CVEs published in April 2016
612 vulnerabilities, 73 critical, 8 exploited.
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...3.3 Low
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...4.7 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...5.1 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...6.1 Medium
- oracle mysql, redhat enterprise linux +1 moreUnspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier allows remote...9.8 Critical
- squid-cache squidThe FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6...5.9 Medium
- apache hadoopExposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop6.2 Medium
firefoxUbuntufirefox regressionsNo score- dotcmsSQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote...7.2 High
- xen, fedoraproject fedora, oracle vm server +2 moreInteger overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a...8.8 High
- dotcmsSQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute...6.5 Medium
- cairographics cairo, opensuse +1 moreThe fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2...7.5 High
- libtiff, opensuse +1 moreBuffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote...6.2 Medium
- oxide project oxide, canonical ubuntu linux +1 moreUse-after-free vulnerability in Oxide allows remote attackers to cause a denial of service ...9.8 Critical
- dotcmsDirectory traversal vulnerability in the dotTailLogServlet in dotCMS before 3.5.1 allows remote...2.7 Low
- dotcmsCross-site scripting (XSS) vulnerability in lucene_search.jsp in dotCMS before 3.5.1 allows...4.8 Medium
- watchguard panda endpoint administration agentPanda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business...7.8 High
- videolan vlc media player, canonical ubuntu linux +1 moreBuffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player...5.5 Medium
- watchguard panda url filteringPanda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering...7.8 High
- huawei ar3200 firmwareHuawei AR3200 routers with software before V200R006C10SPC300 allow remote authenticated users to...6.5 Medium
- libreswan, fedoraproject fedora +1 moreLibreswan 3.16 might allow remote attackers to cause a denial of service (daemon restart) via an...7.5 High
- google chrome, opensuse leap, suse linux enterprise +2 moreThe download implementation in Google Chrome before 50.0.2661.75 on Android allows remote...7.5 High
- opensuse, opensuse leap +1 moreThe quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses...5.5 Medium
- google android, bouncycastle bc-java +1 more** DISPUTED ** The AES-GCM specification in RFC 5084, as used in Android 5.x and 6.x, recommends...5.5 Medium
- google androidserver/content/ContentService.java in the Framework component in Android 4.x before 4.4.4, 5.0.x...5.5 Medium
- google androidmail/compose/ComposeActivity.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5...5.5 Medium
- google androidserver/content/SyncStorageEngine.java in SyncStorageEngine in Android 4.x before 4.4.4, 5.0.x...5.5 Medium
- google androidserver/telecom/CallsManager.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5...6.1 Medium
- google androidWi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04...7.8 High
- google androidSetup Wizard in Android 5.1.x before 5.1.1 and 6.x before 2016-04-01 allows physically proximate...6.1 Medium
- google androidrootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory...7.8 High
- google androidmedia/libmedia/IDrm.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize a...9.8 Critical
- google androidmedia/libmedia/IOMX.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize...9.8 Critical
- google androidmedia/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x...9.8 Critical
- google androidlibs/gui/BufferQueueConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2,...9.8 Critical
- google androidexchange/eas/EasAutoDiscover.java in the Autodiscover implementation in Exchange ActiveSync in...5.5 Medium
- google androidThe Minikin library in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01...6.2 Medium
- google androidmedia/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x...7.8 High
- google androidinclude/core/SkPostConfig.h in Skia, as used in System_server in Android 4.x before 4.4.4, 5.0.x...7.8 High
- google androidA Qualcomm Power Management kernel driver in Android 6.x before 2016-04-01 allows attackers to...6.5 Medium
- google androidA Qualcomm video kernel driver in Android 6.x before 2016-04-01 allows attackers to gain...7.4 High
- google androidA Texas Instruments (TI) haptic kernel driver in Android 6.x before 2016-04-01 allows attackers...8.1 High
- google androidThe PORCHE_PAIRING_CONFLICT feature in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2,...8.8 High
- google androidMultiple integer overflows in minzip/SysUtil.c in the Recovery Procedure in Android 5.0.x before...8.4 High
- google androidRace condition in Download Manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before...8.4 High
- google androidThe Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04...8.4 High
- google androidlibs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before...8.4 High
- google androidThe Qualcomm RF driver in Android 6.x before 2016-04-01 does not properly restrict access to...8.4 High
- Show moreLoading…