Skip to content
OpenAdvisories

Archive

5 January 2017

Vulnerabilities first published on this day (UTC), newest first.

14 results · Feed

  • Unscored —

    The Parental Control panel in Genexis devices with DRGOS before 1.14.1 allows remote authenticated users to execute arb…

  • Unscored —

    The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of…

  • Unscored —

    Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Su…

  • Unscored —

    MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bi…

  • Unscored —

    Authentication bypass vulnerability in Enterprise Security Manager (ESM) and License Manager (LM) in Intel Security McA…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.3 allows remote authenticated users to inject arb…

  • Unscored —

    The ring_buffer_resize function in kernel/trace/ring_buffer.c in the profiling subsystem in the Linux kernel before 4.6…

  • Unscored —

    The _prolog_error function in slurmd/req.c in Slurm before 15.08.13, 16.x before 16.05.7, and 17.x before 17.02.0-pre4 …

  • Unscored —

    Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPres…

  • High 7.8

    The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensur…

  • Medium 6.2

    authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which mi…

  • High 7.3
    CVE-2016-10009 Public exploit EPSS 37%

    Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execut…

  • High 7.0
    CVE-2016-10010 Public exploit

    sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which…