Skip to content
OpenAdvisories

Archive

January 2017

Vulnerabilities first published in this month (UTC), newest first.

← December 2016 2017 / January February 2017 →
  1. 11
  2. 24
  3. 35
  4. 419
  5. 514
  6. 653
  7. 7 
  8. 8 
  9. 95
  10. 1016
  11. 1152
  12. 12159
  13. 1341
  14. 1410
  15. 1510
  16. 162
  17. 177
  18. 1861
  19. 1939
  20. 2025
  21. 211
  22. 22 
  23. 2397
  24. 2410
  25. 2510
  26. 2631
  27. 27261
  28. 2845
  29. 29 
  30. 3057
  31. 3148
All Critical High Medium Low Exploited only Public exploit

1,083 results · Feed

  • Unscored —
    CVE-2016-6770

    An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access syste…

    Google Android Android
  • Unscored —
    CVE-2016-6775

    An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute …

    Google Android Android
  • Unscored —
    CVE-2016-6764

    A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a de…

    Google Android Android
  • Unscored —
    CVE-2016-6757

    An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enabl…

    Google Android Android
  • Unscored —
    CVE-2016-8394

    An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application …

    Google Android Android
  • Unscored —
    CVE-2016-8407

    An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…

    Google Android Android
  • Unscored —
    CVE-2016-8405

    An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…

    Google Android linux-raspi2 linux-hwe Android Debian Ubuntu
  • Unscored —
    CVE-2016-8406

    An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…

    Google Android Android
  • Unscored —
    CVE-2016-8392

    An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to exec…

    Google Android Android
  • Unscored —
    CVE-2016-8409

    An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access…

    Google Android Android
  • Unscored —
    CVE-2016-8393

    An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application …

    Google Android Android
  • Unscored —
    CVE-2016-8395

    A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denia…

    Google Android Android
  • Unscored —
    CVE-2016-8404

    An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…

    Android
  • Unscored —
    CVE-2016-8397

    An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access…

    Google Android Android
  • Unscored —
    CVE-2016-8400

    An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious applicatio…

    Google Android Android
  • Unscored —
    CVE-2016-8402

    An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…

    Google Android Android
  • Unscored —
    CVE-2016-8410

    An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to acce…

    Google Android Android
  • Unscored —
    CVE-2016-8401

    An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…

    Google Android Android
  • Unscored —
    CVE-2016-8391

    An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to exec…

    Google Android Android
  • Unscored —
    CVE-2016-8408

    An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access…

    Google Android Android
  • Unscored —
    CVE-2016-8396

    An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to acce…

    Google Android Android
  • Unscored —
    CVE-2016-8403

    An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networ…

    Google Android Android
  • Unscored —
    CVE-2016-8399

    An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application t…

    Google Android linux-raspi2 linux-hwe Android Debian Ubuntu
  • High 8.8
    CVE-2017-5225

    LibTIFF version 4.0.7 is vulnerable to a heap buffer overflow in the tools/tiffcp resulting in DoS or code execution vi…

    tiff tiff tiff Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9131 EPSS 41%

    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to …

    bind9 bind9 bind Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9147 EPSS 25%

    named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (as…

    bind9 bind9 bind Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-9444 EPSS 18%

    named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to …

    bind9 bind9 bind Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2016-10131

    CodeIgniter arbitrary code execution

    system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the email->from field to insert sendmail command-line arguments.

    bcit-ci/codeigniter Packagist
  • Unscored —
    CVE-2017-5351

    Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an a…

  • High 7.2
    CVE-2017-5346

    GeniXCMS SQL injection vulnerability

    SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php.

    genix/cms Packagist
  • Unscored —
    CVE-2017-5345

    SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated…

  • Unscored —
    CVE-2017-5350

    Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incom…

  • Unscored —
    CVE-2017-5347

    SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrat…

  • Unscored —
    CVE-2016-7479 EPSS 42%

    In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized obje…

    php5 php7.0 Ubuntu
  • Unscored —
    CVE-2015-8020

    Clustered Data ONTAP versions 8.0, 8.3.1, and 8.3.2 contain a default privileged account which under certain conditions…

  • Unscored —
    CVE-2016-4806 Public exploit EPSS 10%

    Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended …

    web2py Ubuntu
  • Medium 4.5
    CVE-2016-4808 Public exploit

    Web2py Cross-Site Request Forgery vulnerability

    Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery) vulnerability, which allows an attacker to trick a logged in user to perform some unwanted actions i.e An attacker can trick an victim to disable the installed application just…

    web2py PyPI
  • Medium 4.8
    CVE-2016-4807 Public exploit

    Web2py Reflected XSS vulnerability

    Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin).

    web2py web2py Ubuntu PyPI
  • Unscored —
    CVE-2016-6820

    MetroCluster Tiebreaker for clustered Data ONTAP in versions before 1.2 discloses sensitive information in cleartext wh…

  • Low 3.7
    CVE-2016-9015

    Urllib3 Incorrect Certificate Validation

    Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middl…

    urllib3 PyPI