Skip to content
OpenAdvisories

Archive

11 January 2017

Vulnerabilities first published on this day (UTC), newest first.

52 results · Feed

  • Unscored —

    Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions…

  • Unscored —
    CVE-2016-4806 Public exploit EPSS 10%

    Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended …

  • Medium 4.5
    CVE-2016-4808 Public exploit

    Web2py Cross-Site Request Forgery vulnerability

    Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery) vulnerability, which allows an attacker to trick a logged in user to perform some unwanted actions i.e An attacker can trick an victim to disable the installed application just…

  • Medium 4.8
    CVE-2016-4807 Public exploit

    Web2py Reflected XSS vulnerability

    Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin).

  • Unscored —

    MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext wh…

  • Low 3.7

    Urllib3 Incorrect Certificate Validation

    Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middl…

  • Unscored —

    The base64decode function in base64.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive in…

  • Unscored —
    CVE-2016-7480 EPSS 42%

    The SplObjectStorage unserialize implementation in ext/spl/spl_observer.c in PHP before 7.0.12 does not verify that a k…

  • Unscored —
    CVE-2016-7478 EPSS 42%

    Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a den…

  • Unscored —
    CVE-2017-5340 EPSS 17%

    Zend/zend_hash.c in PHP before 7.0.15 and 7.1.x before 7.1.1 mishandles certain cases that require large array allocati…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to proce…

  • Unscored —

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability in the JPEG XR c…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —
    CVE-2017-2935 Public exploit EPSS 30%

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the …

  • Unscored —
    CVE-2017-2949 EPSS 20%

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —
    CVE-2017-2934 Public exploit EPSS 30%

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when parsing Adobe T…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —
    CVE-2017-2960 EPSS 19%

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have a security b…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —
    CVE-2017-2966 EPSS 11%

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —
    CVE-2017-2933 Public exploit EPSS 30%

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture c…

  • Unscored —
    CVE-2017-2946 EPSS 24%

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitab…

  • Unscored —

    Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adob…