CVEs published in May 2016
609 vulnerabilities, 141 critical, 7 exploited.
- php, opensuse leap +1 moreUse-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP...9.8 Critical
- ibm algo oneCross-site scripting (XSS) vulnerability in IBM Algorithmics Algo One Algo Risk Application (ARA)...5.4 Medium
- ibm cognos tm1IBM Cognos TM1 10.2.2 before FP5, when the host/pmhub/pm/admin AdminGroups setting is empty,...4.3 Medium
- ibm b2b advanced communications, multi-enterprise integration gateway +1 moreIBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.0...7.5 High
- dosfstools project dosfstools, canonical ubuntu linux, opensuse leap +1 more +3 moreThe read_boot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of...6.2 Medium
- google chromeGoogle Chrome before 50.0.2661.102 on Android mishandles / (slash) and \ (backslash) characters,...8.1 High
- lantronix xprintserver firmwareLantronix xPrintServer devices with firmware before 5.0.1-65 have hardcoded credentials, which...9.8 Critical
- meteocontrol web\'log basic 100, web\'log light, web\'log pro +1 more +3 moreMeteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain...9.8 Critical
- meteocontrol web\'log basic 100, web\'log light, web\'log pro +1 more +3 moreMeteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute...9.4 Critical
- meteocontrol web\'log basic 100, web\'log light, web\'log pro +1 more +3 moreMeteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for...9.4 Critical
- iodata wn-g300r2 firmware, wn-g300r3 firmware, wn-g300r firmware +2 moreCross-site scripting (XSS) vulnerability on I-O DATA DEVICE WN-G300R devices with firmware 1.12...5.4 Medium
- iodata wn-gdn\/r3 firmwareThe WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U...4.3 Medium
- hp base-vxfs-50, base-vxfs-501, base-vxfs-51 +2 moreBase-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base...5.5 Medium
- hp system management homepageHPE System Management Homepage before 7.5.5 allows local users to obtain sensitive information or...7.1 High
- ninjaforms ninja formsThe Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP...9.8 Critical
- filemaker, apple mac os x +1 moreThe server in Apple FileMaker before 14.0.4 on OS X allows remote attackers to read PHP source...7.5 High
- ibm spss statisticsStack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS...6.5 Medium
- cisco iosThe packet-processing microcode in Cisco IOS 15.2(2)EA, 15.2(2)EA1, 15.2(2)EA2, and 15.2(4)EA on...7.5 High
- symantec endpoint encryptionUnquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11...7.8 High
- fasterxml jackson-dataformat-xml, fedoraproject fedora +1 morejackson-dataformat-xml vulnerable to XML external entity (XXE)9.8 Critical
- f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +18 more +20 moreF5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1...5.9 Medium
- botan project botan, fedoraproject fedora +1 moreBotan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC...7.5 High
- botan project botanHeap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows...9.8 Critical
- ibm java sdk, novell suse linux enterprise module for legacy software, suse linux enterprise server +10 more +12 moreThe com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16...8.1 High
- ibm java sdk, novell suse linux enterprise module for legacy software, suse linux enterprise server +10 more +12 moreThe com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16...8.1 High
- ibm java sdk, redhat enterprise linux desktop, enterprise linux hpc node supplementary +9 more +11 moreBuffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before...5.6 Medium
- sap netweaver, netweaver application server java +1 moreThe Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does...10.0 Critical
- gnupg libksba, canonical ubuntu linux, opensuse leap +2 moreLibksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and...7.5 High
- gnupg libksba, canonical ubuntu linux, opensuse leap +1 more +3 moreOff-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3...7.5 High
- jansson project janssonJansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep...7.5 High
- debian linux, linux kernel +1 moreThe trace_writeback_dirty_page implementation in include/trace/events/writeback.h in the Linux...7.8 High
- google chrome, debian linux, opensuse +2 moreRace condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader...5.3 Medium
- google chrome, v8, canonical ubuntu linux +3 more +5 moreThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...8.8 High
- google chrome, debian linux, opensuse +2 moreThe forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in...8.8 High
- google chrome, debian linux, opensuse +2 moreThe TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM...8.8 High
- panasonic fpwin proHeap-based buffer overflow in Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users...4.2 Medium
- panasonic fpwin proPanasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows...5.5 Medium
- panasonic fpwin proPanasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service...4.2 Medium
- panasonic fpwin proPanasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service ...4.2 Medium
- cisco cloud network automation provisionerSQL injection vulnerability in Cisco Cloud Network Automation Provisioner (CNAP) 1.0 and 1.1...7.1 High
- apache xerces-c\+\+, opensuse +1 moreUse-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and...9.8 Critical
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreInteger overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain...7.8 High
- aquamaniac gwenhywfar, libgwenhywfar, debian linux +1 more +3 moreAn issue exists in libgwenhywfar through 4.12.0 due to the usage of outdated bundled CA...5.3 Medium
- php, canonical ubuntu linux +1 moreThe openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x...7.5 High
- php, canonical ubuntu linux, opensuse leap +3 more +5 moreext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not...9.6 Critical
- ntpntpd in NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of...5.9 Medium
- ntpNTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service ...5.3 Medium
- ntp, ntpsec +1 morentpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying...3.7 Low
- ntp, ntpsec +1 moreA malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win...6.5 Medium
- adobe flash player, microsoft edge, internet explorer +2 moreUnspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe...7.5 High
- Show moreLoading…