CVEs published in March 2016
391 vulnerabilities, 41 critical, 3 exploited.
- qemu, canonical ubuntu linux +1 moreThe ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before...6.0 Medium
- cisco prime infrastructureCisco Prime Infrastructure 3.0 allows remote authenticated users to execute arbitrary code via a...8.8 High
- cisco prime infrastructureCisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to read...6.4 Medium
- cisco policy suiteThe password-management administration component in Cisco Policy Suite (CPS) 7.0.1.3, 7.0.2, 7.0...5.3 Medium
- cisco firesight system softwareCisco FireSIGHT System Software 6.1.0 does not use a constant-time algorithm for verifying...3.7 Low
- cisco web security applianceThe HTTPS Proxy feature in Cisco AsyncOS before 8.5.3-051 and 9.x before 9.0.0-485 on Web...5.3 Medium
- corega cg-wlbargmh firmware, cg-wlbargnl firmware +1 moreCross-site request forgery (CSRF) vulnerability on Corega CG-WLBARGMH and CG-WLBARGNL devices...8.8 High
- ibm business process managerCross-site scripting (XSS) vulnerability in the document-list control implementation in IBM...5.4 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3...3.1 Low
- zyxel gs1900-10hp firmwareCisco NX-OS 7.1(1)N1(1) on Nexus 5500, 5600, and 6000 devices does not properly validate PDUs in...7.5 High
- cisco nx-os, unified computing system, netgear jr6150 firmware +4 more +6 moreCisco NX-OS 4.0 through 6.1 on Nexus 1000V 3000, 4000, 5000, 6000, and 7000 devices and Unified...7.5 High
- cisco firesight system softwareCross-site scripting (XSS) vulnerability in the Device Management UI in the management interface...6.1 Medium
- cisco unified communications domain managerCross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 8...6.1 Medium
- jasper project jasper, canonical ubuntu linux +1 moreMemory leak in the jas_iccprof_createfrombuf function in JasPer 1.900.1 and earlier allows remote...5.7 Medium
- jasper project jasper, canonical ubuntu linux +1 moreDouble free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier...7.6 High
- samsung x14j firmware, sun opensolaris, zyxel gs1900-10hp firmware +1 more +3 moreCisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2...9.8 Critical
ctdbDebianctdb - regression updateNo scoresquid3Debiansquid3 - regression updateNo score- linux kernel, novell suse linux enterprise debuginfo, suse linux enterprise desktop +6 more +8 morefs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which...6.2 Medium
- linux kernel, novell suse linux enterprise debuginfo, suse linux enterprise desktop +8 more +10 moreThe hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not...6.8 Medium
- roundup-tracker roundup, debian linux +1 moreRoundup sensitive data disclosure vulnerability4.3 Medium
drupalMageiaUpdated drupal packages fix security vulnerabilitiesNo score- rockwellautomation compactlogix 1756-en2f series a firmware, compactlogix 1756-en2f series b firmware, compactlogix 1756-en2t series a firmware +20 more +22 moreCross-site scripting (XSS) vulnerability in the web server in Rockwell Automation Allen-Bradley...6.1 Medium
- schneider-electric struxureware building operations automation server as-p firmware, struxureware building operations automation server as firmware +1 moreSchneider Electric Struxureware Building Operations Automation Server AS 1.7 and earlier and AS-P...7.2 High
- eximExim before 4.86.2, when installed setuid root, allows local users to gain privileges via the...7.0 High
- djangoproject djangoDjango User Enumeration Vulnerability3.1 Low
- djangoproject djangoDjango XSS Vulnerability7.4 High
- opensslAn oracle protection mechanism in the get_client_master_key function in s2_srvr.c in the SSLv2...5.9 Medium
- opensslThe get_client_master_key function in s2_srvr.c in the SSLv2 implementation in OpenSSL before 0.9...5.9 Medium
- phpmyadminphpMyAdmin Improper Input Validation6.8 Medium
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.4.x before 4.4.15.5 and 4.5.x...5.4 Medium
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.15, 4.4.x...6.1 Medium
- phpmyadminphpMyAdmin Cross-site scripting (XSS) vulnerability in SQL parser5.4 Medium
- cisco videoscape distribution suite for internet streamingThe TCP implementation in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) 3.3...5.3 Medium
- opensslThe doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before...9.8 Critical
- perl, canonical ubuntu linux, debian linux +7 more +9 morePerl might allow context-dependent attackers to bypass the taint protection mechanism in a child...7.5 High
- openssl, pulsesecure client, steel belted radius +2 moreThe SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products,...5.9 Medium
- openssl, pulsesecure client, steel belted radius +2 moreThe fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0...9.8 Critical
- opensslMemory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2...7.5 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreMultiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote...7.5 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreThe MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s...5.1 Medium