CVEs published in April 2016
612 vulnerabilities, 73 critical, 8 exploited.
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute...7.5 High
- microsoft windows 7, windows 8.1, windows rt 8.1 +3 more +5 moreOLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8...7.8 High
- microsoft client-server run-time subsystem (csrss), windows 8.1, windows rt 8.1 +3 more +5 moreThe Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold...7.8 High
- microsoft windows 10HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of...7.5 High
- microsoft .net frameworkMicrosoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to...7.8 High
- microsoft xml core servicesMicrosoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted...8.8 High
- microsoft .net framework, live meeting, lync +10 more +12 moreThe font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7...8.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft excel, excel viewer, word for mac +2 moreMicrosoft Excel 2010 SP2, Word for Mac 2011, and Excel Viewer allow remote attackers to execute...7.8 High
- microsoft excel, office compatibility pack, sharepoint designer +1 more +3 moreMicrosoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Services on...7.8 High
- microsoft windows 10The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain...8.4 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe SAM and LSAD protocol implementations in Microsoft Windows Vista SP2, Windows Server 2008 SP2...6.8 Medium
- microsoft office, office compatibility pack, office web apps server +3 more +5 moreMicrosoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office...7.8 High
- microsoft excel, excel viewer, office compatibility pack +1 more +3 moreMicrosoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Word...7.8 High
- microsoft windows 10, windows 8.1, windows server 2012 +2 moreHyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 allows guest OS users to...7.1 High
- microsoft windows 10, windows 8.1, windows server 2012 +2 moreHyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS...7.1 High
- microsoft windows 10, windows 8.1, windows server 2012 +2 moreHyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS...9.3 Critical
- dell openmanage server administratorDirectory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows...4.9 Medium
- paloaltonetworks pan-osBuffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x...9.8 Critical
- paloaltonetworks pan-osThe GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x...7.5 High
- paloaltonetworks pan-osThe management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1...9.8 Critical
- paloaltonetworks pan-osThe device management command line interface (CLI) in Palo Alto Networks PAN-OS before 5.0.18, 5...7.2 High
- huawei policy center firmwareHuawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to...8.8 High
- apache wicketMultiple cross-site scripting (XSS) vulnerabilities in the (1) RadioGroup and (2)...6.1 Medium
- apache wicketCross-site scripting (XSS) vulnerability in the getWindowOpenJavaScript function in org.apache...6.1 Medium
- apache strutsCross-site Scripting in Apache Struts6.1 Medium
- cactiSQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated...8.8 High
- apache strutsApache Struts XSS Vulnerability6.1 Medium
- apache strutsApache Struts RCE Vulnerability8.8 High
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects...5.5 Medium
- linux kernel, novell suse linux enterprise debuginfo, suse linux enterprise desktop +6 more +8 moreThe wacom_probe function in drivers/input/tablet/wacom_sys.c in the Linux kernel before 3.17...4.6 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe create_fixed_stream_quirk function in sound/usb/quirks.c in the snd-usb-audio driver in the...4.6 Medium
- debian linux, linux kernel, redhat enterprise linux +2 moreThe fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of...7.8 High
- drupal, debian linux +1 moreDrupal arbitrary code execution8.1 High
- drupal, debian linux +1 moreDrupal Open redirect vulnerability in the drupal_goto function7.4 High
- drupal, debian linux +1 moreDrupal CRLF injection vulnerability in the drupal_set_header function5.9 Medium
- drupalDrupal Form API ignores access restrictions on submit buttons7.5 High
- nvidia gpu driver r340, gpu driver r352 +1 moreThe Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340...8.4 High
- nvidia gpu driver r340, gpu driver r352 +1 moreThe Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340...8.4 High
- nvidia gpu driver r340, gpu driver r352 +1 moreThe Escape interface in the Kernel Mode Driver layer in the NVIDIA GPU graphics driver R340...7.8 High
- apache ofbizApache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to...9.8 Critical
- apache qpid proton, fedoraproject fedora +1 moreModerate severity vulnerability that affects org.apache.qpid:proton-j6.5 Medium
- saltstack salt, opensuse leap +1 moreSalt Improper Access Control8.1 High
- apache rangerThe Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password9.8 Critical
- f5 big-ip edge gateway, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreIncomplete blacklist vulnerability in the Configuration utility in F5 BIG-IP LTM, Analytics, APM,...4.3 Medium
- apache rangerApache Ranger allows users to bypass intended access restrictions via the REST API6.5 Medium
- apache ofbizCross-site scripting (XSS) vulnerability in the DisplayEntityField.getDescription method in...6.1 Medium
didiwikiDebiandidiwiki - regression updateNo score- xen, canonical ubuntu linux +1 moreThe __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly...7.8 High
- openstack novaOpenStack Nova host data access through resize/migration5.3 Medium
- Show moreLoading…