Archive
January 2017
Vulnerabilities first published in this month (UTC), newest first.
1,083 results · Feed
-
Unscored —
Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attack…
-
Unscored —
ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller, which allows local users to read K…
-
Unscored —
Huawei Oceanstor 5800 before V300R002C10SPC100 allows remote attackers to cause a denial of service (CPU consumption) v…
-
Unscored —
ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to pr…
-
Unscored —
Buffer overflow vulnerability while processing QMI QOS TLVs. Product: Android. Versions: versions that have qmi_qos_srv…
-
Unscored —
The t2p_readwrite_pdf_image_tile function in LibTIFF allows remote attackers to cause a denial of service (out-of-bound…
-
Unscored —
The TIFFFetchNormalTag function in LibTiff 4.0.6 allows remote attackers to cause a denial of service (NULL pointer der…
-
Unscored —
Incorrect processing of responses to If-None-Modified HTTP conditional requests in Squid HTTP Proxy 3.1.10 through 3.1.…
-
Unscored —
Incorrect HTTP Request header comparison in Squid HTTP Proxy 3.5.0.1 through 3.5.22, and 4.0.1 through 4.0.16 results i…
-
Unscored —
An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a reflected Cross Site Scripting vulnera…
-
Unscored —
An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePor…
-
High 7.5
An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library. A crafted…
-
Critical 9.8
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Ser…
-
High 8.2
An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Databas…
-
Critical 9.8
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Ser…
-
Unscored —
The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UE…
-
Unscored —
Privilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and Miix systems running …
-
Unscored —
Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allow…
-
Unscored —
Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library (aka libgd) before 2.2.4 allows remo…
-
Unscored —
The dynamicGetbuf function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denia…
-
Unscored —
Characters from languages are such as Arabic, Hebrew are displayed from RTL (Right To Left) order in Opera 37.0.2192.10…
-
Unscored —
The gdImageCreate function in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to cause a denia…
-
Unscored —
CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive infor…
-
Unscored —
VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local H…
-
Unscored —
Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL si…
-
Unscored —
Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) …
-
Unscored —
An IKE Packet Parsing Denial of Service Vulnerability in the ipsecmgr process of Cisco ASR 5000 Software could allow an…
-
Unscored —
A Denial of Service Vulnerability in 802.11 ingress connection authentication handling for the Cisco Mobility Express 2…
-
Unscored —
A vulnerability in Cisco Hybrid Meeting Server could allow an unauthenticated, remote attacker to conduct a cross-site …
-
Unscored —
A vulnerability in the web-based management interface of Cisco NetFlow Generation Appliance could allow an unauthentica…
-
Unscored —
A Denial of Service Vulnerability in 802.11 ingress packet processing of the Cisco Mobility Express 2800 and 3800 Acces…
-
Unscored —
A vulnerability in the web-based management interface of Cisco IOS and Cisco IOx Software could allow an unauthenticate…
-
Unscored —
A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute predetermined s…
-
Unscored —
A vulnerability in Intermediate System-to-Intermediate System (IS-IS) protocol packet processing of Cisco Nexus 5000, 6…
-
Unscored —
A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary passw…
-
Unscored —
A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cr…
-
Unscored —
A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) coul…
-
Unscored —
A vulnerability in a URL parameter of Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to per…
-
Unscored —
A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communi…
-
Unscored —
A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualif…