Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2017-01-23 CVE-2016-10101 Inadequate Encryption Strength vulnerability in Hiteksoftware Automize
Information Disclosure can occur in Hitek Software's Automize 10.x and 11.x passManager.jsd.
network
high complexity
hiteksoftware CWE-326
8.1
2017-01-21 CVE-2017-5545 Out-of-bounds Read vulnerability in Libimobiledevice Libplist
The main function in plistutil.c in libimobiledevice libplist through 1.12 allows attackers to obtain sensitive information from process memory or cause a denial of service (buffer over-read) via Apple Property List data that is too short.
network
low complexity
libimobiledevice CWE-125
critical
9.1
2017-01-20 CVE-2016-9436 Improper Input Validation vulnerability in multiple products
parsetagx.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to a <i> tag.
network
low complexity
opensuse-project opensuse tats CWE-20
6.5
2017-01-20 CVE-2016-9435 Improper Input Validation vulnerability in multiple products
The HTMLtagproc1 function in file.c in w3m before 0.5.3+git20161009 does not properly initialize values, which allows remote attackers to crash the application via a crafted html file, related to <dd> tags.
network
low complexity
opensuse-project opensuse tats CWE-20
6.5
2017-01-20 CVE-2016-6253 Link Following vulnerability in Netbsd
mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a symlink attack on the user mailbox.
local
low complexity
netbsd CWE-59
7.8
2017-01-20 CVE-2016-5323 Divide By Zero vulnerability in multiple products
The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted Tiff image.
network
low complexity
libtiff opensuse CWE-369
7.5
2017-01-20 CVE-2016-5321 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service (invalid read and crash) via a crafted tiff image.
network
low complexity
opensuse libtiff CWE-119
6.5
2017-01-20 CVE-2016-5319 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libtiff
Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmp file.
network
low complexity
libtiff CWE-119
6.5
2017-01-20 CVE-2016-5318 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libtiff
Stack-based buffer overflow in the _TIFFVGetField function in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted tiff.
network
low complexity
libtiff CWE-119
6.5
2017-01-20 CVE-2016-5317 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Buffer overflow in the PixarLogDecode function in libtiff.so in the PixarLogDecode function in libtiff 4.0.6 and earlier, as used in GNOME nautilus, allows attackers to cause a denial of service attack (crash) via a crafted TIFF file.
network
low complexity
libtiff opensuse-project opensuse CWE-119
6.5