CVEs published in March 2016
391 vulnerabilities, 41 critical, 3 exploited.
- broadcom single sign-onThe non-Domino web agents in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before...9.1 Critical
- broadcom single sign-onThe Domino web agent in CA Single Sign-On (aka SSO, formerly SiteMinder) R6, R12.0 before SP3...9.1 Critical
- apple safariApple Safari before 9.1 allows remote attackers to spoof the user interface via a web page that...4.3 Medium
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...8.1 High
- oracle jdk, jre, redhat enterprise linux desktop +4 more +6 moreUnspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to...8.1 High
- cypherpunks pidgin-otrUse-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the...9.8 Critical
- redmine, debian linux +1 moreapp/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3...5.3 Medium
- redmine, debian linux +1 moreOpen redirect vulnerability in the valid_back_url function in app/controllers...7.4 High
- redmine, debian linux +1 moreThe Issues API in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote...4.3 Medium
- hp service managerHPE Service Manager (SM) 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to...9.8 Critical
- hp operations orchestration, operations orchestration content +1 moreHPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0...9.8 Critical
- phpThe make_http_soap_request function in ext/soap/php_http.c in PHP before 5.4.44, 5.5.x before 5.5...7.1 High
hhvmUbuntu[Unknown description]No score- ibm business process manager, websphere process server +1 moreBusiness Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process...4.3 Medium
iceweaselDebianiceweasel - security updateNo score- hp support assistantHP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via...9.8 Critical
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the OpenID Connect (OIDC) client web application in...6.1 Medium
- xzeres 442sr osCross-site scripting (XSS) vulnerability in XZERES 442SR OS on 442SR wind turbines allows remote...6.1 Medium
- edx open edxlms/templates/footer-edx-new.html in Open edX edx-platform before 2015-01-29 does not properly...6.5 Medium
- siemens apogee insightSiemens APOGEE Insight uses weak permissions for the application folder, which allows local users...3.4 Low
- abb panel builder 800Untrusted search path vulnerability in ABB Panel Builder 800 5.1 allows local users to gain...7.2 High
- symantec endpoint protection managerThe SysPlant.sys driver in the Application and Device Control (ADC) component in the client in...8.8 High
- symantec endpoint protection managerSQL injection vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6-MP4...8.8 High
- symantec endpoint protection managerCross-site request forgery (CSRF) vulnerability in Symantec Endpoint Protection Manager (SEPM) 12...8.0 High
- ibm tivoli netview access services** DISPUTED ** IBM Tivoli NetView Access Services (NVAS) allows remote authenticated users to...8.8 High
- hp system management homepageHPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or...7.7 High
- hp system management homepageHPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via...9.8 Critical
- hp system management homepageHPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive...6.5 Medium
- hp system management homepageHPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive...8.1 High
- novell filrCross-site scripting (XSS) vulnerability in Novell Filr 1.2 before Hot Patch 4 allows remote...6.1 Medium
- dameware mini remote controlStack-based buffer overflow in dwrcs.exe in the dwmrcs daemon in SolarWinds DameWare Mini Remote...9.8 Critical
- hp enterprise security manager, enterprise security manager express +1 moreHPE ArcSight ESM before 6.8c, and ArcSight ESM Express before 6.9.1, allows remote authenticated...6.5 Medium
- quagga, debian linux +1 moreThe bgp_nlri_parse_vpnv4 function in bgp_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga...8.1 High
pamUbuntupam regressionNo scoreshotwellMageiaUpdated shotwell packages fix security vulnerabilitiesNo score- dropbear ssh project sshCRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to...6.4 Medium
- 9bis kitty, simon tatham putty +1 moreStack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6...9.8 Critical
- siemens simatic s7 cpu 1200 firmwareSiemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a "user program...6.5 Medium
- vmware vrealize business advanced and enterpriseCross-site scripting (XSS) vulnerability in VMware vRealize Business Advanced and Enterprise 8.x...5.4 Medium
- microfocus arcsight enterprise security managerHPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and...8.0 High
- microfocus arcsight enterprise security managerHPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and...7.8 High
- vmware vrealize automationCross-site scripting (XSS) vulnerability in VMware vRealize Automation 6.x before 6.2.4 on Linux...5.4 Medium
- spipThe encoder_contexte_ajax function in ecrire/inc/filtres.php in SPIP 2.x before 2.1.19, 3.0.x...9.8 Critical
- spip, debian linux +1 moreSPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to...9.8 Critical
- git-scm git, opensuse leap, opensuse +4 more +6 morerevision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers...9.8 Critical
- git-scm git, opensuse leap, opensuse +4 more +6 moreInteger overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1)...9.8 Critical
- hp network automationHPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to...9.8 Critical
- hp network automationHPE Network Automation 9.22 through 9.22.02 and 10.x before 10.00.02 allows remote attackers to...9.8 Critical
- openstack troveOpenstack DBaaS (Trove) Improper Link Resolution Before File Access5.5 Medium
- apple software updateApple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in...5.9 Medium
- Show moreLoading…