Skip to content
OpenAdvisories

Archive

10 January 2017

Vulnerabilities first published on this day (UTC), newest first.

← December 2016 2017 / January /10 February 2017 →
  1. 11
  2. 24
  3. 35
  4. 419
  5. 514
  6. 653
  7. 7 
  8. 8 
  9. 95
  10. 1016
  11. 1152
  12. 12159
  13. 1341
  14. 1410
  15. 1510
  16. 162
  17. 177
  18. 1861
  19. 1939
  20. 2025
  21. 211
  22. 22 
  23. 2397
  24. 2410
  25. 2510
  26. 2631
  27. 27261
  28. 2845
  29. 29 
  30. 3057
  31. 3148
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2017-0002 EPSS 17%

    Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and d…

  • Unscored —
    CVE-2017-0004 EPSS 89%

    The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 S…

  • Unscored —
    CVE-2017-0003 EPSS 25%

    Microsoft Word 2016 and SharePoint Enterprise Server 2016 allow remote attackers to execute arbitrary code via a crafte…

  • Unscored —
    CVE-2016-9247

    Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics …

    F5 F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe Network devices
  • Unscored —
    CVE-2015-4592 Public exploit

    eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allo…

  • Unscored —
    CVE-2015-4593 Public exploit

    eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserSer…

  • Unscored —
    CVE-2015-4591 Public exploit

    eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows rem…

  • Unscored —
    CVE-2015-4594 Public exploit

    eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the …

  • Unscored —
    CVE-2016-6830

    The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the argument…

    chicken chicken chicken Debian Ubuntu Alpine
  • High 7.5
    CVE-2016-6580

    priority vulnerable to denial of service

    A HTTP/2 implementation built using any version of the Python priority library prior to version 1.2.0 could be targeted by a malicious peer by having that peer assign priority information for every possible HTTP/2 stream ID. The priority tree would happily co…

    priority PyPI
  • Unscored —
    CVE-2016-6287

    The "http-client" egg always used a HTTP_PROXY environment variable to determine whether HTTP traffic should be routed …

  • Unscored —
    CVE-2016-6831

    The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resul…

    chicken chicken chicken Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-6837

    Cross-site scripting (XSS) vulnerability in MantisBT Filter API in MantisBT versions before 1.2.19, and versions 2.0.0-…

  • High 7.5
    CVE-2016-6581

    HPACK Denial of Service vulnerability (HPACK Bomb)

    A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field th…

    hpack python-hpack python-hpack Debian Ubuntu PyPI
  • Unscored —
    CVE-2016-6286

    The "spiffy-cgi-handlers" egg would convert a nonexistent "Proxy" header to the HTTP_PROXY environment variable, which …

  • Unscored —
    CVE-2016-10126

    Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3…