CVEs published in June 2016
536 vulnerabilities, 66 critical, 6 exploited.
- microsoft outlook web accessOutlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and...5.5 Medium
- microsoft office, office compatibility pack, office online server +5 more +7 moreMicrosoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office...7.3 High
- drupal, debian linux +1 moreDrupal Saving user accounts can sometimes grant the user all roles8.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +7 more +9 moreThe rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not...7.5 High
- linux kernelThe tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel through 4...5.5 Medium
- libtiff, debian linux +1 moreThe setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to...5.5 Medium
- libtiff, debian linux +1 moreThe setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to...5.5 Medium
- libtiff, debian linux, opensuse leap +2 more +4 moreBuffer overflow in the PixarLogDecode function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier...8.8 High
- huawei honor ws851 firmwareHuawei Honor WS851 routers with software 1.1.21.1 and earlier allow remote attackers to obtain...7.5 High
- huawei honor ws851 firmwareHuawei Honor WS851 routers with software 1.1.21.1 and earlier allow remote attackers to modify...7.5 High
- huawei honor ws851 firmwareStack-based buffer overflow in Huawei Honor WS851 routers with software 1.1.21.1 and earlier...9.8 Critical
- qemu, canonical ubuntu linux, debian linux +2 moreThe (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest...7.8 High
- qemu, canonical ubuntu linux, debian linux +2 moreThe megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS...5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moreThe get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause...4.4 Medium
- ffmpeg, libav, debian linux +1 more +3 moreThe mov_read_dref function in libavformat/mov.c in Libav before 11.7 and FFmpeg before 0.11...8.8 High
- clamav, canonical ubuntu linux +1 moreClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service ...5.5 Medium
- clamav, canonical ubuntu linux +1 moreClamAV (aka Clam AntiVirus) before 0.99.2 allows remote attackers to cause a denial of service ...5.5 Medium
- atheme, opensuse leap, opensuse +2 moremodules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS...7.5 High
libjpegMageiaUpdated libjpeg packages fix security vulnerabilityNo score- wiresharkepan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 1.12.x before 1.12.12...5.9 Medium
- wireshark, oracle solaris +1 moreepan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles...5.9 Medium
- wireshark, oracle solaris +1 morewiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x...5.9 Medium
- wiresharkwiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0...5.9 Medium
- wiresharkwiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2...5.9 Medium
- wiresharkThe USB subsystem in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles class types,...5.9 Medium
- wiresharkepan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 1.12.x before 1.12.12 and...5.9 Medium
- wiresharkepan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 2.x before 2.0.4 mishandles...5.9 Medium
- wiresharkepan/crypt/airpdcap.c in the IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.12 and 2.x...5.9 Medium
- wiresharkepan/dissectors/packet-dcerpc-spoolss.c in the SPOOLS component in Wireshark 1.12.x before 1.12...7.5 High
- linux kernelOut-of-bounds memory read in the x509_decode_time function in x509_cert_parser.c in Linux kernels...6.5 Medium
- citrix xenserverCitrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier...9.8 Critical
- huawei rse6500 firmware, vp9600 series firmware +1 moreBuffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with...8.1 High
- keystone openstack identityOpenStack Identity Keystone Improper Access Control4.3 Medium
- huawei hilink appThe Huawei Hilink App application before 3.19.2 for Android does not validate SSL certificates,...5.5 Medium
- huawei wear app, hilink app +1 moreThe Huawei Wear App application before 15.0.0.307 for Android does not validate SSL certificates,...6.5 Medium
- liferay portalLiferay Portal Vulnerable to XSS in Profile Search Functionality6.1 Medium
- apache rangerSQL injection vulnerability in the policy admin tool in Apache Ranger7.2 High
- bmc bladelogic server automation consoleThe RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6...7.5 High
- bmc bladelogic server automation consoleThe RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x,...7.5 High
- ntp, novell suse manager, opensuse leap +6 more +8 morentpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash)...7.5 High
- ntp, opensuse leap, opensuse +9 more +11 morentpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral...7.5 High
- mozilla firefoxThe maintenance service in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on...7.8 High
- mozilla firefox, opensuse leap, opensuse +2 moreThe TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x...8.8 High
- google androidActivity Manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01...5.5 Medium
- google androidAudioSource.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2,...5.5 Medium
- google androidThe Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers...5.5 Medium
- google androidThe Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows...9.8 Critical
- google androidSampleTable.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2,...5.5 Medium
- google androidOff-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before...7.8 High
- google androidThe Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 ...7.8 High
- Show moreLoading…