CVEs published in March 2016
391 vulnerabilities, 41 critical, 3 exploited.
-
thunderbirdMageia,thunderbird-l10nMageia +1 more Updated thunderbird/thunderbird-l10n packages fix security vulnerability No score - proftpd, fedoraproject fedora, opensuse +2 more The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle... 7.5 High
- php, apple mac os x +1 more The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x... 8.2 High
- php, apple mac os x +1 more Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x... 9.8 Critical
- gnu glibc, canonical ubuntu linux, fedoraproject fedora +1 more +3 more Stack-based buffer overflow in the nss_dns implementation of the getnetbyname function in GNU C... 7.5 High
- linux kernel The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows... 4.6 Medium
- cogentdatahub cogent datahub Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or... 7.8 High
- apple iphone os The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass... 6.2 Medium
- google chrome, v8, canonical ubuntu linux +1 more +3 more Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome... 8.8 High
- kamailio, debian linux +1 more Heap-based buffer overflow in the encode_msg function in encode_msg.c in the SEAS module in... 9.8 Critical
- autodesk backburner Stack-based buffer overflow in manager.exe in Backburner Manager in Autodesk Backburner 2016 2016... 7.5 High
- sun opensolaris Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (CDM) 8.1... 6.1 Medium
- ibm informix dynamic server The client implementation in IBM Informix Dynamic Server 11.70.xCn on Windows does not properly... 7.8 High
- pcre pcre_jit_compile.c in PCRE 8.35 does not properly use table jumps to optimize nested alternatives... 7.3 High
- No product listed Issue #26657: HTTP server directory traversal No score
- openvswitch, redhat openshift +1 more Buffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2... 9.8 Critical
- cisco ios, nx-os +1 more The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1... 7.5 High
- cisco ios xe, lenovo thinkcentre e75s firmware, samsung x14j firmware +3 more +5 more Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager... 7.5 High
- cisco ios xe, intel core i5-9400f firmware, netgear jr6150 firmware +4 more +6 more The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through... 7.5 High
- cisco ios xe, netgear jr6150 firmware, samsung x14j firmware +3 more +5 more Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial... 7.5 High
- cisco ios xe, lenovo thinkcentre e75s firmware, netgear jr6150 firmware +4 more +6 more The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote... 5.9 Medium
- wp favorite posts project favorite posts Cross-site scripting (XSS) vulnerability in the WP Favorite Posts plugin before 1.6.6 for... 6.1 Medium
- graniteds granite data services The AMF framework in Granite Data Services 3.1.1-SNAPSHOT allows remote authenticated users to... 5.4 Medium
- openafs The client in OpenAFS before 1.6.17 does not properly initialize the (1) AFSStoreStatus, (2)... 5.3 Medium
- mit kerberos 5, opensuse leap, opensuse +2 more The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB... 5.3 Medium
- openafs, debian linux +1 more The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated... 6.5 Medium
- moodle Moodle sensitive information disclosure 5.3 Medium
- moodle Moodle External function mod_assign_save_submission does not check due dates 4.3 Medium
- moodle Moodle allows attackers to obtain sensitive category-detail information 4.3 Medium
- moodle Moodle cross-site request forgery (CSRF) vulnerability 8.8 High
- moodle Moodle provides calendar-event data without considering whether an activity is hidden 4.3 Medium
- moodle Moodle allows attackers to modify "Exclude grade" settings 4.3 Medium
- moodle Moodle allows attackers to discover hidden course names 4.3 Medium
- moodle Moodle Reflected XSS in mod_data advanced search 6.1 Medium
- moodle Moodle XSS from profile fields from external db 6.1 Medium
- moodle Moodle allows attackers to discover student e-mail addresses 4.3 Medium
- google chrome, debian linux, opensuse +2 more The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture... 8.8 High
- google chrome, canonical ubuntu linux, debian linux +1 more +3 more The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome... 8.8 High
- google chrome, debian linux, opensuse +2 more Use-after-free vulnerability in the GetLoadTimes function in renderer... 8.8 High
- google chrome, canonical ubuntu linux, debian linux +1 more +3 more Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser... 8.8 High
- google chrome, canonical ubuntu linux, debian linux +8 more +10 more The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome... 8.8 High
- cisco ios xr The SCP and SFTP modules in Cisco IOS XR 5.0.0 through 5.2.5 on Network Convergence System 6000... 6.5 Medium
- cisco ios The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5... 7.5 High
- qemu The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does... 5.5 Medium
- qemu QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a... 5.5 Medium
- xen Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka... 7.5 High
- apple watchos, iphone os, mac os x +2 more Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly... 5.9 Medium
- apple mac os x server Wiki Server in Apple OS X Server before 5.1 allows remote attackers to obtain sensitive... 5.3 Medium
- apple safari, iphone os +1 more The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1... 5.4 Medium
- apple safari, iphone os +1 more The Page Loading implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1... 6.5 Medium
- Show olderLoading…