CVEs published in April 2016
612 vulnerabilities, 73 critical, 8 exploited.
- sap netweaver application server javaThe chat feature in the Real-Time Collaboration (RTC) services 7.3 and 7.4 in SAP NetWeaver Java...5.3 Medium
- apache activemqImproper Neutralization of Input During Web Page Generation in Apache ActiveMQ6.1 Medium
- huawei p7 firmwareHuawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a...5.5 Medium
- netapp clustered data ontapNetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers,...6.8 Medium
- adobe flash player, air desktop runtime, air sdk +2 more +4 moreAdobe Flash Player 21.0.0.197 and earlier allows remote attackers to cause a denial of service ...9.8 Critical
- emc documentum d2EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote...8.8 High
- saltstack saltSalt Insecure configuration of PAM external authentication service5.6 Medium
- optipng project optipng, canonical ubuntu linux, debian linux +2 more +4 moreOff-by-one error in the bmp_rle4_fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows...8.8 High
- optipng project optipng, canonical ubuntu linux, debian linux +2 moreHeap-based buffer overflow in the bmp_read_rows function in pngxrbmp.c in OptiPNG before 0.7.6...7.8 High
- qemu, canonical ubuntu linux, debian linux +2 moreQEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local...6.5 Medium
- optipng, canonical ubuntu linux, debian linux +2 more +4 moreThe bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers...6.5 Medium
- schneider-electric proface gp-pro ex ex-ed, proface gp-pro ex pfxexedls, proface gp-pro ex pfxexedv +1 more +3 moreStack-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000...6.5 Medium
- schneider-electric proface gp-pro ex ex-ed, proface gp-pro ex pfxexedls, proface gp-pro ex pfxexedv +1 more +3 morePro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000,...6.5 Medium
- schneider-electric proface gp-pro ex ex-ed, proface gp-pro ex pfxexedls, proface gp-pro ex pfxexedv +1 more +3 moreHeap-based buffer overflow in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000,...8.8 High
- rockwellautomation integrated architecture builderIAB.exe in Rockwell Automation Integrated Architecture Builder (IAB) before 9.6.0.8 and 9.7.x...6.3 Medium
- eaton lighting systems eg2 web controlEaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to have an unspecified...7.5 High
- dell emc powerscale onefs, netgear jr6150 firmware, samsung x14j firmware +2 more +4 moreThe kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE)...5.9 Medium
- cisco ucs invicta c3124sa applianceCisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance...9.8 Critical
- cisco evolved programmable network manager, prime infrastructure, sun opensolaris +2 moreCisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager ...9.8 Critical
- cisco evolved programmable network manager, prime infrastructure, sun opensolaris +2 moreThe web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable...8.1 High
- hiniarata casebook pluginCross-site request forgery (CSRF) vulnerability in the Menubook plugin before 0.9.3 for baserCMS...8.8 High
- hiniarata casebook pluginCross-site scripting (XSS) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows...6.1 Medium
- hiniarata casebook pluginCross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS...8.8 High
- hiniarata casebook pluginCross-site scripting (XSS) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows...6.1 Medium
- hiniarata casebook pluginCross-site request forgery (CSRF) vulnerability in the Casebook plugin before 0.9.4 for baserCMS...8.8 High
- hiniarata casebook pluginCross-site scripting (XSS) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows...6.1 Medium
- eaton lighting systems eg2 web controlEaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the...7.5 High
- schneider-electric proface gp-pro ex ex-ed, proface gp-pro ex pfxexedls, proface gp-pro ex pfxexedv +1 more +3 moreThe FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS...9.1 Critical
- sun opensolaris, zyxel gs1900-10hp firmware, zzinc keymouse firmware +2 moreCisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE)...7.5 High
- dell emc powerscale onefs, netgear jr6150 firmware, zyxel gs1900-10hp firmware +1 more +3 moreCisco TelePresence Server 3.1 on 7010, Mobility Services Engine (MSE) 8710, Multiparty Media 310...7.5 High
- mcafee email gatewayCross-site scripting (XSS) vulnerability in McAfee Email Gateway (MEG) 7.6.x before 7.6.404, when...6.1 Medium
- sophos cyberoam cr100ing utm firmware, cyberoam cr35ing utm firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance...6.1 Medium
fileMageiaUpdated file packages fix security vulnerabilityNo scorephpMageiaUpdated php packages fix security vulnerabilityNo score- squid-cache squidSquid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows...7.5 High
- squid-cache squid, canonical ubuntu linux +1 moreHeap-based buffer overflow in the Icmp6::Recv function in icmp/Icmp6.cc in the pinger utility in...8.2 High
- broadcom api gatewayCRLF injection vulnerability in CA API Gateway (formerly Layer7 API Gateway) 7.1 before 7.1.04, 8...6.5 Medium
- apple ibooks authorApple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks...5.5 Medium
- sharp eva animatorBuffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute...6.3 Medium
- sharp aquos hn-pp150 firmwareCross-site request forgery (CSRF) vulnerability in AQUOS Photo Player HN-PP150 1.02.00.04 through...4.3 Medium
quaggaSUSESecurity update for quaggaNo scorequaggaSUSESecurity update for quaggaNo score- hp asset manager, asset manager cloudsystem chargeback +1 moreHPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote...9.8 Critical
- falconsc wisepoint, wisepoint authenticator +1 moreThe management screen in Falcon WisePoint 4.3.1 and earlier and WisePoint Authenticator 4.1.19.22...6.1 Medium
- mercurial, debian linux, fedoraproject fedora +4 more +6 moreMercurial arbitrary code execution vulnerability8.8 High
- mercurial, debian linux, fedoraproject fedora +11 more +13 moreMercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository8.8 High
- mercurial, debian linux, fedoraproject fedora +11 more +13 moreMercurial arbitrary code execution via a crafted git ext:: URL8.8 High
- oar project oar, debian linux +1 moreThe oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain...8.8 High
xchat-gnomeUbuntuxchat-gnome vulnerabilityNo score- ibm maximo asset managementshiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10...4.3 Medium
- Show moreLoading…