Skip to content
OpenAdvisories

Archive

31 January 2017

Vulnerabilities first published on this day (UTC), newest first.

← December 2016 2017 / January /31 February 2017 →
  1. 11
  2. 24
  3. 35
  4. 419
  5. 514
  6. 653
  7. 7 
  8. 8 
  9. 95
  10. 1016
  11. 1152
  12. 12159
  13. 1341
  14. 1410
  15. 1510
  16. 162
  17. 177
  18. 1861
  19. 1939
  20. 2025
  21. 211
  22. 22 
  23. 2397
  24. 2410
  25. 2510
  26. 2631
  27. 27261
  28. 2845
  29. 29 
  30. 3057
  31. 3148
All Critical High Medium Low Exploited only Public exploit

48 results · Feed

  • Unscored —
    CVE-2016-9404

    Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 …

  • Medium 6.2
    CVE-2016-9039

    An exploitable denial of service exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability …

    Joyent SmartOS
  • High 8.6
    CVE-2016-6621

    phpMyAdmin server-side request forgery (SSRF)

    The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery (SSRF) attacks via unspecified vectors.

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Medium 5.6
    CVE-2016-3176

    Salt Insecure configuration of PAM external authentication service

    Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication service by passing an alternate service with a command sent to LocalClient.

    salt salt Ubuntu PyPI
  • Unscored —
    CVE-2016-2050

    The get_abbrev_array_info function in libdwarf-20151114 allows remote attackers to cause a denial of service (out-of-bo…

    dwarfutils dwarfutils Debian Ubuntu
  • Unscored —
    CVE-2016-5117

    OpenNTPD before 6.0p1 does not validate the CN for HTTPS constraint requests, which allows remote attackers to bypass t…

    openntpd Debian
  • Unscored —
    CVE-2016-10043 Public exploit

    An issue was discovered in Radisys MRF Web Panel (SWMS) 9.0.1. The MSM_MACRO_NAME POST parameter in /swms/ms.cgi was di…

  • Unscored —
    CVE-2016-9249

    An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may cause the Traffic Man…

    F5 F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe Network devices