CVEs published in May 2016
609 vulnerabilities, 141 critical, 7 exploited.
- phpThe get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6...8.6 High
- qemu, canonical ubuntu linux, debian linux +2 moreQEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support,...6.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +2 moreXML external entity (XXE) vulnerability in the xmlStringLenDecodeEntities function in parser.c in...7.1 High
- xmlsoft libxml2, apple iphone os, itunes +8 more +10 moreThe xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent...7.5 High
- cisco ios, ios xe, ios xr +1 more +3 moreThe Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through...7.5 High
- cisco ucs invicta c3124sa applianceCisco UCS Invicta 4.3, 4.5, and 5.0.1 on Invicta appliances and Invicta Scaling System uses the...7.5 High
mediawikiMageiaUpdated mediawiki packages fix security vulnerabilityNo score- phpmyadmin, opensuse +1 moreCross-site scripting (XSS) vulnerability in phpMyAdmin 4.4.x before 4.4.15.6 and 4.6.x before 4.6...6.1 Medium
- sensiolabs symfony, debian linux +1 moreSymphony Denial of Service Via Overlong Usernames7.5 High
- sensiolabs symfony, debian linux +1 moreSymfony Cryptographic Vulnerability7.5 High
- debian pdns, linux +1 morepdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user...9.8 Critical
- cisco secure firewall management centerThe web interface in Cisco Firepower Management Center 5.4.0 through 6.0.0.1 allows remote...6.5 Medium
- cisco webex meeting centerCisco WebEx Meeting Center Original Release Base allows remote attackers to obtain sensitive...7.5 High
- cisco adaptive security appliance softwareCisco Adaptive Security Appliance (ASA) Software 9.0 through 9.5.1 mishandles IPsec error...6.5 Medium
postgresql-9.1Debianpostgresql-9.1 - bugfix updateNo score- libgdgd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5...7.6 High
- huawei mate 8 firmwareBuffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182, NXT-CL before...7.8 High
- huawei mate 8 firmwareBuffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182, NXT-CL before...7.8 High
- cisco adaptive security appliance softwareThe XML parser in Cisco Adaptive Security Appliance (ASA) Software through 9.5.2 allows remote...6.5 Medium
- fortinet fortisandbox firmwareMultiple cross-site scripting (XSS) vulnerabilities in the Web User Interface (WebUI) in Fortinet...6.1 Medium
eglibcUbuntueglibc, glibc regressionNo score- ivanti connect securePulse Connect Secure (PCS) 8.2 before 8.2r1 allows remote attackers to disclose sign in pages via...5.3 Medium
- ivanti connect secure, pulsesecure pulse connect secure +1 moreThe administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8...8.6 High
- ivanti connect secure, pulsesecure pulse connect secure +1 moreCross-site scripting (XSS) vulnerability in the administrative user interface in Pulse Connect...5.5 Medium
- ivanti connect secure, pulsesecure pulse connect secure +1 moreCross-site scripting (XSS) vulnerability in the system configuration section in the...6.1 Medium
- ivanti connect secure, pulsesecure pulse connect secure +1 morePulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before...5.8 Medium
- ivanti connect secure, pulsesecure pulse connect secure +1 morePulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before...10.0 Critical
- ivanti connect secure, pulsesecure pulse connect secure +1 morePulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r3, 8.0 before 8.0r11, and 7.4 before...7.5 High
- cmsmadesimple cms made simpleCMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow...4.7 Medium
- netbsdCGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows...9.8 Critical
sambaUbuntusamba regressionNo score- huawei ath, cherryplus, ath firmware +3 more +5 moreCross-site scripting (XSS) vulnerability in the email APP in Huawei PLK smartphones with software...6.1 Medium
- freebsdInteger signedness error in the sockargs function in sys/kern/uipc_syscalls.c in FreeBSD 10.1...7.8 High
- freebsdInteger signedness error in the genkbd_commonioctl function in sys/dev/kbd/kbd.c in FreeBSD 9.3...7.8 High
- redhat libvirt, xen +1 moreThe qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a...6.5 Medium
- cisco ios xrCisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries,...7.5 High
- cisco evolved programmable network manager, prime infrastructure +1 moreThe API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable...8.8 High
- cisco telepresence video communication serverCisco TelePresence Video Communications Server (VCS) X8.x before X8.7.2 allows remote attackers...7.5 High
- cisco web security appliance \(wsa\)Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance (WSA) devices allows remote...7.5 High
- cisco web security appliance \(wsa\)Cisco AsyncOS before 8.5.3-069 and 8.6 through 8.8 on Web Security Appliance (WSA) devices...7.5 High
- cisco web security applianceMemory leak in Cisco AsyncOS 8.5 through 9.0 before 9.0.1-162 on Web Security Appliance (WSA)...7.5 High
- cisco web security applianceCisco AsyncOS 8.0 before 8.0.6-119 on Web Security Appliance (WSA) devices allows remote...7.5 High
debian-security-supportDebiandebian-security-support - Long term security support updateNo score- mail project mailMail Gem CRLF Injection vulnerability6.1 Medium
xerces-j2MageiaUpdated xerces-j2 packages fix security vulnerabilityNo score- gnu glibc, opensuse +1 moreStack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU...7.5 High
- gnu glibc, fedoraproject fedora, opensuse leap +1 more +3 moreStack-based buffer overflow in the glob implementation in GNU C Library (aka glibc) before 2.24,...7.5 High
- lenovo shareitCross-site scripting (XSS) vulnerability in Lenovo SHAREit before 3.5.98_ww on Android before 4.4...6.1 Medium
- lenovo shareitLenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified...8.8 High
- huawei ngfw module firmware, secospace usg6300 firmware, secospace usg6500 firmware +2 more +4 moreBuffer overflow in the Smart DNS functionality in the Huawei NGFW Module and Secospace USG6300,...7.5 High
- Show moreLoading…