CVEs published December 30, 2016
9 CVEs were published on December 30, 2016: 1 critical, 0 high. 1 is now in CISA KEV.
- Published
- 9
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 1
- Fix available
- 4
Most affected products
- phpmailer/phpmailer
- 2
- swiftmailer/swiftmailer
- 1
- zendframework/zend-mail
- 1
Critical 1
Medium, low and unrated 8
- CVE-2016-10034The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framewzendframework/zend-mail
- CVE-2016-10045The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail command and consequently ephpmailer/phpmailer
- CVE-2016-10074The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters toswiftmailer/swiftmailer
- CVE-2016-10088The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option i
- CVE-2016-10082include/functions_installer.inc.php in Serendipity through 2.0.5 is vulnerable to File Inclusion and a possible Code Execution attack during
- CVE-2016-10083Cross-site scripting (XSS) vulnerability in admin/plugin.php in Piwigo through 2.8.3 allows remote attackers to inject arbitrary web script
- CVE-2016-10084admin/batch_manager.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the $page['
- CVE-2016-10085admin/languages.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the tab paramet