CVEs published in March 2016
391 vulnerabilities, 41 critical, 3 exploited.
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or...7.5 High
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...7.5 High
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute...7.5 High
- microsoft internet explorerMicrosoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a...7.5 High
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...7.5 High
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary...7.5 High
- microsoft windows 10, windows 7, windows 8.1 +3 more +5 moreMicrosoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2...8.8 High
- microsoft windows vista, windows server 2008 +1 moreMicrosoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local...8.4 High
- microsoft windows, windows 7, windows 8.1 +5 more +7 moreThe Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +3 more +5 moreMicrosoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2...8.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreOLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreOLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8...7.8 High
- microsoft windows 7, windows server 2008, windows vista +2 moreMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 do not...7.8 High
- microsoft officeMicrosoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 does not properly sign an unspecified...7.8 High
- microsoft infopathMicrosoft InfoPath 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary...7.8 High
- linux kernel, novell suse linux enterprise debuginfo, suse linux enterprise desktop +6 more +8 moreThe netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields...8.4 High
- cypherpunks libotr, debian linux, opensuse leap +1 more +3 moreInteger overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to...9.8 Critical
- isc dhcp, canonical ubuntu linux, debian linux +2 moreISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number...5.9 Medium
- rubyonrails rails, ruby on rails, debian linux +2 moreactionpack allows remote code execution via application's unrestricted use of render method7.3 High
- rubyonrails rails, ruby on rails +1 moreactionview contains Path Traversal vulnerability5.3 Medium
- isc bind, canonical ubuntu linux, debian linux +11 more +13 morenamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to...8.6 High
- isc bind, canonical ubuntu linux, debian linux +11 more +13 morenamed in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME...6.8 Medium
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreThe nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x...8.8 High
- mozilla firefox, oracle linux +1 moreRace condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox...8.8 High
- mozilla firefoxInteger underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to...8.8 High
- mozilla firefoxMozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing...6.5 Medium
- mozilla firefox, thunderbird, opensuse +1 more +3 moreThe nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla...8.8 High
- mozilla firefox, opensuse, oracle linux +2 moreMozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that...4.3 Medium
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and...8.8 High
- mozilla firefoxThe FileReader class in Mozilla Firefox before 45.0 allows local users to gain privileges or...7.4 High
- mozilla firefox, opensuse, oracle linux +2 moreUse-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla...9.8 Critical
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument...8.8 High
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreInteger underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox...8.8 High
- mozilla firefoxThe ServiceWorkerManager class in Mozilla Firefox before 45.0 allows remote attackers to execute...8.8 High
- mozilla firefox, opensuse, oracle linux +2 morebrowser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7...4.3 Medium
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreMemory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7...4.3 Medium
- mozilla firefox, novell suse package hub for suse linux enterprise, opensuse leap +1 more +3 moreMozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers...6.5 Medium
- mozilla firefox, novell suse package hub for suse linux enterprise, opensuse leap +1 more +3 moreMozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain...4.3 Medium
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreThe nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before...8.8 High
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow...8.8 High
- mozilla firefox, thunderbird, novell suse package hub for suse linux enterprise +3 more +5 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and...8.8 High
- mozilla firefox, network security services, apple iphone os +9 more +11 moreHeap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x...8.8 High
- sambaThe internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4...5.9 Medium
- samba, canonical ubuntu linux, debian linux +2 moreThe SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x...6.5 Medium
- botan project botan, debian linux +1 moreInteger overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27...9.8 Critical
- botan project botan, debian linux +1 moreThe ressol function in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to...7.5 High
- Show moreLoading…