Skip to content
OpenAdvisories

Archive

18 January 2017

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Unscored —
    CVE-2016-6271 Public exploit

    The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows man-in-the-middle attackers to conduct spoofing attacks by l…

  • Unscored —
    CVE-2016-6283 Public exploit

    Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2016-3411 Public exploit

    Cross-site scripting (XSS) vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2016-6896 Public exploit EPSS 38%

    Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPr…

  • Unscored —
    CVE-2016-6897 Public exploit EPSS 29%

    Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions…

  • Unscored —
    CVE-2016-7144 Public exploit

    The m_authenticate function in modules/m_sasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attack…

  • Unscored —
    CVE-2016-7980 Public exploit

    Cross-site request forgery (CSRF) vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote …

  • Unscored —
    CVE-2016-7982 Public exploit EPSS 21%

    Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2016-7998 Public exploit EPSS 13%

    The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users to execute arbitrary PH…

  • Unscored —
    CVE-2016-2087 Public exploit

    Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary…

  • Unscored —
    CVE-2016-2233 Public exploit EPSS 34%

    Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC serv…