CVEs published in April 2016
612 vulnerabilities, 73 critical, 8 exploited.
- samba, canonical ubuntu linux, debian linux +2 moreThe MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before...7.5 High
- samba, canonical ubuntu linux +1 moreSamba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB...5.9 Medium
- samba, canonical ubuntu linux +1 moreThe SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before...5.9 Medium
- samba, canonical ubuntu linux +1 moreSamba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509...7.4 High
- samba, canonical ubuntu linux +1 moreThe bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x...5.9 Medium
- samba, canonical ubuntu linux +1 moreThe NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4...6.3 Medium
- samba, canonical ubuntu linux +1 moreThe NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8,...5.9 Medium
- samba, canonical ubuntu linux +1 moreSamba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly...5.9 Medium
- atlassian confluenceAtlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files...4.3 Medium
- atlassian confluenceCross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote...6.1 Medium
- kubernetes, redhat openshift +1 moreInformation Exposure in Kubernetes5.3 Medium
- redhat cloudforms, cloudforms management engine +1 moreRed Hat CloudForms 3.2 Management Engine (CFME) 5.4.4 and CloudForms 4.0 Management Engine (CFME)...5.1 Medium
- puppet enterprisePuppet Enterprise 2015.3 before 2015.3.1 allows remote attackers to bypass a host whitelist...8.8 High
- apache directory studio, ldap studio +1 moreApache Directory Studio Command Injection7.8 High
- redhat openstackThe TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux...7.3 High
- openstack tripleo heat templatesOpenStack TripleO Heat templates spoof metadata requests7.5 High
- theforeman foreman, redhat satellite +1 moreForeman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which...4.2 Medium
- mantisbtIncomplete blacklist vulnerability in the config_is_private function in config_api.php in...5.3 Medium
linux-lts-utopicUbuntulinux-lts-utopic regressionNo score- apache rangerApache Ranger Access Restriction Bypass8.8 High
- apache rangerApache Ranger allows users to bypass intended access restrictions via direct access to module URLs7.1 High
- apache rangerApache Ranger Cross-site Scripting vulnerability6.1 Medium
- huawei s5300 firmware, s5700 firmware, s7700 firmware +2 more +4 moreHuawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software before V200R003SPH012...7.5 High
- huawei e3276s firmwareHuawei E3276s USB modems with software before E3276s-150TCPU-V200R002B436D09SP00C00 allow man-in...6.4 Medium
- huawei policy center firmwareSQL injection vulnerability in Huawei Policy Center with software before V100R003C10SPC020 allows...8.1 High
- cactiSQL injection vulnerability in graph_view.php in Cacti 0.8.8.g allows remote authenticated users...8.8 High
- postgresqlThe (1) brin_page_type and (2) brin_metapage_info functions in the pageinspect extension in...9.1 Critical
- postgresqlPostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached...7.5 High
- lenovo fingerprint manager, touch fingerprint +1 moreLenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for...7.8 High
- apache jetspeedThe User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using...7.5 High
- apache openmeetingsApache OpenMeetings allows remote attackers to read arbitrary files by attempting to upload a file7.5 High
- apache openmeetingsApache OpenMeetings Cross-site Scripting vulnerability6.1 Medium
- apache openmeetingsApache OpenMeetings Directory Traversal vulnerability6.5 Medium
- apache openmeetingsThe sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password...7.5 High
- apache jetspeedCross-site Scripting in Apache Jetspeed6.1 Medium
- apache jetspeedApache Jetspeed vulnerable to Cross-site Scripting6.1 Medium
- apache jetspeedApache Jetspeed vulnerable to SQL Injection8.8 High
- apache jetspeedPath Traversal in Apache Jetspeed7.2 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +7 more +9 moreThe Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM,...7.5 High
imagemagickDebianimagemagick - security updateNo score- trendmicro password managerThe HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary...9.8 Critical
- avastAvast allows remote attackers to cause a denial of service (memory corruption) and possibly...7.8 High
- pulsesecure pulse connect secureThe Terminal Services Remote Desktop Protocol (RDP) client session restrictions feature in Pulse...6.5 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to...8.4 High
- freebsdInteger signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in...6.2 Medium
- eset nod32Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows...9.8 Critical
- lenovo emc firmwareThe management interface in LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r...5.3 Medium
- qemuStack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation...5.5 Medium
- mcafee active response, agent, data exchange layer +4 more +6 moreThe McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161,...5.1 Medium
- mcafee advanced threat defenseMcAfee Advanced Threat Defense (ATD) before 3.4.8.178 might allow remote attackers to bypass...7.5 High
- Show moreLoading…