Skip to content
OpenAdvisories

Archive

23 January 2017

Vulnerabilities first published on this day (UTC), newest first.

← December 2016 2017 / January /23 February 2017 →
  1. 11
  2. 24
  3. 35
  4. 419
  5. 514
  6. 653
  7. 7 
  8. 8 
  9. 95
  10. 1016
  11. 1152
  12. 12159
  13. 1341
  14. 1410
  15. 1510
  16. 162
  17. 177
  18. 1861
  19. 1939
  20. 2025
  21. 211
  22. 22 
  23. 2397
  24. 2410
  25. 2510
  26. 2631
  27. 27261
  28. 2845
  29. 29 
  30. 3057
  31. 3148
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Unscored —
    CVE-2016-7567 Public exploit EPSS 12%

    Buffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows remote attackers to hav…

    openslp Azure Linux
  • High 7.5
    CVE-2016-4793 Public exploit

    CakePHP allows remote attackers to spoof their IP

    The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.

    cakephp/cakephp cakephp cakephp Debian Ubuntu Packagist
  • Unscored —
    CVE-2016-4340 Public exploit EPSS 10%

    The impersonate feature in Gitlab 8.7.0, 8.6.0 through 8.6.7, 8.5.0 through 8.5.11, 8.4.0 through 8.4.9, 8.3.0 through …

    gitlab Ubuntu
  • Unscored —
    CVE-2016-4338 Public exploit EPSS 25%

    The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x be…

    zabbix zabbix Debian Ubuntu
  • Unscored —
    CVE-2016-4010 Public exploit EPSS 93%

    Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary…

  • Unscored —
    CVE-2016-6600 Public exploit EPSS 91%

    Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remo…

  • Unscored —
    CVE-2016-6601 Public exploit Scanner template EPSS 98%

    Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows re…

  • Unscored —
    CVE-2016-6602 Public exploit EPSS 56%

    ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-depende…

  • Unscored —
    CVE-2016-6603 Public exploit EPSS 87%

    ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users …

  • Unscored —
    CVE-2016-2783 Public exploit

    Avaya Fabric Connect Virtual Services Platform (VSP) Operating System Software (VOSS) before 4.2.3.0 and 5.x before 5.0…

  • Unscored —
    CVE-2016-5237 Public exploit

    Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to …

  • Unscored —
    CVE-2016-10156 Public exploit

    A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd ti…

    systemd Debian