CVEs published in April 2016
612 vulnerabilities, 73 critical, 8 exploited.
- mozilla firefox Mozilla Firefox before 46.0 on Android does not properly restrict JavaScript access to... 6.5 Medium
- mozilla firefox Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature... 5.0 Medium
- mozilla firefox The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user... 5.5 Medium
- cisco information server The XML parser in Cisco Information Server (CIS) 6.2 allows remote attackers to read arbitrary... 10.0 Critical
- lockon ec-cube Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows... 8.8 High
- lockon ec-cube The management screen in LOCKON EC-CUBE 3.0.7 through 3.0.9 allows remote authenticated users to... 6.3 Medium
- lockon ec-cube The login page in the management screen in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote... 5.3 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 more Double free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader... 8.8 High
- botan project botan, debian linux, fedoraproject fedora +2 more Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algorithm to perform a... 7.5 High
- gnome gdk-pixbuf, debian linux +1 more Multiple integer overflows in the (1) pixops_composite_nearest, (2)... 7.8 High
- botan project botan, debian linux, fedoraproject fedora +2 more Botan before 1.10.13 and 1.11.x before 1.11.22 make it easier for remote attackers to conduct... 7.5 High
- botan project botan The Miller-Rabin primality check in Botan before 1.10.8 and 1.11.x before 1.11.9 improperly uses... 7.5 High
-
phpMageia Updated php packages fix security vulnerabilities No score -
php-ZendFrameworkMageia Updated php-ZendFramework packages fix security vulnerability No score - roundcube webmail, opensuse leap +1 more Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote... 8.8 High
- pgpdump project pgpdump, fedoraproject fedora +1 more The read_binary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to... 7.5 High
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 more The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in... 4.3 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 more extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback... 9.8 Critical
- roundcube webmail, opensuse leap, opensuse +2 more Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5... 6.1 Medium
- ocaml, fedoraproject fedora, opensuse +2 more OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to... 9.1 Critical
- gnupg libksba, canonical ubuntu linux +1 more The append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.3 allows remote... 7.5 High
- gnupg libksba, canonical ubuntu linux +1 more Multiple integer overflows in ber-decoder.c in Libksba before 1.3.3 allow remote attackers to... 7.5 High
- gnupg libksba, canonical ubuntu linux +1 more ber-decoder.c in Libksba before 1.3.3 uses an incorrect integer data type, which allows remote... 7.5 High
- gnupg libksba, canonical ubuntu linux +1 more ber-decoder.c in Libksba before 1.3.3 does not properly handle decoder stack overflows, which... 7.5 High
- php, opensuse +1 more The phar_make_dirstream function in ext/phar/dirstream.c in PHP before 5.6.18 and 7.x before 7.0... 8.8 High
- php, opensuse leap +1 more ext/phar/phar_object.c in PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3 mishandles... 8.8 High
- php Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote... 9.8 Critical
- ntp, debian linux, freebsd +13 more +15 more The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote... 5.3 Medium
- ntp NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to... 5.3 Medium
- apache subversion The req_check_access function in the mod_authz_svn module in the httpd server in Apache... 6.5 Medium
- apache subversion The canonicalize_username function in svnserve/cyrus_auth.c in Apache Subversion before 1.8.16... 6.8 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 more Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to... 9.8 Critical
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 more The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google... 6.5 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 more The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8... 8.8 High
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 more Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check... 8.0 High
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 more Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray... 8.8 High
- canonical ubuntu-core-launcher The setup_snappy_os_mounts function in the ubuntu-core-launcher package before 1.0.27.1... 9.8 Critical
- ntp, ntpsec +1 more An exploitable vulnerability exists in the message authentication functionality of libntp in ntp... 5.3 Medium
- ntp, ntpsec +1 more An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that... 7.2 High
- ntp, ntpsec +1 more An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4... 5.3 Medium
- cisco webex productivity tools Untrusted search path vulnerability in Cisco WebEx Productivity Tools 2.40.5001.10012 allows... 7.8 High
- cisco webex meetings server Open redirect vulnerability in Cisco WebEx Meetings Server (CWMS) 2.6 allows remote attackers to... 7.4 High
- cisco application policy infrastructure controller enterprise module The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1)... 7.5 High
- ntp The ntpq protocol in NTP before 4.2.8p7 allows remote attackers to conduct replay attacks by... 4.8 Medium
- ntp ntpq in NTP before 4.2.8p7 allows remote attackers to obtain origin timestamps and then... 5.3 Medium
- shiro8 category freearea addition, itemdetail freearea addition +1 more Cross-site scripting (XSS) vulnerability in the shiro8 (1) category_freearea_ addition_plugin... 6.1 Medium
- ibm db2, db2 connect +1 more IBM DB2 9.7 through FP11, 9.8, 10.1 through FP5, and 10.5 through FP7 on Linux, UNIX, and Windows... 4.3 Medium
- linux kernel, novell suse linux enterprise desktop, suse linux enterprise server +5 more +7 more The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1... 5.5 Medium
- linux kernel The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check... 5.5 Medium
- linux kernel, novell suse linux enterprise debuginfo, suse linux enterprise real time extension +2 more Memory leak in the cuse_channel_release function in fs/fuse/cuse.c in the Linux kernel before 4.4... 6.2 Medium
- Show olderLoading…