Skip to content
OpenAdvisories

Archive

18 January 2017

Vulnerabilities first published on this day (UTC), newest first.

61 results · Feed

  • Unscored —

    The WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (assert…

  • Unscored —
    CVE-2016-7982 Public exploit EPSS 21%

    Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to e…

  • Unscored —

    The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote authenticated users to inject a…

  • Unscored —

    Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to hav…

  • Unscored —

    MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds …

  • Unscored —
    CVE-2016-7998 Public exploit EPSS 13%

    The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users to execute arbitrary PH…

  • Unscored —

    magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a c…

  • Unscored —

    The chartorune function in Artifex Software MuJS allows attackers to cause a denial of service (out-of-bounds read) via…

  • Unscored —

    The SmartCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers t…

  • Unscored —

    Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (…

  • Unscored —

    The SpamCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to…

  • Unscored —
    CVE-2016-2087 Public exploit

    Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary…

  • Unscored —
    CVE-2016-2233 Public exploit EPSS 34%

    Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC serv…

  • Unscored —

    Buffer overflow in the zi_short function in zipinfo.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial o…

  • Unscored —

    The Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows local users to cause a den…

  • Unscored —

    tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file…

  • Unscored —

    The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds re…

  • Unscored —

    libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a craft…

  • Unscored —

    Use-after-free vulnerability in the Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets a…

  • Unscored —

    Artifex Software MuJS allows attackers to cause a denial of service (crash) via vectors related to incomplete escape se…