 7.5
An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. …
-
Unscored —
Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It cou…
-
Unscored —
Quick Emulator (Qemu) built with the 'chardev' backend support is vulnerable to a use after free issue. It could occur …
-
High 7.5
An exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode function of Tarantool 1.7.2.0-…
-
High 7.5
An exploitable incorrect return value vulnerability exists in the mp_check function of Tarantool's Msgpuck library 1.0.…
-
Unscored —
Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur…
-
Unscored —
Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It …
-
Unscored —
Quick Emulator (Qemu) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. …
-
Unscored —
Quick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory leakage flaw. It could …
-
Unscored —
The non-existent notification listener vulnerability was introduced in the initial Android 5.0.2 builds for the Samsung…
-
Unscored —
The ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memor…
-
Unscored —
The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds mem…
-
Unscored —
The avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop when it decod…
-
Unscored —
The read_gab2_sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of …
-
Unscored —
The ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial …
-
Unscored —
The avi_read_seek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of …
-
Unscored —
The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding …
-
Unscored —
The raw_decode function in libavcodec/rawdec.c in FFmpeg before 3.1.2 allows remote attackers to cause a denial of serv…
-
Unscored —
The zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite lo…
-
Unscored —
Cloud Foundry before 248; UAA 2.x before 2.7.4.12, 3.x before 3.6.5, and 3.7.x through 3.9.x before 3.9.3; and UAA bosh…
-
Unscored —
The gsm_parse function in libavcodec/gsm_parser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of s…
-
Unscored —
Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, P…
-
Unscored —
Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 …
-
Unscored —
The che_configure function in libavcodec/aacdec_template.c in FFmpeg before 3.2.1 allows remote attackers to cause a de…
-
Critical 9.8
Bundler allows attacker to inject arbitrary code via secondary Gem source
Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334.
-
Unscored —
sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implem…
-
Unscored —
lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends wi…
-
Unscored —
perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig d…
-
Unscored —
perl-Image-Info: When parsing an SVG file, external entity expansion (XXE) was not disabled. An attacker could craft an…
-
Unscored —
openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted j2k image could cause t…
-
Unscored —
NetApp Snap Creator Framework before 4.3.1 discloses sensitive information which could be viewed by an unauthorized use…
-
Unscored —
Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset arbitrary passwords vi…
-
High 8.8
Improper Restriction of XML External Entity Reference in python-docx
python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted document.