CVEs published in April 2016
612 vulnerabilities, 73 critical, 8 exploited.
- linux kernel, canonical ubuntu linux, novell suse linux enterprise desktop +6 more +8 moreThe arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does...7.8 High
- mozilla firefoxThe Firefox Health Reports (aka FHR or about:healthreport) feature in Mozilla Firefox before 46.0...4.3 Medium
- mozilla firefoxThe WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox...5.4 Medium
- mozilla firefoxMozilla Firefox before 46.0 allows remote attackers to bypass the Content Security Policy (CSP)...6.5 Medium
- mozilla firefoxHeap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in...8.8 High
- mozilla firefoxRace condition in the get implementation in the ServiceWorkerManager class in the Service Worker...7.5 High
- mozilla firefoxUse-after-free vulnerability in the ServiceWorkerInfo class in the Service Worker subsystem in...8.8 High
- mozilla firefoxThe watch implementation in the JavaScript engine in Mozilla Firefox before 46.0, Firefox ESR 38...7.5 High
- mozilla firefox, opensuse leap, opensuse +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0,...8.8 High
- mozilla firefox, debian linux, opensuse leap +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and...8.8 High
- mozilla firefoxUnspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows...8.8 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 allow...8.8 High
w3mMageiaUpdated w3m packages fix security vulnerabilitiesNo score- apache strutsRemote Code Execution in Apache Struts9.8 Critical
- apache struts, huawei agile controller-campus firmware, anyoffice +17 more +19 moreApache Struts RCE Vulnerability8.1 High
- docker, linuxfoundation runc, opensuse +2 morePrivilege Elevation in runc7.8 High
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreBuffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC...9.8 Critical
- allroundautomations pl\/sql developerAllround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates...8.1 High
- systech syslink sl-1000 modular gateway firmwareSysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 use...7.5 High
- systech syslink sl-1000 modular gateway firmwareflu.cgi in the web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices...8.8 High
- systech syslink sl-1000 modular gateway firmwareThe web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with...9.8 Critical
- atom electronHigh severity vulnerability that affects electron7.8 High
- cybozu kintoneThe Cybozu kintone mobile application 1.x before 1.0.6 for Android allows attackers to discover...2.5 Low
- wireshark, debian linux, oracle solaris +2 moreStack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in...5.9 Medium
- wiresharkInteger signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2...5.9 Medium
- wiresharkepan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 does not...5.9 Medium
- wireshark, debian linux, oracle solaris +2 moreepan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11...5.9 Medium
- wiresharkepan/dissectors/packet-iax2.c in the IAX2 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x...5.9 Medium
- wiresharkepan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x...5.9 Medium
- wireshark, debian linux, oracle solaris +2 moreepan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x...5.9 Medium
- wiresharkThe IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not...5.9 Medium
- wiresharkepan/reassemble.c in TShark in Wireshark 2.0.x before 2.0.3 relies on incorrect special-case...5.9 Medium
- wiresharkepan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not...5.9 Medium
- wiresharkepan/proto.c in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not limit the...5.9 Medium
vtunMageiaUpdated vtun packages fix security vulnerabilitiesNo score- cryptopp crypto\+\+The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec:...7.5 High
- suse yast2yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty...9.8 Critical
- php, apple mac os x +1 moreMultiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in...9.8 Critical
- php, apple mac os x +1 moreThe Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote...9.8 Critical
- php, apple mac os x +1 moreFormat string vulnerability in the php_snmp_error function in ext/snmp/snmp.c in PHP before 5.5...9.8 Critical
- php** DISPUTED ** Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP...7.5 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreBuffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to...8.1 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreSquid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack...3.7 Low
- squid-cache squid, canonical ubuntu linux +1 moreMultiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow...8.1 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreBuffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow...8.8 High
- openssl, redhat enterprise linux desktop, enterprise linux hpc node +5 more +7 moreThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in...7.5 High
- libgd, canonical ubuntu linux, debian linux +3 more +5 moreInteger signedness error in GD Graphics Library 2.1.1 (aka libgd or libgd2) allows remote...9.8 Critical
- enlightenment imlib2, debian linux +1 moreInteger overflow in imlib2 before 1.4.7 allows remote attackers to cause a denial of service ...7.5 High
- blackberry enterprise serverCross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise...6.1 Medium
- symantec messaging gatewayThe management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows...8.2 High
- Show moreLoading…