Archive
December 2016
Vulnerabilities first published in this month (UTC), newest first.
518 results · Feed
-
Unscored —
Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-…
-
Unscored —
Adobe Digital Editions versions 4.5.2 and earlier has an important vulnerability that could lead to memory address leak.
-
Unscored —
Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used …
-
Unscored —
Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnera…
-
Unscored —
Adobe Experience Manager versions 6.2 and earlier have a vulnerability that could be used in Cross-Site Request Forgery…
-
Unscored —
Adobe ColdFusion Builder versions 2016 update 2 and earlier, 3.0.3 and earlier have an important vulnerability that cou…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The content sanitizer component has an issue w…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Script code can be embedded to RSS feeds using…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev8. References to external Open XML document type d…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10. App Suite frontend offers to control whether a…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts ca…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. Custom messages can be shown at the login scre…
-
Unscored —
An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. OX Guard uses an authentication token to identify a…
-
Unscored —
Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation is…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails i…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within SVG files is maintained when…
-
Unscored —CVE-2016-6853 Public exploit
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code and references to external websites can…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Users can provide local file paths to the RSS r…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code can be injected to contact names. W…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. SVG files can be used as mp3 album covers. In c…
-
Unscored —CVE-2016-6851 Public exploit
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code can be provided as parameter to the OX …
-
Unscored —CVE-2016-6854 Public exploit
An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5. Script code which got injected to a mail with inlin…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. SVG files can be used as profile pictures. In c…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. API requests can be used to inject, generate an…
-
Unscored —
Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation is…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Setting the user's name to JS code makes that c…
-
Unscored —
An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The "defer" servlet offers to redirect a client…
-
Unscored —
An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27. The aria-label parameter of tiles at the Portal…
-
Unscored —
An issue was discovered in Open-Xchange Server 6 / OX AppSuite before 7.8.0-rev26. The "session" parameter for file-dow…
-
Unscored —CVE-2016-5740 Public exploit
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5. JavaScript code can be used as part of ical att…
-
Unscored —
An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev14. Adding images from external sources to HTML ed…
-
Unscored —
The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of …
-
Unscored —
XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging fai…
-
Unscored —
SAP Download Manager 2.1.142 and earlier generates an encryption key from a small key space on Windows and Mac systems,…
-
Unscored —
SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-d…
-
Unscored —
Mailcwp remote file upload vulnerability incomplete fix v1.100
-
Unscored —
Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and ot…
-
High 7.8
An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability i…
-
High 7.0
An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is…
-
High 7.0
An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is…