Archive
December 2016
Vulnerabilities first published in this month (UTC), newest first.
518 results · Feed
-
Unscored —
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handl…
-
Unscored —
All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handl…
-
Unscored —
NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web A…
-
Unscored —
An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.…
-
Unscored —
An open redirect vulnerability has been detected with some Pivotal Cloud Foundry Elastic Runtime components. Users of a…
-
Unscored —
An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a v…
-
Unscored —
A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobility Server (GEMS) implementation of the A…
-
Medium 6.5
bottle.py vulnerable to CRLF Injection
redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.
-
Unscored —
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/…
-
Unscored —
An issue was discovered in components/com_users/models/registration.php in Joomla! before 3.6.5. Incorrect filtering of…
-
Unscored —
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/…
-
Unscored —
An issue was discovered in templates/beez3/html/com_content/article/default.php in Joomla! before 3.6.5. Inadequate per…
-
Unscored —
Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/…
-
Medium 5.3
Apache Tika Server exposes sensitive information
Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header.
-
Unscored —CVE-2016-9566 Public exploit
base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain roo…
-
Unscored —
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write…
-
Unscored —
`cassandra` crate is unmaintained; use `cassandra-cpp` instead
The `cassandra` crate has not seen a release since December 2016, and its author is unresponsive. The `cassandra-cpp` crate is a maintained fork: https://github.com/Metaswitch/cassandra-rs
-
Unscored —
An issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is used to download a PG…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulne…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
-
Unscored —
Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corrupti…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vuln…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the …
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vuln…
-
Unscored —
Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could lead to info…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vuln…
-
Unscored —CVE-2016-7869 EPSS 11%
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / unde…
-
Unscored —CVE-2016-7870 EPSS 11%
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / unde…
-
Unscored —CVE-2016-7868 EPSS 11%
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / unde…
-
Unscored —
Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be u…
-
Unscored —
Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be…
-
Unscored —
Adobe DNG Converter versions 9.7 and earlier have an exploitable memory corruption vulnerability. Successful exploitati…
-
Unscored —
Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability. Successful exploitati…
-
Unscored —CVE-2016-7867 EPSS 11%
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / unde…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vuln…
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
-
High 8.8
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
KEV Mar 25, 2022