CVEs published January 12, 2017
159 CVEs were published on January 12, 2017: 0 critical, 1 high.
- Published
- 159
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 158
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Google Android
- 125
- Android Kernel-3.10
- 3
- Android Kernel-3.10 Kernel-3.18
- 2
- Android Kernel-3.18
- 2
- Android Android-N/A
- 1
- bcit-ci/codeigniter
- 1
- genix/cms
- 1
- Lenovo Group XClarity Administrator
- 1
- org.igniterealtime.smack:smack-core
- 1
- org.jenkins-ci.main:jenkins-core
- 1
High 1
Medium, low and unrated 158
- CVE-2015-6501Open redirect vulnerability in the Console in Puppet Enterprise before 2015.2.1 allows remote attackers to redirect users to arbitrary web s
- CVE-2016-10027Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle org.igniterealtime.smack:smack-core
- CVE-2016-3149Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execu
- CVE-2016-3150Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03,
- CVE-2016-3151Directory traversal vulnerability in the wallpaper parsing functionality in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CS
- CVE-2016-3152Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extractin
- CVE-2016-5715Open redirect vulnerability in the Console in Puppet Enterprise 2015.x and 2016.x before 2016.4.0 allows remote attackers to redirect users
- CVE-2016-5737The Gerrit configuration in the Openstack Puppet module for Gerrit (aka puppet-gerrit) improperly marks text/html as a safe mimetype, which
- CVE-2016-6492The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted appli
- CVE-2016-9299The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized org.jenkins-ci.main:jenkins-core
- CVE-2016-7790Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php.
- CVE-2016-7791Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php.
- CVE-2016-8221Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded iLenovo Group XClarity Administrator
- CVE-2016-8605The mkdir procedure of GNU Guile temporarily changed the process' umask to zero.
- CVE-2016-8606The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack.
- CVE-2016-8398Unauthenticated messages processed by the UE.Google Android
- CVE-2016-8412An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within tGoogle Android
- CVE-2016-8415An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8422An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code withGoogle Android
- CVE-2016-8423An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code withGoogle Android
- CVE-2016-8424An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinAndroid Kernel-3.10
- CVE-2016-8425An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-8426An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-8427An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-8428An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-8429An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-8430An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-8431An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-8432An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-8433An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within tGoogle Android
- CVE-2016-8434An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code withGoogle Android
- CVE-2016-8435An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-8436An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8437Improper input validation in Access Control APIs.Google Android
- CVE-2016-8438Integer overflow leading to a TOCTOU condition in hypervisor PIL.Google Android
- CVE-2016-8439Possible buffer overflow in trust zone access control API.Google Android
- CVE-2016-8440Possible buffer overflow in SMMU system call.Google Android
- CVE-2016-8441Possible buffer overflow in the hypervisor.Google Android
- CVE-2016-8442Possible unauthorized memory access in the hypervisor.Google Android
- CVE-2016-8443Possible unauthorized memory access in the hypervisor.Google Android
- CVE-2016-8444An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within tGoogle Android
- CVE-2016-8445An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciouGoogle Android
- CVE-2016-8446An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciouGoogle Android
- CVE-2016-8447An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciouGoogle Android
- CVE-2016-8448An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciouGoogle Android
- CVE-2016-8449An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-8450An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8451An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary Google Android
- CVE-2016-8452An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8453An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8454An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiAndroid Kernel-3.10 Kernel-3.18
- CVE-2016-8455An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8456An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8457An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8458An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary Google Android
- CVE-2016-8459Possible buffer overflow in storage subsystem.Google Android
- CVE-2016-8460An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its Google Android
- CVE-2016-8461An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level.Android Kernel-3.18
- CVE-2016-8462An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level.Google Android
- CVE-2016-8463A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause aGoogle Android
- CVE-2016-8464An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8465An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8466An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiAndroid Kernel-3.10 Kernel-3.18
- CVE-2016-8468An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context ofGoogle Android
- CVE-2016-8469An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permisGoogle Android
- CVE-2016-8470An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permGoogle Android
- CVE-2016-8471An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permGoogle Android
- CVE-2016-8472An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permGoogle Android
- CVE-2016-8473An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside oGoogle Android
- CVE-2016-8474An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside oGoogle Android
- CVE-2016-8475An information disclosure vulnerability in the HTC input driver could enable a local malicious application to access data outside of its perGoogle Android
- CVE-2017-0381An information disclosure vulnerability in silk/NLSF_stabilize.c in libopus in Mediaserver could enable a local malicious application to accGoogle Android
- CVE-2017-0382A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrGoogle Android
- CVE-2017-0383An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within thGoogle Android
- CVE-2017-0384An elevation of privilege vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious aGoogle Android
- CVE-2017-0385An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conteGoogle Android
- CVE-2017-0386An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within theGoogle Android
- CVE-2017-0387An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the conteGoogle Android
- CVE-2017-0388An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read data from an external sGoogle Android
- CVE-2017-0389A denial of service vulnerability in core networking could enable a remote attacker to use specially crafted network packet to cause a devicGoogle Android
- CVE-2017-0390A denial of service vulnerability in Tremolo/dpen.s in Mediaserver could enable a remote attacker to use a specially crafted file to cause aGoogle Android
- CVE-2017-0391A denial of service vulnerability in decoder/ihevcd_decode.c in libhevc in Mediaserver could enable a remote attacker to use a specially craGoogle Android
- CVE-2017-0392A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to use a specially craftGoogle Android
- CVE-2017-0393A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device Google Android
- CVE-2017-0394A denial of service vulnerability in Telephony could enable a remote attacker to cause a device hang or reboot.Google Android
- CVE-2017-0395An elevation of privilege vulnerability in Contacts could enable a local malicious application to silently create contact information.Google Android
- CVE-2017-0396An information disclosure vulnerability in visualizer/EffectVisualizer.cpp in libeffects in Mediaserver could enable a local malicious appliGoogle Android
- CVE-2017-0397An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to accessGoogle Android
- CVE-2017-0399An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enabGoogle Android
- CVE-2017-0400An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious aGoogle Android
- CVE-2017-0401An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in the Qualcomm audio post processor could enabGoogle Android
- CVE-2017-0402An information disclosure vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious aGoogle Android
- CVE-2017-0403An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application to execute arbitrary Google Android
- CVE-2017-0404An elevation of privilege vulnerability in the kernel sound subsystem could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2016-6755An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2016-6756An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious aGoogle Android
- CVE-2016-6757An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious aGoogle Android
- CVE-2016-6758An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-6759An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-6760An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-6761An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-6762An elevation of privilege vulnerability in the libziparchive library could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-6763A denial of service vulnerability in Telephony could enable a local malicious application to use a specially crafted file to cause a device Google Android
- CVE-2016-6764A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.Google Android
- CVE-2016-6765A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a devicGoogle Android
- CVE-2016-6766A denial of service vulnerability in libmedia and libstagefright in Mediaserver could enable an attacker to use a specially crafted file to Google Android
- CVE-2016-6767A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot.Google Android
- CVE-2016-6768A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrGoogle Android
- CVE-2016-6769An elevation of privilege vulnerability in Smart Lock could enable a local malicious user to access Smart Lock settings without a PIN.Google Android
- CVE-2016-6770An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond itGoogle Android
- CVE-2016-6771An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its accessGoogle Android
- CVE-2016-6772An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to execute arbitrary code within the context of Google Android
- CVE-2016-6773An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outsiGoogle Android
- CVE-2016-6774An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protectionsGoogle Android
- CVE-2016-6775An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-6776An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-6777An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinGoogle Android
- CVE-2016-6778An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2016-6779An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code wAndroid Kernel-3.10
- CVE-2016-6780An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code wGoogle Android
- CVE-2016-6781An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within tGoogle Android
- CVE-2016-6782An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within tGoogle Android
- CVE-2016-6783An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within tGoogle Android
- CVE-2016-6784An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within tAndroid Android-N/A
- CVE-2016-6785An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within tGoogle Android
- CVE-2016-6788An elevation of privilege vulnerability in the MediaTek I2C driver could enable a local malicious application to execute arbitrary code withGoogle Android
- CVE-2016-6789An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrGoogle Android
- CVE-2016-6790An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrAndroid Kernel-3.18
- CVE-2016-6791An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8391An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8392An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2016-8393An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary Google Android
- CVE-2016-8394An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary Google Android
- CVE-2016-8395A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which mGoogle Android
- CVE-2016-8396An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2016-8397An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its Google Android
- CVE-2016-8399An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary cGoogle Android
- CVE-2016-8400An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application to access data outsGoogle Android
- CVE-2016-8401An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could Google Android
- CVE-2016-8402An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could Google Android
- CVE-2016-8403An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could Google Android
- CVE-2016-8404An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could Android Kernel-3.10
- CVE-2016-8405An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could Google Android
- CVE-2016-8406An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could Google Android
- CVE-2016-8407An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could Google Android
- CVE-2016-8408An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its Google Android
- CVE-2016-8409An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its Google Android
- CVE-2016-8410An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of itGoogle Android
- CVE-2016-10131system/libraries/Email.php in CodeIgniter before 3.1.3 allows remote attackers to execute arbitrary code by leveraging control over the emaibcit-ci/codeigniter
- CVE-2016-9131named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of ser
- CVE-2016-9147named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and d
- CVE-2016-9444named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of ser
- CVE-2017-5345SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute a
- CVE-2017-5346SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to exegenix/cms
- CVE-2017-5347SQL injection vulnerability in inc/mod/newsletter/options.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitr
- CVE-2017-5350Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handl
- CVE-2017-5351Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large numb
- CVE-2016-7479In all versions of PHP 7, during the unserialization process, resizing the 'properties' hash table of a serialized object may lead to use-afPHP 7.x