CVEs published in May 2016
609 vulnerabilities, 141 critical, 7 exploited.
- huawei ips module firmware, ngfw module firmware, nip6300 firmware +6 more +8 moreBuffer overflow in the Application Specific Packet Filtering (ASPF) functionality in the Huawei...9.8 Critical
- huawei s12700 firmware, s5700 firmware +1 moreHuawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software...8.1 High
- golang go, fedoraproject fedora, opensuse leap +2 moreThe Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not...7.5 High
- golang goUntrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows...7.8 High
- trend micro mobile securityTrend Micro Mobile Security for iOS before 3.2.1188 does not verify the X.509 certificate of the...7.4 High
- huawei mobile broadband hl serviceThe Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the...7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +2 moreThe tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not...7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +3 more +5 moreThe get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5...7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +9 more +11 moreUse-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2...7.8 High
- linux kernel, canonical ubuntu linux +1 moreUse-after-free vulnerability in mm/percpu.c in the Linux kernel through 4.6 allows local users to...7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +2 morefs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree...5.5 Medium
- linux kernel, canonical ubuntu linux +1 moreThe x25_negotiate_facilities function in net/x25/x25_facilities.c in the Linux kernel before 4.5...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moresound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures...5.5 Medium
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe snd_timer_user_params function in sound/core/timer.c in the Linux kernel through 4.6 does not...5.5 Medium
- linux kerneldrivers/media/v4l2-core/videobuf2-v4l2.c in the Linux kernel before 4.5.3 allows local users to...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe InfiniBand (aka IB) stack in the Linux kernel before 4.5.3 incorrectly relies on the write...7.8 High
- linux kernel, canonical ubuntu linux +1 moreThe BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows...7.0 High
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +7 more +9 moreThe rtnl_fill_link_ifmap function in net/core/rtnetlink.c in the Linux kernel before 4.5.5 does...3.3 Low
- linux kernel, canonical ubuntu linux, novell suse linux enterprise debuginfo +2 more +4 moreThe llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not...7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreThe proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does...6.2 Medium
- atheme, debian linux, opensuse leap +1 more +3 moreBuffer overflow in the xmlrpc_char_encode function in modules/transport/xmlrpc/xmlrpclib.c in...7.5 High
- mediaelementjs mediaelement.js, wordpress +1 moreMediaElement Vulnerable to Reflected XSS6.1 Medium
- plupload, wordpress +1 moreCross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used...6.1 Medium
- php, opensuse leap, opensuse +2 moreInteger overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows...9.8 Critical
- phpInteger overflow in the php_filter_encode_url function in ext/filter/sanitizing_filters.c in PHP...9.8 Critical
- phpInteger overflow in the xml_utf8_encode function in ext/xml/xml.c in PHP before 7.0.4 allows...9.8 Critical
- phpDouble free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers...9.8 Critical
- phpThe odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior...7.5 High
- phpmain/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure...5.9 Medium
- wordpressCross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2...6.1 Medium
openvpnMageiaUpdated openvpn packages fix security vulnerabilitiesNo score- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 moremod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat...7.5 High
- mozilla bugzillaCross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4...6.1 Medium
- 7-zip, debian linux, opensuse +2 moreThe CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and...8.8 High
- redhat networkmanagerRace condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7...6.2 Medium
- zend frameworkZend Framework Information Disclosure7.5 High
- cisco identity services engine softwareThe Active Directory (AD) integration component in Cisco Identity Service Engine (ISE) before 1.2...7.5 High
- cisco unified computing system central softwareCross-site scripting (XSS) vulnerability in the management interface in Cisco Unified Computing...6.1 Medium
- graphicsmagick, debian linux, opensuse leap +4 more +6 moreGraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer...5.5 Medium
- graphicsmagick, debian linux, opensuse leap +4 more +6 moreMultiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of...5.5 Medium
- libgd, php +1 moreThe gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd)...7.5 High
- phpZend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does...9.8 Critical
- graphicsmagick, fedoraproject fedora, suse linux enterprise debuginfo +2 more +4 moreThe DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to...5.5 Medium
- theforeman foremanEval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman...8.8 High
- safemode project safemodesafemode gem allows context-dependent attackers to obtain sensitive information via the inspect method8.1 High
- theforeman foremanForeman before 1.10.3 and 1.11.0 before 1.11.0-RC2 allow remote authenticated users to read,...5.4 Medium
- perl, fedoraproject fedora +1 moreThe (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5...7.5 High
- apple safari, tvos, iphone os +2 moreWebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1, allows...8.8 High
- apple mac os xTcl in Apple OS X before 10.11.5 allows remote attackers to obtain sensitive information by...7.5 High
- apple iphone osSiri in Apple iOS before 9.3.2 does not block data detectors within results in the lock-screen...2.4 Low
- Show moreLoading…