CVEs published in April 2016
612 vulnerabilities, 73 critical, 8 exploited.
- google androidThe Qualcomm ARM processor performance-event manager in Android 4.x before 4.4.4, 5.0.x before 5...8.4 High
- google androidThe H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management...8.4 High
- google androidmedia/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x...9.8 Critical
- google androidMultiple stack-based buffer underflows in decoder/ih264d_parse_cavlc.c in mediaserver in Android...8.4 High
- google androidpost_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted...9.8 Critical
- google androidSonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6...9.8 Critical
- google androidMPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0...9.8 Critical
- google androidStack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04...7.8 High
- google androiddecoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers...9.8 Critical
- google androidAn unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote...8.4 High
- cisco unified computing system platform emulatorHeap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3...8.4 High
- cisco unified computing system platform emulatorCisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows...7.8 High
- openstack tripleo heat templates, redhat openstack +1 moreTripleO Heat templates might allow remote attackers to obtain sensitive information from private containers7.5 High
- fourkitchens block class, fedoraproject fedora +1 moreCross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2 for...5.4 Medium
- ipswitch moveit dmzIpswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file...5.4 Medium
- apache camelApache Camel can allow remote attackers to execute arbitrary commands8.1 High
- magentoThe getOrderByStatusUrlKey function in the Mage_Rss_Helper_Order class in app/code/core/Mage/Rss...5.3 Medium
- fedoraproject fedora, uninett mod auth mellon +1 moreThe am_read_post_data function in mod_auth_mellon before 0.11.1 does not limit the amount of data...7.5 High
- fedoraproject fedora, uninett mod auth mellon +1 moreThe am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the...7.5 High
- vmware vcenter server, vcloud director, vcloud automation identity appliance +2 moreClient Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2;...7.6 High
- juniper junosJuniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to...7.5 High
- juniper junosJuniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on...5.9 Medium
- juniper junosJuniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48...7.8 High
- juniper junosThe rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before...7.5 High
- juniper junosJuniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D30, 12.3...7.5 High
- juniper screenosThe administrative web services interface in Juniper ScreenOS before 6.3.0r21 allows remote...7.5 High
- juniper junosRace condition in the RPC functionality in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12...6.7 Medium
- juniper junosRace condition in the Op command in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46...8.8 High
- dell emc unisphereAn HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows...9.8 Critical
- linuxfoundation foomatic-filters, oracle linux, redhat enterprise linux +5 more +7 moreHeap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4...9.8 Critical
- xen, canonical ubuntu linux +1 moreXen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV...5.5 Medium
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreMultiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to...9.8 Critical
- google chrome, debian linux, novell suse package hub for suse linux enterprise +1 more +3 moreThe Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin...4.3 Medium
- google chrome, debian linux, novell suse package hub for suse linux enterprise +1 more +3 moreThe WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents...4.3 Medium
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreGoogle Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during...8.8 High
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreThe media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data...6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +2 more +4 moreThe LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75,...8.8 High
- google chrome, debian linux, opensuse leap +1 more +3 moreCross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in...6.1 Medium
- google chrome, debian linux, opensuse leap +1 more +3 morefxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does...8.1 High
- openbsd openssh, canonical ubuntu core, ubuntu linux +2 more +4 moreThe do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin...7.8 High
- huawei s2300 firmware, s2350ei firmware, s3300 firmware +10 more +12 moreMemory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software...6.5 Medium
- huawei s2300 firmware, s2350ei firmware, s3300 firmware +8 more +10 moreMemory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series...7.5 High
- huawei fusioncomputeHuawei FusionCompute with software before V100R005C10SPC700 allows remote authenticated users to...4.3 Medium
- redhat libvirt, canonical ubuntu linux +1 moreThe virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users...6.5 Medium
- sap hanaThe Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to...7.3 High
- sap hanaThe Data Provisioning Agent (aka DP Agent) in SAP HANA allows remote attackers to cause a denial...7.5 High
- sap java asCross-site scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence (aka...6.1 Medium
- sap netweaverThe Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a...7.5 High
- sap netweaverXML external entity (XXE) vulnerability in the UDDI component in SAP NetWeaver JAVA AS 7.4 allows...8.6 High
- redhat satellite, spacewalk-java +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat...6.1 Medium
- Show moreLoading…