CVEs published in June 2016
536 vulnerabilities, 66 critical, 6 exploited.
- cisco iosCisco IOS 15.5(3)M on Integrated Services Router (ISR) 800, 819, and 829 devices allows remote...7.5 High
enigmailDebianenigmail - security updateNo score- squidguardCross-site scripting (XSS) vulnerability in squidGuard.cgi in squidGuard before 1.5 allows remote...6.1 Medium
ctdbSUSESecurity update for ctdbNo score- pythonCRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in...6.1 Medium
- pythonInteger overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3...9.8 Critical
- pythonThe smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5...6.5 Medium
- phpThe sapi_header_op function in main/SAPI.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x...6.1 Medium
- fonality, fonality hud web +1 moreThe Chrome HUDweb plugin before 2016-05-05 for Fonality (previously trixbox Pro) 12.6 through 14...7.5 High
- fonalityFonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 uses weak permissions for...7.8 High
- fonalityFonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 has a hardcoded password...9.8 Critical
- netgear d3600 firmware, d6000 firmware +1 moreThe password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices...7.5 High
- netgear d3600 firmware, d6000 firmware +1 moreNETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier...5.9 Medium
- ntt-bp japan connected-free wi-fiThe NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android...5.6 Medium
- osisoft pi sql data access server 2016OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allows remote authenticated users to...6.5 Medium
- osisoft pi af server 2016OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of...6.5 Medium
- moxa pt-7728, pt-7728 firmware +1 moreMoxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change...7.7 High
- apple safari, iphone os +1 moreThe XSS auditor in WebKit, as used in Apple iOS before 9.3 and Safari before 9.1, does not...4.3 Medium
- apple mac os xIntel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel...3.3 Low
- apple mac os xThe NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute...7.8 High
- apple mac os xIntel Graphics Driver in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel...3.3 Low
- cybozu garoonCybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended...4.3 Medium
- cybozu garoonDirectory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2...4.3 Medium
- cybozu garoonDirectory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1...5.3 Medium
- dell emc data domain osEMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass...9.8 Critical
- dell emc data domain osEMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default no_root_squash option for NFS...8.2 High
- ibm elastic storage server, general parallel file system storage server +1 moreIBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic...8.4 High
- cybozu garoonCybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which...4.3 Medium
- ibm websphere mqIBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate...4.4 Medium
- trendmicro internet securityCross-site scripting (XSS) vulnerability in Trend Micro Internet Security 8 and 10 allows remote...6.1 Medium
- trendmicro internet securityTrend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via...6.5 Medium
- cybozu garoonCross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote...6.1 Medium
- cybozu garoonOpen redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to...7.4 High
- cybozu garoonCross-site scripting (XSS) vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users...5.4 Medium
- iodata etx-r firmwareI-O DATA DEVICE ETX-R devices allow remote attackers to cause a denial of service (web-server...5.3 Medium
- iodata etx-r firmwareCross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE ETX-R devices allows remote...8.8 High
- dx library project libraryThe printfDx function in Takumi Yamada DX Library for Borland C++ 3.13f through 3.16b, DX Library...9.8 Critical
- dena h2olib/http2/connection.c in H2O before 1.7.3 and 2.x before 2.0.0-beta5 mishandles HTTP/2...7.5 High
- buffalo bhr-4grv firmware, dwr-hp-g300nh firmware, fs-600dhp firmware +31 more +33 moreBUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote...6.5 Medium
- buffalo wzr-600dhp2 firmware, wzr-600dhp3 firmware, wzr-900dhp2 firmware +3 more +5 moreDirectory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier...7.5 High
- gsi old gsi mapsDirectory traversal vulnerability in kml2jsonp.php in Geospatial Information Authority of Japan ...7.5 High
- netcommonsNetCommons 2.4.2.1 and earlier allows remote authenticated secretariat (aka CLERK) users to gain...8.8 High
- hp service manager, service manager mobility, service manager server +3 more +5 moreHPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote...8.0 High
- cisco iosCisco IOS 15.2(1)T1.11 and 15.2(2)TST allows remote attackers to cause a denial of service ...6.5 Medium
- cisco rv110w wireless-n vpn firewall firmware, rv130w wireless-n multifunction vpn router firmware, rv215w wireless-n vpn router firmware +2 moreBuffer overflow in the web-based management interface on Cisco RV110W devices with firmware...6.5 Medium
- cisco rv110w wireless-n vpn firewall firmware, rv130w wireless-n multifunction vpn router firmware, rv215w wireless-n vpn router firmware +2 moreCross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W...6.1 Medium
- cisco rv110w wireless-n vpn firewall firmware, rv130w wireless-n multifunction vpn router firmware, rv215w wireless-n vpn router firmware +2 moreThe web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W...9.8 Critical
- trendmicro worry-free business security, worry-free business security services +1 moreCRLF injection vulnerability in Trend Micro Worry-Free Business Security Service 5.x and Worry...6.1 Medium
- trendmicro worry-free business security, officescan, worry-free business security services +2 moreDirectory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security...5.3 Medium
- nttdata terasoluna server framework for java webNTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu...3.7 Low
- Show moreLoading…