Skip to content
OpenAdvisories

Archive

26 January 2017

Vulnerabilities first published on this day (UTC), newest first.

31 results · Feed

  • High 7.5

    An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library. A crafted…

  • Critical 9.8

    An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Ser…

  • High 8.2

    An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Databas…

  • Critical 9.8

    An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Ser…

  • Unscored —

    The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UE…

  • Unscored —

    Privilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and Miix systems running …

  • Unscored —

    Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allow…

  • Unscored —

    Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remo…

  • Unscored —

    The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denia…

  • Unscored —

    Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order in Opera 37.0.2192.10…

  • Unscored —

    The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denia…

  • Unscored —

    CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive infor…

  • Unscored —

    VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local H…

  • Unscored —

    Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL si…

  • Unscored —

    Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) …

  • Unscored —

    An IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an…

  • Unscored —

    A Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the Cisco Mobility Express 2…

  • Unscored —

    A vulnerability in Cisco Hybrid Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site …

  • Unscored —

    A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthentica…

  • Unscored —

    A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Acces…

  • Unscored —

    A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticate…

    iOS
  • Unscored —

    A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined s…

  • Unscored —

    A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6…

  • Unscored —

    A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary passw…

  • Unscored —

    A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cr…

  • Unscored —

    A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) coul…

  • Unscored —

    A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to per…

  • Unscored —

    A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communi…

  • Unscored —

    A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualif…

  • Unscored —

    A vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches could allow an unauthentic…

    iOS
  • Unscored —

    A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site …