CVEs published in June 2016
536 vulnerabilities, 66 critical, 6 exploited.
- imagemagickThe DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7...8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreMultiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to...8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome...6.5 Medium
- google chrome, debian linux, opensuse leap +5 more +7 moreThe Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction...8.8 High
- google chrome, debian linux, opensuse leap +5 more +7 moreextensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not...7.5 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreWebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in...6.5 Medium
- google chrome, debian linux, opensuse leap +5 more +7 moreThe createCustomType function in extensions/renderer/resources/binding.js in the extension...6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as...8.8 High
- google chrome, debian linux, opensuse leap +5 more +7 moreThe extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings...8.8 High
- lenovo accelerator applicationUpdateAgent in Lenovo Accelerator Application allows man-in-the-middle attackers to execute...7.5 High
- cisco network analysis module, prime network analysis module software, prime virtual network analysis module software +2 moreCisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1)...9.8 Critical
- cisco network analysis module softwareCisco Prime Network Analysis Module (NAM) before 6.2(1-b) miscalculates IPv6 payload lengths,...5.3 Medium
pgpdumpMageiaUpdated pgpdump packages fix security vulnerabilitiesNo score- citrix netscaler gateway 11.0 firmwareCross-site scripting (XSS) vulnerability in vpn/js/gateway_login_form_view.js in Citrix NetScaler...6.1 Medium
- citrix xenapp, xendesktop +1 moreCitrix Studio before 7.6.1000, Citrix XenDesktop 7.x before 7.6 LTSR Cumulative Update 1 (CU1),...7.5 High
- apache qpid broker-jAMQP 0-8, 0-9, 0-91, and 0-10 connection handling in Apache Qpid Java before 6.0.3 might allow remote attackers to bypass authentication9.1 Critical
- apache qpid broker-jImproper Input Validation in org.apache.qpid:qpid-broker5.9 Medium
- apache activemqImproper Input Validation in Apache ActiveMQ9.8 Critical
- apache pdfbox, debian linux +1 moreHigh severity vulnerability that affects org.apache.pdfbox:pdfbox7.8 High
- moxa uc-7408 lx-plus, uc-7408 lx-plus firmware +1 moreMoxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and...5.8 Medium
- ibm security appscanIBM Security AppScan Standard 8.7.x, 8.8.x, and 9.x before 9.0.3.2 and Security AppScan...6.5 Medium
NetworkManager-kde4SUSERecommended update for NetworkManager-kde4No score- qemu, canonical ubuntu linux, debian linux +8 more +10 moreHeap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local...7.8 High
- qemu, canonical ubuntu linux, debian linux +2 moreThe vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS...6.0 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS...4.4 Medium
- google chrome, debian linux, opensuse leap +5 more +7 morebrowser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP...5.3 Medium
- google chrome, debian linux, opensuse leap +5 more +7 morebrowser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use...5.3 Medium
- google chrome, debian linux, opensuse leap +5 more +7 moreThe Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction...7.5 High
- google chrome, debian linux, opensuse leap +5 more +7 moreThe renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict...6.5 Medium
- google chrome, debian linux, opensuse leap +5 more +7 moreThe CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp...6.5 Medium
- google chrome, debian linux, opensuse leap +5 more +7 morecore/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63,...6.5 Medium
- google chrome, debian linux, opensuse leap +5 more +7 moreHeap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used...8.8 High
- google chrome, debian linux, opensuse leap +5 more +7 moreextensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0...8.8 High
- google chrome, debian linux, opensuse leap +5 more +7 moreThe extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass...8.8 High
- google chrome, debian linux, opensuse leap +5 more +7 moreThe ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the...8.8 High
- google chromeInsufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63...8.8 High