CVEs published in June 2016
536 vulnerabilities, 66 critical, 6 exploited.
- broadcom symantec critical system protection, symantec data center security server, symantec data center security server and agents +2 more +4 moreSymantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded...7.3 High
- broadcom symantec critical system protection, symantec data center security server, symantec data center security server and agents +2 more +4 moreDirectory traversal vulnerability in the Management Server in Symantec Embedded Security:...7.6 High
- broadcom symantec critical system protection, symantec data center security server, symantec data center security server and agents +2 more +4 moreDirectory traversal vulnerability in the Management Server in Symantec Embedded Security:...8.0 High
- broadcom symantec critical system protection, symantec data center security server, symantec data center security server and agents +2 more +4 moreSQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical...8.8 High
- mozilla firefox, network security services, canonical ubuntu linux +5 more +7 moreMozilla Network Security Services (NSS) before 3.23, as used in Mozilla Firefox before 47.0,...8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 ignores Content Security Policy (CSP) directives for cross-domain...6.1 Medium
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to discover the list of disabled plugins via...4.3 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 do not ensure that the user approves...8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to spoof permission notifications via a...6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreUse-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2...8.8 High
- mozilla firefox, canonical ubuntu linux, opensuse leap +1 more +3 moreMozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify...6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreMozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to spoof the...6.5 Medium
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreUse-after-free vulnerability in the mozilla::dom::Element class in Mozilla Firefox before 47.0...7.5 High
- mozilla firefox, canonical ubuntu linux, debian linux +2 more +4 moreHeap-based buffer overflow in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows...8.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +18 more +20 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and...8.8 High
- mozilla firefox, canonical ubuntu linux, novell suse linux enterprise desktop +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow...8.8 High
- cisco email security appliance, web security appliance, clamav +2 morelibclamav in ClamAV (aka Clam AntiVirus), as used in Advanced Malware Protection (AMP) on Cisco...7.5 High
- ntp, novell suse manager, opensuse leap +7 more +9 morentpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved...5.3 Medium
- ntp, novell suse manager, opensuse leap +7 more +9 morentpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a...5.9 Medium
- ntp, opensuse leap, opensuse +9 more +11 moreThe process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +6 more +8 moreVirtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to...7.5 High
- apache struts, ognl project ognl +1 moreDenial of service in Apache Struts5.3 Medium
- apache strutsApache Struts vulnerable to arbitrary remote code execution due to improper input validation9.8 Critical
- katello, redhat satellite +1 moreKatello SQL Injection vulnerabilities8.8 High
- xenThe p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS...5.6 Medium
- xenThe libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the...4.7 Medium
- xen, oracle vm server +1 moreThe libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause...6.7 Medium
- apache shiro, aurora, redhat fuse +1 more +3 moreImproper Access Control in Apache Shiro9.8 Critical
- apache james serverApache James Server OS Command Injection8.1 High
- criu checkpoint\/restore in userspace, opensuse +1 moreThe service daemon in CRIU does not properly restrict access to non-dumpable processes, which...5.5 Medium
- criu checkpoint\/restore in userspace, opensuse +1 moreThe service daemon in CRIU creates log and dump files insecurely, which allows local users to...7.8 High
- redhat gluster storage management console, gluster storage server, storage native client +2 moreThe Red Hat gluster-swift package, as used in Red Hat Gluster Storage (formerly Red Hat Storage...6.5 Medium
- suse linux enterprise desktop, linux enterprise server +1 moreA code injection in the supportconfig data collection tool in supportutils in SUSE Linux...7.8 High
- videolan vlc media player, debian linux +1 moreBuffer overflow in the DecodeAdpcmImaQT function in modules/codec/adpcm.c in VideoLAN VLC media...9.8 Critical
- canonical ubuntu linux, debian linux, google android +1 more +3 moreThe XML parser in Expat does not use sufficient entropy for hash initialization, which allows...7.5 High
- spice project spice, debian linux, opensuse leap +8 more +10 moreSPICE allows local guest OS users to read from or write to arbitrary host memory locations via...7.1 High
- spice project spice, debian linux, opensuse leap +8 more +10 moreThe smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM...9.8 Critical
- ntt webarena service formmailCross-site scripting (XSS) vulnerability in NTT PC Communications WebARENA Service formmail...6.1 Medium
- humhubCross-site scripting (XSS) vulnerability in HumHub 0.20.0-beta.1 through 0.20.1 and 1.0.0-beta...5.4 Medium
- kobe-beauty php-contact-formCross-site scripting (XSS) vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows...6.1 Medium
- futomi mp form mail cgiDirectory traversal vulnerability in futomi MP Form Mail CGI Professional Edition 3.2.3 and...2.7 Low
sambaDebiansamba - regression updateNo score- markdown on saved improved project on saved improvedCross-site scripting (XSS) vulnerability in the Markdown on Save Improved plugin before 2.5.1 for...6.1 Medium
- cisco ip phone 8800 series firmwareCISCO IP 8800 phones with software 11.0.1 and earlier allow local users to gain privileges for OS...7.8 High
- epoch web mailing listCross-site scripting (XSS) vulnerability in Epoch Web Mailing List 0.31 and earlier allows remote...6.1 Medium
- cisco prime network analysis module software, prime virtual network analysis module software +1 moreCisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2)...8.8 High
- cisco prime network analysis module software, prime virtual network analysis module software +1 moreCisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1)...7.8 High
- emc isilon onefsEMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root...6.7 Medium
- imagemagickThe DrawImage function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2...9.8 Critical
- imagemagickThe TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before...8.8 High
- Show moreLoading…