CVEs published January 13, 2017
41 CVEs were published on January 13, 2017: 0 critical, 0 high.
- Published
- 41
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 41
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- BES12 versions through
- 2
- Google Android
- 2
- BlackBerry WatchDox Server
- 1
- Cloud Foundry Foundation cf-release versions prior to v250…
- 1
- com.liferay.portal:portal-impl · com.liferay.portal:portal-…
- 1
- org.apache.storm:storm
- 1
Medium, low and unrated 41
- CVE-2010-5327Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.com.liferay.portal:portal-impl · com.liferay.portal:portal-…
- CVE-2016-2090Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, whi
- CVE-2016-6885The pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid free and crash) via a base
- CVE-2016-6886The pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via
- CVE-2016-6887The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attacker
- CVE-2016-7426NTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting for all associations is enabled, which allo
- CVE-2016-7427The broadcast mode replay prevention functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (rejec
- CVE-2016-7428ntpd in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (reject broadcast mode packets) via the poll interval in a b
- CVE-2016-7429NTP before 4.2.8p9 changes the peer structure to the interface it receives the response from a source, which allows remote attackers to caus
- CVE-2016-7431NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero.
- CVE-2016-7433NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown
- CVE-2016-7434The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a crafted mrulist query.
- CVE-2016-8467An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device.Google Android
- CVE-2016-8671The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attacker
- CVE-2016-8882The jpc_dec_tilefini function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (NULL
- CVE-2016-8883The jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.8 allows remote attackers to cause a denial of service (assertion failur
- CVE-2016-9107The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via
- CVE-2016-9310The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or unset traps via a crafted control mo
- CVE-2016-9311ntpd in NTP before 4.2.8p9, when the trap service is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference
- CVE-2016-9312ntpd in NTP before 4.2.8p9, when running on Windows, allows remote attackers to cause a denial of service via a large UDP packet.
- CVE-2016-9807The flx_decode_chunks function in gst/flx/gstflxdec.c in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (inval
- CVE-2016-9808The FLIC decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a craft
- CVE-2016-9809Off-by-one error in the gst_h264_parse_set_caps function in GStreamer before 1.10.2 allows remote attackers to have unspecified impact via a
- CVE-2016-9810The gst_decode_chain_free_internal function in the flxdex decoder in gst-plugins-good in GStreamer before 1.10.2 allows remote attackers to
- CVE-2016-9811The windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE is set to always-malloc, allows remote attac
- CVE-2016-9812The gst_mpegts_section_new function in the mpegts decoder in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (o
- CVE-2016-9813The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (NULL pointer d
- CVE-2017-0398An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission lGoogle Android
- CVE-2015-3188The UI daemon in Apache Storm 0.10.0 before 0.10.0-beta1 allows remote attackers to execute arbitrary code via unspecified vectors.org.apache.storm:storm
- CVE-2016-10135An issue was discovered on LG devices using the MTK chipset with L(5.0/5.1), M(6.0/6.0.1), and N(7.0) software, and RCA Voyager Tablet, BLU
- CVE-2016-10136An issue was discovered on BLU R1 HD devices with Shanghai Adups software.
- CVE-2016-10137An issue was discovered on BLU R1 HD devices with Shanghai Adups software.
- CVE-2016-10138An issue was discovered on BLU Advance 5.0 and BLU R1 HD devices with Shanghai Adups software.
- CVE-2016-10139An issue was discovered on BLU R1 HD devices with Shanghai Adups software.
- CVE-2016-10140Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1.30
- CVE-2016-10141An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc.
- CVE-2016-3128A spoofing vulnerability in the Core of BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to enroll an illegitimaBES12 versions through
- CVE-2016-3130An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows reBES12 versions through
- CVE-2016-9882An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0.Cloud Foundry Foundation cf-release versions prior to v250…
- CVE-2017-3890A reflected cross-site scripting vulnerability in the BlackBerry WatchDox Server components Appliance-X, version 1.8.1 and earlier, and vAPPBlackBerry WatchDox Server
- CVE-2017-5364Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 allows an attacker to cause Denial of Service and Remote Code Execution when the v