CVEs published November 29, 2016
9 CVEs were published on November 29, 2016: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Apache Hadoop · org.apache.hadoop:hadoop-common
- 1
- DBD::mysql before
- 1
- Dell EMC iDRAC7 and iDRAC8
- 1
- Lenovo Group All ThinkPad, ThinkCentre, ThinkStation and Le…
- 1
- Lenovo Group Lenovo Notebook models 110-14IBR/110-15IBR, B7…
- 1
- Micro Focus MSS, RWeb, ZFE, RSG 1.x, 2.x, 12.x
- 1
Medium, low and unrated 9
- CVE-2016-9480libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed
- CVE-2016-9481In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id input is passed into showComments.
- CVE-2016-1251There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3DBD::mysql before
- CVE-2016-8223During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation softwLenovo Group All ThinkPad, ThinkCentre, ThinkStation and Le…
- CVE-2016-8224A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a syLenovo Group Lenovo Notebook models 110-14IBR/110-15IBR, B7…
- CVE-2016-1247The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubu
- CVE-2016-5685Dell iDRAC7 and iDRAC8 devices with firmware before 2.40.40.40 allow authenticated users to gain Bash shell access through a string injectioDell EMC iDRAC7 and iDRAC8
- CVE-2016-5765Administrative Server in Micro Focus Host Access Management and Security Server (MSS) and Reflection for the Web (RWeb) and Reflection SecurMicro Focus MSS, RWeb, ZFE, RSG 1.x, 2.x, 12.x
- CVE-2016-5393In Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3, a remote user who can authenticate with the HDFS NameNode can possibly run arbitApache Hadoop · org.apache.hadoop:hadoop-common