CVEs published December 14, 2016
42 CVEs were published on December 14, 2016: 0 critical, 7 high. 1 is now in CISA KEV.
- Published
- 42
- Critical
- 0
- High
- 7
- Medium
- 0
- Low
- 0
- Unrated
- 35
- Now in CISA KEV
- 1
- Fix available
- 0
Most affected products
- Joyent SmartOS
- 6
- Cisco AsyncOS
- 2
- Cisco Emergency Responder
- 2
- Cisco Identity Services Engine
- 2
- Cisco IOS
- 2
- Cisco IOS XR
- 2
- Cisco Unified Communications Manager
- 2
- Cisco Web Security Appliance
- 2
- Cisco Aggregation Services Router (ASR) 5000 Series Switch
- 1
- Cisco AnyConnect Secure Mobility Client
- 1
High 7
- CVE-2016-8733An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.Joyent SmartOS
- CVE-2016-9031An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.Joyent SmartOS
- CVE-2016-9032An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.Joyent SmartOS
- CVE-2016-9033An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.Joyent SmartOS
- CVE-2016-9034An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.Joyent SmartOS
- CVE-2016-9035An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.Joyent SmartOS
- CVE-2016-6277NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before
Medium, low and unrated 35
- CVE-2014-8241XRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer dereference) by leveraging failure to check a mallo
- CVE-2016-3684SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-dependent attackers to
- CVE-2016-3685SAP Download Manager 2.1.142 and earlier generates an encryption key from a small key space on Windows and Mac systems, which allows context
- CVE-2016-1000156Mailcwp remote file upload vulnerability incomplete fix v1.100
- CVE-2016-4443Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive informa
- CVE-2016-1411A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security ApplianceCisco AsyncOS
- CVE-2016-6449A vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP Connector Endpoint software could allow an autCisco FireAMP Connector Endpoint software
- CVE-2016-6464A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthentCisco Unified Communications Manager
- CVE-2016-6465A vulnerability in the content filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances and Cisco Web Security Cisco AsyncOS
- CVE-2016-6467A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an uCisco Aggregation Services Router (ASR) 5000 Series Switch
- CVE-2016-6468A vulnerability in the web-based management interface of Cisco Emergency Responder could allow an unauthenticated, remote attacker to conducCisco Emergency Responder
- CVE-2016-6469A vulnerability in HTTP URL parsing of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker Cisco Web Security Appliance
- CVE-2016-6470A vulnerability in the installation procedure of the Cisco Hybrid Media Service could allow an authenticated, local attacker to elevate privCisco Hybrid Media Service
- CVE-2016-6471A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an Cisco Firepower Management Center
- CVE-2016-6473A vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an unauthenticated, adjacent attacker to cause Cisco IOS
- CVE-2016-6474A vulnerability in the implementation of X.509 Version 3 for SSH authentication functionality in Cisco IOS and IOS XE Software could allow aCisco IOS
- CVE-2016-9192A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute aCisco AnyConnect Secure Mobility Client
- CVE-2016-9193A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System SoftwaCisco FireSIGHT
- CVE-2016-9198A vulnerability in the Active Directory integration component of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remoteCisco Identity Services Engine
- CVE-2016-9199A vulnerability in the Cisco application-hosting framework (CAF) of Cisco IOx could allow an authenticated, remote attacker to read arbitrarCisco IOx
- CVE-2016-9200A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct Cisco Prime Collaboration Assurance
- CVE-2016-9201A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker toCisco IOS and Cisco IOS XE
- CVE-2016-9202A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an unauthenticated, remotCisco Email Security Appliance
- CVE-2016-9203A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remCisco ASR
- CVE-2016-9204A vulnerability in the Cisco Intercloud Fabric (ICF) Director could allow an unauthenticated, remote attacker to connect to internal serviceCisco Intercloud Fabric (ICF) Director
- CVE-2016-9205A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Cisco IOS XR
- CVE-2016-9206A vulnerability in the ccmadmin page of Cisco Unified Communications Manager (CUCM) could allow an unauthenticated, remote attacker to conduCisco Unified Communications Manager
- CVE-2016-9207A vulnerability in the HTTP traffic server component of Cisco Expressway could allow an unauthenticated, remote attacker to initiate TCP conCisco Expressway
- CVE-2016-9208A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder coulCisco Emergency Responder
- CVE-2016-9209A vulnerability in TCP processing in Cisco FirePOWER system software could allow an unauthenticated, remote attacker to download files that Cisco FirePOWER
- CVE-2016-9210A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticaCisco Unified Reporting
- CVE-2016-9211A vulnerability in TCP port management in Cisco ONS 15454 Series Multiservice Provisioning Platforms could allow an unauthenticated, remote Cisco ONS 15454 Series Multiservice Provisioning
- CVE-2016-9212A vulnerability in the Decrypt for End-User Notification configuration parameter of Cisco AsyncOS Software for Cisco Web Security AppliancesCisco Web Security Appliance
- CVE-2016-9214Cisco Identity Services Engine (ISE) contains a vulnerability that could allow an unauthenticated, remote attacker to conduct a cross-site sCisco Identity Services Engine
- CVE-2016-9215A vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in to the device with the privileges of the rooCisco IOS XR