Skip to content
OpenAdvisories

Archive

18 January 2017

Vulnerabilities first published on this day (UTC), newest first.

← December 2016 2017 / January /18 February 2017 →
  1. 11
  2. 24
  3. 35
  4. 419
  5. 514
  6. 653
  7. 7 
  8. 8 
  9. 95
  10. 1016
  11. 1152
  12. 12159
  13. 1341
  14. 1410
  15. 1510
  16. 162
  17. 177
  18. 1861
  19. 1939
  20. 2025
  21. 211
  22. 22 
  23. 2397
  24. 2410
  25. 2510
  26. 2631
  27. 27261
  28. 2845
  29. 29 
  30. 3057
  31. 3148
All Critical High Medium Low Exploited only Public exploit

61 results · Feed

  • Unscored —
    CVE-2016-4019

    Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown …

  • Unscored —
    CVE-2016-6271 Public exploit

    The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows man-in-the-middle attackers to conduct spoofing attacks by l…

    bzrtp bzrtp Debian Ubuntu
  • Unscored —
    CVE-2016-6497

    main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP e…

  • Unscored —
    CVE-2016-6283 Public exploit

    Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2016-3406

    Multiple cross-site request forgery (CSRF) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers …

  • Unscored —
    CVE-2016-3407

    Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inje…

  • Unscored —
    CVE-2016-3405

    Multiple unspecified vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to affect integrity vi…

  • Unscored —
    CVE-2016-3415

    Zimbra Collaboration before 8.7.0 allows remote attackers to conduct deserialization attacks via unspecified vectors, a…

  • Unscored —
    CVE-2016-3414

    Unspecified vulnerability in Zimbra Collaboration before 8.6.0 Patch 7 allows remote authenticated users to affect avai…

  • Unscored —
    CVE-2016-3999

    Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inje…

  • Unscored —
    CVE-2016-3410

    Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inje…

  • Unscored —
    CVE-2016-3411 Public exploit

    Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2016-3404

    Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown …

  • Unscored —
    CVE-2016-3412

    Multiple cross-site scripting (XSS) vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to inje…

  • Unscored —
    CVE-2016-3413

    Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown …

  • Unscored —
    CVE-2016-3402

    Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect confidentiality via un…

  • Unscored —
    CVE-2016-3401

    Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote authenticated users to affect integrity vi…

  • Unscored —
    CVE-2016-3409

    Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2016-3408

    Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2016-9677

    Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive kernel address information via unspecifie…

  • Unscored —
    CVE-2016-9678

    Use-after-free vulnerability in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via…

  • Unscored —
    CVE-2016-9679

    Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer.

  • Unscored —
    CVE-2016-9680

    Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive information from kernel memory via unspec…

  • Unscored —
    CVE-2016-9676

    Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified …

  • Unscored —
    CVE-2016-10086

    RESTful web services in CA Service Desk Manager 12.9 and CA Service Desk Management 14.1 might allow remote authenticat…

  • Unscored —
    CVE-2016-6896 Public exploit EPSS 38%

    Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPr…

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2016-6897 Public exploit EPSS 29%

    Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions…

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2016-10148

    The wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 makes a get_plugin_dat…

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2016-10147

    crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer derefe…

    linux-raspi2 linux-hwe linux linux Debian Ubuntu
  • Unscored —
    CVE-2015-8684

    Exponent CMS before 2.3.7 does not properly restrict the types of files that can be uploaded, which allows remote attac…

  • Unscored —
    CVE-2015-8667

    Cross-site scripting (XSS) vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attac…

  • Unscored —
    CVE-2014-9910

    An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to exec…

    Google Android Android
  • Unscored —
    CVE-2014-9913

    Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of…

    unzip unzip unzip unzip Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2014-9909

    An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to exec…

    Google Android Android
  • Unscored —
    CVE-2016-7981 Scanner template

    Cross-site scripting (XSS) vulnerability in valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to inject…

    spip spip Debian Ubuntu
  • Unscored —
    CVE-2016-7144 Public exploit

    The m_authenticate function in modules/m_sasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attack…

  • Unscored —
    CVE-2016-7564

    Heap-based buffer overflow in the Fp_toString function in jsfunction.c in Artifex Software MuJS allows attackers to cau…

  • Unscored —
    CVE-2016-7980 Public exploit

    Cross-site request forgery (CSRF) vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote …

    spip spip Debian Ubuntu
  • Unscored —
    CVE-2016-7149

    Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2016-7999

    ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to conduct server side request forgery (S…

    spip spip Debian Ubuntu