CVEs published in May 2016
609 vulnerabilities, 141 critical, 7 exploited.
- apple mac os xThe AMD subsystem in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory...3.3 Low
- apple iphone osBuffer overflow in the Accessibility component in Apple iOS before 9.3.2 allows attackers to...3.3 Low
- apple itunesUntrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local...7.8 High
- qemu, canonical ubuntu linux, debian linux +2 moreThe get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU...6.0 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in...6.7 Medium
- apple safari, tvos, iphone os +1 more +3 moreThe WebKit Canvas implementation in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before...8.8 High
- apple safari, tvos, iphone os +1 more +3 moreWebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, improperly...6.5 Medium
- apple safari, tvos, iphone os +1 more +3 moreWebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows...8.8 High
- apple safari, tvos, iphone os +1 more +3 moreWebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows...8.8 High
- apple safari, tvos, iphone os +1 more +3 moreWebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows...8.8 High
- apple tvos, watchos, iphone os +1 more +3 morelibxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS...8.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as...7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS...5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreMultiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2)...5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreUse-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as...5.5 Medium
- apple iphone os, mac os x, canonical ubuntu linux +1 more +3 moreUse-after-free vulnerability in the xmlSAX2AttributeNs function in libxml2 before 2.9.4, as used...8.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...5.5 Medium
rhnlibSUSE,suseRegisterInfoSUSE +1 moreRecommended udpate for SUSE Manager Client ToolsNo score- redhat satelliteCross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote...6.1 Medium
- redhat satelliteMultiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers...6.1 Medium
- symantec anti-virus engineThe kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote...9.1 Critical
firefoxUbuntufirefox regressionNo score- qemuQEMU (aka Quick Emulator) built with an IDE AHCI emulation support is vulnerable to a null...5.5 Medium
- xen, oracle vm server +1 moreThe guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not...8.4 High
- vmware player, workstation +1 moreVMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly...9.8 Critical
- apache ambariThe File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to...4.9 Medium
- apache ambariThe agent in Apache Ambari before 2.1.2 uses weak permissions for the (1) /var/lib/ambari-agent...3.3 Low
- haxx curlThe (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function...5.3 Medium
icedoveDebianicedove - regression updateNo score- canonical ubuntu linux, libexpat project libexpat, mcafee policy auditor +1 more +3 moreThe overflow protection in Expat is removed by compilers with certain optimization settings,...8.1 High
- apple mac os x, canonical ubuntu linux, debian linux +11 more +13 moreExpat allows context-dependent attackers to cause a denial of service (crash) or possibly execute...9.8 Critical
- jenkins, redhat openshift +1 moreJenkins Exposes Sensitive Information via API URL4.3 Medium
- jenkins, redhat openshift +1 moreJenkins affected by Open Redirect Vulnerability7.4 High
- jenkins, redhat openshift +1 moreMissing permissions check in Jenkins Core4.3 Medium
- jenkins, redhat openshift +1 moreJenkins Exposes Sensitive Information from Job Configuration6.5 Medium
- jenkins, redhat openshift +1 moreExposure of Sensitive Information in Jenkins Core4.3 Medium
- jenkins, redhat openshift +1 moreIncorrect Authorization in Jenkins Core4.3 Medium
- ibm bluemixThe Auto-Scaling agent in Liberty for Java in IBM Bluemix before 2.7-20160321-1358 allows remote...6.5 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 7.0 before 7.0.0.41, 8.0 before 8.0.0.13, and 8.5 before 8...5.9 Medium
- jenkins, redhat openshift +1 moreJenkins allows Remote Users to Inject Build Parameters6.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +3 more +5 moreThe (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9...7.5 High
- libndp, canonical ubuntu linux, debian linux +7 more +9 morelibndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor...8.1 High
- linux kernelThe msr_mtrr_valid function in arch/x86/kvm/mtrr.c in the Linux kernel before 4.6.1 supports MSR...7.1 High
- phpfile before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers...7.5 High
- imagemagickThe gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote...9.8 Critical
- gnome librsvg, debian linux, opensuse leap +1 more +3 moreThe _rsvg_css_normalize_font_size function in librsvg 2.40.2 allows context-dependent attackers...7.5 High
- php, opensuse leap +1 moreStack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a...7.5 High
- php, opensuse leap +1 moreStack consumption vulnerability in Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5...7.5 High
- Show moreLoading…