CVEs published December 15, 2016
58 CVEs were published on December 15, 2016: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 58
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 57
- Now in CISA KEV
- 1
- Fix available
- 1
Most affected products
- Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- 17
- Adobe Digital Editions 4.5.2 and earlier
- 2
- Adobe Experience Manager 6.2 and earlier
- 2
- Adobe Experience Manager Forms 6.2 and earlier, LiveCycle 1…
- 2
- Adobe Animate 15.2.1.95 and earlier
- 1
- Adobe ColdFusion Builder 2016 update 2 and earlier, 3.0.3 a…
- 1
- Adobe DNG Converter 9.7 and earlier
- 1
- Adobe Experience Manager
- 1
- Adobe Experience Manager 6.1 and earlier
- 1
- Adobe InDesign 11.4.1 and earlier, InDesign Server 11.0.0 a…
- 1
High 1
Medium, low and unrated 57
- CVE-2015-3271Apache Tika server (aka tika-server) in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header.org.apache.tika:tika-server
- CVE-2016-9565MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files b
- CVE-2016-9566base/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the nagios group to gain root privileges via a sy
- CVE-2015-8542An issue was discovered in Open-Xchange Guard before 2.2.0-rev8.
- CVE-2016-2840An issue was discovered in Open-Xchange Server 6 / OX AppSuite before 7.8.0-rev26.
- CVE-2016-3173An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27.
- CVE-2016-3174An issue was discovered in Open-Xchange OX AppSuite before 7.8.0-rev27.
- CVE-2016-4026An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11.
- CVE-2016-4027An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev10.
- CVE-2016-4028An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8.
- CVE-2016-4045An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11.
- CVE-2016-4046An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11.
- CVE-2016-4047An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev8.
- CVE-2016-4048An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11.
- CVE-2016-5124An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev14.
- CVE-2016-5740An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev5.
- CVE-2016-6842An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8.
- CVE-2016-6843An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8.
- CVE-2016-6844An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8.
- CVE-2016-6845An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8.
- CVE-2016-6847An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8.
- CVE-2016-6848An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8.
- CVE-2016-6850An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8.
- CVE-2016-6851An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.
- CVE-2016-6852An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8.
- CVE-2016-6853An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.
- CVE-2016-6854An issue was discovered in Open-Xchange OX Guard before 2.4.2-rev5.
- CVE-2016-6933Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponeAdobe Experience Manager Forms 6.2 and earlier, LiveCycle 1…
- CVE-2016-6934Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the PMAdmin moAdobe Experience Manager Forms 6.2 and earlier, LiveCycle 1…
- CVE-2016-7856Adobe DNG Converter versions 9.7 and earlier have an exploitable memory corruption vulnerability.Adobe DNG Converter 9.7 and earlier
- CVE-2016-7866Adobe Animate versions 15.2.1.95 and earlier have an exploitable memory corruption vulnerability.Adobe Animate 15.2.1.95 and earlier
- CVE-2016-7867Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability iAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7868Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability iAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7869Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability iAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7870Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable buffer overflow / underflow vulnerability iAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7871Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the WorkAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7872Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7873Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the PSDKAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7874Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the NetCAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7875Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable integer overflow vulnerability in the BitmaAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7876Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable memory corruption vulnerability in the ClipAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7877Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the Action Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7878Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the PSDK's Adobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7879Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the NetConnAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7880Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability when setting tAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7881Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the MovieClAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7882Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be used in cross-site scrAdobe Experience Manager 6.2 and earlier
- CVE-2016-7883Adobe Experience Manager version 6.2 has an input validation issue in create Launch wizard that could be used in cross-site scripting attackAdobe Experience Manager
- CVE-2016-7884Adobe Experience Manager versions 6.1 and earlier have an input validation issue in the DAM create assets that could be used in cross-site sAdobe Experience Manager 6.1 and earlier
- CVE-2016-7885Adobe Experience Manager versions 6.2 and earlier have a vulnerability that could be used in Cross-Site Request Forgery attacks.Adobe Experience Manager 6.2 and earlier
- CVE-2016-7886Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption vulnerability.Adobe InDesign 11.4.1 and earlier, InDesign Server 11.0.0 a…
- CVE-2016-7887Adobe ColdFusion Builder versions 2016 update 2 and earlier, 3.0.3 and earlier have an important vulnerability that could lead to informatioAdobe ColdFusion Builder 2016 update 2 and earlier, 3.0.3 a…
- CVE-2016-7888Adobe Digital Editions versions 4.5.2 and earlier has an important vulnerability that could lead to memory address leak.Adobe Digital Editions 4.5.2 and earlier
- CVE-2016-7889Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could lead to information disclosure.Adobe Digital Editions 4.5.2 and earlier
- CVE-2016-7890Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have security bypass vulnerability in the implementation of theAdobe Flash Player 23.0.0.207 and earlier, 11.2.202.644 and…
- CVE-2016-7891Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scriptiAdobe RoboHelp 2015.0.3 and earlier, RoboHelp 11 and earlier
- CVE-2015-6574The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service (CPU consumpt