CVEs published in March 2016
391 vulnerabilities, 41 critical, 3 exploited.
- ibm maximo asset managementCross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1.1 through 7.1.1.3, 7...5.4 Medium
- ibm maximo asset management, maximo for government, maximo for life sciences +5 more +7 moreIBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to...4.3 Medium
- ibm websphere commerceIBM WebSphere Commerce 6.x through 6.0.0.11, 7.x through 7.0.0.9, and 8.x before 8.0.0.3 allows...3.7 Low
- mozilla firefox, webrtc project webrtc +1 moreUse-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in...5.5 Medium
- mozilla firefox, webrtc project webrtc +1 moreMultiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC...6.3 Medium
- mozilla firefoxRace condition in libvpx in Mozilla Firefox before 45.0 on Windows might allow remote attackers...8.8 High
- mozilla firefoxThe I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before...8.8 High
- mozilla firefoxInteger underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox...8.8 High
- wiresharkepan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2...5.9 Medium
- wiresharkepan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.12.x before 1.12.10 and 2...5.9 Medium
- wiresharkOff-by-one error in epan/dissectors/packet-gsm_abis_oml.c in the GSM A-bis OML dissector in...5.9 Medium
- debian linux, canonical ubuntu linux +1 morept_chown in the glibc package before 2.19-18+deb8u4 on Debian jessie; the elibc package before 2...8.4 High
- google androidlibvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016...9.8 Critical
- google androidSetup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate...6.1 Medium
- google androidThe getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony...5.5 Medium
- google androidbtif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a...6.5 Medium
- google androidThe BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in...7.5 High
- google androidThe BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in...7.5 High
- google androidMultiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5...7.8 High
- google androidlibcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x...7.8 High
- google androidThe Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain...5.3 Medium
- google androidlibmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive...5.3 Medium
- google android, linux kernel +1 moreThe pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in...4.0 Medium
- google androidThe MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to...7.0 High
- google androidThe MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain...7.8 High
- google androidThe Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x...7.8 High
- google androidThe caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in...5.9 Medium
- google androidmediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or...9.8 Critical
- google androidThe MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver...9.8 Critical
- ibm maximo asset management, smartcloud control desk, change and configuration management database +10 more +12 moreSQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5...5.4 Medium
- ibm flashsystem v9000 firmwareCross-site request forgery (CSRF) vulnerability in IBM Flash System V9000 7.4 before 7.4.1.4, 7.5...8.8 High
- dte energy insightThe REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote...4.3 Medium
- cisco ios xrCisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check...5.3 Medium
- cisco prime lan management solutionCisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key...7.1 High
- cisco telepresence video communication server softwareCisco TelePresence Video Communication Server (VCS) X8.5.1 and X8.5.2 allows remote authenticated...6.5 Medium
- ibm tivoli monitoringThe portal client in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0...9.9 Critical
- schneider-electric telvent rtu firmwareSchneider Electric Telvent Sage 2300 RTUs with firmware before C3413-500-S01, and LANDAC II-2,...5.3 Medium
- google android, linux kernel +1 moreThe LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in...5.5 Medium
- mozilla firefox, network security services +1 moreUse-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange function in Mozilla Network...7.3 High
- adobe air, air sdk, flash player +4 more +6 moreAdobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X...8.8 High
- adobe air, air sdk, flash player +4 more +6 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before...8.8 High
- adobe air, air sdk, flash player +4 more +6 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before...8.8 High
- adobe air, air sdk, flash player +4 more +6 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before...8.8 High
- adobe air, air sdk, flash player +4 more +6 moreAdobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X...8.8 High
phpMageia,php-timezonedbMageia,timezoneMageia +2 moreUpdated php/timezone/php-timezonedb packages fix security vulnerabilityNo score- openbsd openssh, oracle vm server +1 moreMultiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote...6.4 Medium
- adobe air, air sdk, flash player +5 more +7 moreInteger overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182...8.8 High
- adobe air, air sdk, flash player +4 more +6 moreAdobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X...8.8 High
- adobe air, air sdk, flash player +4 more +6 moreHeap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before...8.8 High
- adobe air, air sdk, flash player +4 more +6 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before...8.8 High
- Show moreLoading…