CVEs published in April 2016
612 vulnerabilities, 73 critical, 8 exploited.
- redhat satelliteMultiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers...6.1 Medium
- citrix command centerMultiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command...8.1 High
- redhat satellite, spacewalk-java +1 moreCross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7...5.4 Medium
- cisco iosCisco IOS before 15.2(2)E1 on Catalyst switches allows remote attackers to obtain potentially...5.3 Medium
- cisco unified computing system central softwareCisco Unified Computing System (UCS) Central Software 1.3(1b) and earlier allows remote attackers...9.8 Critical
sambaDebiansamba - regression updateNo score- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32...6.5 Medium
- gnu libtasn1, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreThe _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used...5.9 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreBuffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when...8.6 High
thunderbirdMageia,thunderbird-l10nMageia +1 moreUpdated thunderbird packages fix security vulnerabilitiesNo score- enlightenment imlib2, debian linux +1 moreThe GIF loader in imlib2 before 1.4.9 allows remote attackers to cause a denial of service ...8.2 High
- enlightenment imlib2, debian linux +1 moreOff-by-one error in the __imlib_MergeUpdate function in lib/updates.c in imlib2 before 1.4.9...7.5 High
- python pillowPillow Buffer overflow in Jpeg2KEncode.c5.5 Medium
- enlightenment imlib2, debian linux +1 moreimlib2 before 1.4.9 allows remote attackers to cause a denial of service (divide-by-zero error...7.5 High
- python pillowPillow Integer overflow in ImagingResampleHorizontal9.8 Critical
- f5 big-ip edge gateway, big-ip access policy manager +1 moreThe Single Sign-On (SSO) feature in F5 BIG-IP APM 11.x before 11.6.0 HF6 and BIG-IP Edge Gateway...5.9 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreThe fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the...3.8 Low
- xen, fedoraproject fedora, oracle vm server +2 moreThe xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the...3.8 Low
- hawk project hawkRegular Expression Denial of Service in hawk7.5 High
- f5 big-ip edge gateway, big-iq cloud, big-ip access policy manager +15 more +17 moreF5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1...7.4 High
- foxitsoftware foxit readerThe Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7...7.4 High
- silverstripeSilverstripe CMS XSS Vulnerability6.1 Medium
- xen, redhat enterprise linux +1 moreXen allows guest OS users to obtain sensitive information from uninitialized locations in host OS...6.5 Medium
- opensuse leap, opensuse +1 moreMultiple unspecified vulnerabilities in the obs-service-extract_file package before 0.3-5.1 in...9.8 Critical
- huawei utps firmwareUntrusted search path vulnerability in Huawei UTPS before UTPS-V200R003B015D15SP00C983 allows...7.8 High
- huawei p8 firmwareThe graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA...5.5 Medium
- huawei mate s firmwareInteger overflow in the graphics drivers in Huawei Mate S smartphones with software CRR-TL00...7.8 High
- huawei mate s firmware, p8 firmware +1 moreThe Video0 driver in Huawei P8 smartphones with software GRA-UL00 before GRA-UL00C00B350, GRA...6.1 Medium
- avast free antivirus, internet security, premier +1 more +3 moreHeap-based buffer overflow in the Avast virtualization driver (aswSnx.sys) in Avast Internet...7.8 High
- huawei p7 firmwareInteger overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote...7.8 High
- openstack image registry and delivery service \(glance\)OpenStack Image Service (Glance) vulnerable to Improper Access Control4.3 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreDenial of service or RCE from libxml2 and libxslt7.5 High
- hp universal cmbd foundationHPE Universal CMDB Foundation 10.0, 10.01, 10.10, 10.11, and 10.20 allows remote attackers to...7.4 High
- cisco unity connectionCross-site scripting (XSS) vulnerability in Cisco Unity Connection through 11.0 allows remote...6.1 Medium
- cisco ios xrCisco IOS XR 4.2.3, 4.3.0, 4.3.4, and 5.3.1 on ASR 9000 devices allows remote attackers to cause...5.3 Medium
- adobe robohelpAdobe RoboHelp Server 9 before 9.0.1 mishandles SQL queries, which allows attackers to obtain...7.5 High
- adobe creative cloudThe Sync Process in the JavaScript API for Creative Cloud Libraries in Adobe Creative Cloud...9.1 Critical
- dell bsafe crypto-j, bsafe ssl-c, bsafe ssl-j +2 more +4 moreEMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro...5.9 Medium
- microsoft win32k, windows 7, windows 8.1 +6 more +8 moreThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a...7.5 High
- microsoft win32k, windows 7, windows 8.1 +6 more +8 moreThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft internet explorerMicrosoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause...7.5 High
- microsoft internet explorerMicrosoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of...4.3 Medium
- microsoft edgeMicrosoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors,...6.5 Medium
- microsoft internet explorerMicrosoft Internet Explorer 11 mishandles DLL loading, which allows local users to gain...7.8 High
- microsoft internet explorerMicrosoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial...7.5 High
- microsoft edgeMicrosoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors,...6.5 Medium
- microsoft edgeMicrosoft Edge allows remote attackers to execute arbitrary code or cause a denial of service ...7.5 High
- microsoft edgeMicrosoft Edge allows remote attackers to execute arbitrary code or cause a denial of service ...7.5 High
- microsoft edgeMicrosoft Edge allows remote attackers to execute arbitrary code or cause a denial of service ...7.5 High
- Show moreLoading…