Skip to content
OpenAdvisories

Archive

January 2017

Vulnerabilities first published in this month (UTC), newest first.

← December 2016 2017 / January February 2017 →
  1. 11
  2. 24
  3. 35
  4. 419
  5. 514
  6. 653
  7. 7 
  8. 8 
  9. 95
  10. 1016
  11. 1152
  12. 12159
  13. 1341
  14. 1410
  15. 1510
  16. 162
  17. 177
  18. 1861
  19. 1939
  20. 2025
  21. 211
  22. 22 
  23. 2397
  24. 2410
  25. 2510
  26. 2631
  27. 27261
  28. 2845
  29. 29 
  30. 3057
  31. 3148
All Critical High Medium Low Exploited only Public exploit

1,083 results · Feed

  • Unscored —
    CVE-2015-8973

    xmlhttp.php in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allow…

  • Unscored —
    CVE-2015-8975

    Cross-site scripting (XSS) vulnerability in the error handler in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x bef…

  • Unscored —
    CVE-2015-8977

    MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Merge System before 1.8.6 allow remote attacke…

  • Unscored —
    CVE-2015-8974

    SQL injection vulnerability in the Group Promotions module in the admin control panel in MyBB (aka MyBulletinBoard) bef…

  • Unscored —
    CVE-2015-8976

    Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.6.18 and 1.8.x before 1.8.6 and MyBB Me…

  • Unscored —
    CVE-2016-6285

    Cross-site scripting (XSS) vulnerability in includes/decorators/global-translations.jsp in Atlassian JIRA before 7.2.2 …

  • Unscored —
    CVE-2016-6329

    OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday…

    openvpn Ubuntu
  • Unscored —
    CVE-2016-8695

    The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service…

    potrace Debian
  • Unscored —
    CVE-2016-8697

    The bm_new function in bitmap.h in potrace before 1.13 allows remote attackers to cause a denial of service (divide-by-…

    potrace Debian
  • Unscored —
    CVE-2016-8699

    Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attacker…

    potrace Debian
  • Unscored —
    CVE-2016-8701

    Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attacker…

    potrace Debian
  • Unscored —
    CVE-2016-8685

    The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memo…

    potrace potrace Debian Ubuntu
  • Unscored —
    CVE-2016-8703

    Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attacker…

    potrace Debian
  • Unscored —
    CVE-2016-8694

    The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service…

    potrace Debian
  • Unscored —
    CVE-2016-8700

    Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attacker…

    potrace Debian
  • Unscored —
    CVE-2016-8698

    Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attacker…

    potrace Debian
  • Unscored —
    CVE-2016-8702

    Heap-based buffer overflow in the bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attacker…

    potrace Debian
  • Unscored —
    CVE-2016-8696

    The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service…

    potrace Debian
  • Unscored —
    CVE-2016-8686

    The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image,…

    potrace potrace Debian Ubuntu
  • Unscored —
    CVE-2016-9413

    The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote att…

  • Unscored —
    CVE-2016-9408

    Cross-site scripting (XSS) vulnerability in the Mod control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB M…

  • Unscored —
    CVE-2016-9421

    Cross-site scripting (XSS) vulnerability in the Users module in the Admin control panel in MyBB (aka MyBulletinBoard) b…

  • Unscored —
    CVE-2016-9419

    Cross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB…

  • Unscored —
    CVE-2016-9418

    MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows might allow remote att…

  • Unscored —
    CVE-2016-9417

    The fetch_remote_file function in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows rem…

  • Unscored —
    CVE-2016-9409

    Cross-site scripting (XSS) vulnerability in the Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB…

  • Unscored —
    CVE-2016-9414

    MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow remote attackers to obtain sensitive i…

  • Unscored —
    CVE-2016-9407

    Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 …

  • Unscored —
    CVE-2016-9416

    SQL injection vulnerability in the users data handler in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System …

  • Unscored —
    CVE-2016-9410

    MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to obtain sensi…

  • Unscored —
    CVE-2016-9403

    newreply.php in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to h…

  • Unscored —
    CVE-2016-9411

    The Admin control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote att…

  • Medium 6.4
    CVE-2016-9962

    Information Exposure in RunC

    RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization a…

    docker.io docker.io runc github.com/opencontainers/runc Debian Ubuntu Go
  • Unscored —
    CVE-2016-9405

    Cross-site scripting (XSS) vulnerability in member validation in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge…

  • Unscored —
    CVE-2016-9420

    MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allow remote attackers to have unspecified i…

  • Unscored —
    CVE-2016-9415

    MyBB (aka MyBulletinBoard) before 1.8.8 on Windows and MyBB Merge System before 1.8.8 on Windows allow remote attackers…

  • Unscored —
    CVE-2016-9412

    MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allow attackers to have unspecified impact v…

  • Unscored —
    CVE-2016-9402

    SQL injection vulnerability in the moderation tool in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System bef…

  • Unscored —
    CVE-2016-9406

    Cross-site scripting (XSS) vulnerability in the User control panel in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB …

  • Unscored —
    CVE-2016-9260

    Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9 allows remote authenticated users to inject arbit…