CVEs published in May 2016
609 vulnerabilities, 141 critical, 7 exploited.
- websvn, debian linux +1 moreMultiple cross-site scripting (XSS) vulnerabilities in (1) revision.php, (2) log.php, (3) listing...6.1 Medium
- ikiwiki, debian linux +1 moreCross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3...6.1 Medium
- accellion file transfer applianceThe Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add an SSH...7.8 High
- accellion file transfer applianceThe Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users...8.8 High
- accellion file transfer applianceSQL injection vulnerability in home/seos/courier/security_key2.api on the Accellion File Transfer...9.8 Critical
- accellion file transfer applianceMultiple cross-site scripting (XSS) vulnerabilities on the Accellion File Transfer Appliance (FTA...6.1 Medium
- veritas netbackup, netbackup appliance +1 moreThe management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x...9.8 Critical
- veritas netbackup, netbackup appliance +1 moreVeritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through...5.9 Medium
- veritas netbackup, netbackup appliance +1 morebpcd in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2,...9.8 Critical
- hp network node manager iHPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote...8.1 High
- hp network node manager iHPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote...6.5 Medium
- hp network node manager iHPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote...6.5 Medium
- hp network node manager iCross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9...5.4 Medium
- hp network node manager iCross-site scripting (XSS) vulnerability in HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9...5.4 Medium
- hp network node manager iHPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote...8.8 High
- emc rsa authentication managerCRLF injection vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote...5.3 Medium
- emc rsa authentication managerCross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14...6.1 Medium
- emc rsa authentication managerCross-site scripting (XSS) vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14...6.1 Medium
vlcMageiaUpdated vlc packages fix security vulnerabilityNo score- libarchiveHeap-based buffer overflow in the zip_read_mac_metadata function in...8.8 High
- jq project jqThe jv_dump_term function in jq 1.5 allows remote attackers to cause a denial of service (stack...7.5 High
- jboss enterprise application platformThe HTTPS NIO Connector allows remote attackers to cause a denial of service (thread consumption)...7.5 High
- jq project jq, opensuse leap, opensuse +2 moreOff-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a...9.8 Critical
- php, debian linux, fedoraproject fedora +2 more +4 moreThe exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6...9.8 Critical
- php, fedoraproject fedora, hp system management homepage +1 more +3 moreThe exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6...9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21,...9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x...9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x...9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21,...9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x...9.8 Critical
- php, fedoraproject fedora, opensuse leap +2 moreThe bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x...9.8 Critical
- phpDouble free vulnerability in the SplDoublyLinkedList::offsetSet function in ext/spl/spl_dllist.c...9.8 Critical
- linux kernel, google nexus 5x firmware, nexus 6p firmware +2 moreThe adreno_perfcounter_query_group function in drivers/gpu/msm/adreno_perfcounter.c in the Adreno...7.8 High
- google android, linux kernel +1 moreThe msm_ipc_router_bind_control_port function in net/ipc_router/ipc_router_core.c in the IPC...7.0 High
- cisco prime collaboration assuranceOpen redirect vulnerability in Cisco Prime Collaboration Assurance Software 10.5 through 11.0...7.4 High
- cisco telepresence tc softwareThe XML API in TelePresence Codec (TC) 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, and 7.3.5...9.8 Critical
- cisco finesseThe gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1...8.6 High
- cisco asa with firepower servicesThe Adaptive Security Appliance (ASA) 5585-X FirePOWER Security Services Processor (SSP) module...7.5 High
- cisco firesight system softwareCisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000...7.5 High
- mcafee livesafeInteger signedness error in the AV engine before DAT 8145, as used in McAfee LiveSafe 14.0,...7.5 High
- mcafee virusscan enterprise, microsoft windows +1 moreThe McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix...3.0 Low
- trendmicro email encryption gatewaySQL injection vulnerability in the authentication functionality in Trend Micro Email Encryption...9.8 Critical
owncloudMageiaUpdated owncloud packages fix security vulnerabilitiesNo score- quassel-irc quassel, fedoraproject fedora, opensuse leap +1 more +3 moreThe onReadyRead function in core/coreauthhandler.cpp in Quassel before 0.12.4 allows remote...7.5 High
- quagga, opensuse leap, opensuse +2 moreThe bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when...7.5 High
- xstream, debian linux, fedoraproject fedora +1 more +3 moreXML External Entity Injection in XStream7.5 High
- redhat ansible, fedoraproject fedora +1 moreLink Following in ansible7.8 High
- opensslcrypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed...7.5 High
- linux kernelThe replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5...7.8 High
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow...5.5 Medium
- Show moreLoading…