CVEs published in June 2016
536 vulnerabilities, 66 critical, 6 exploited.
- ibm dominoThe Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a...8.1 High
- ibm security guardiumDirectory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10...6.5 Medium
- ibm urbancode deployIBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows...7.7 High
- ibm spectrum scale, general parallel file system storage server +1 moreIBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5...7.0 High
- ibm websphere mqMemory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote...7.5 High
- broadcom release automationMultiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA...6.1 Medium
- broadcom release automationCA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5...7.1 High
- phpThe php_url_parse_ex function in ext/standard/url.c in PHP before 5.5.38 allows remote attackers...9.8 Critical
- apache xerces-c\+\+, debian linux +1 moreStack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers...7.5 High
- libreoffice, canonical ubuntu linux, debian linux +2 moreUse-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute...7.8 High
- ibm marketing platformSQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows...8.8 High
- ibm marketing platformCross-site scripting (XSS) vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2...6.1 Medium
- ibm marketing platformSQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows...9.8 Critical
- linux kernelnfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission...5.5 Medium
- kde frameworks, opensuse leap, opensuse +2 morekinit in KDE Frameworks before 5.23.0 uses weak permissions (644) for /tmp/xauth-xxx-_y, which...8.4 High
- linux kernelarch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which...7.8 High
- siemens simatic s7-300 with profitnet support firmware, simatic s7-300 without profitnet support firmware +1 moreSiemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7...7.5 High
- linux kernel-rt, redhat enterprise linux for real time, novell suse linux enterprise real time extension +1 more +3 moreThe icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the...8.1 High
- linux kernelThe sched_read_attr function in kernel/sched/core.c in the Linux kernel 3.14-rc before 3.14-rc4...5.5 Medium
- imagemagick, oracle solaris +1 moreMagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive...7.5 High
- imagemagick, oracle solaris +1 moreInteger overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to...9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreMultiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on...7.8 High
- sixapart movable type, movable type open source +1 moreSQL injection vulnerability in the XML-RPC interface in Movable Type Pro and Advanced 6.x before...9.8 Critical
- debian linux, linux kernel +1 moreRace condition in the vop_ioctl function in drivers/misc/mic/vop/vop_vringh.c in the MIC VOP...6.3 Medium
- linux kernel, oracle linux, novell suse linux enterprise real time extension +11 more +13 moreThe key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does...5.5 Medium
- debian linux, linux kernel, novell suse linux enterprise real time extension +2 moreThe snd_compress_check_input function in sound/core/compress_offload.c in the ALSA subsystem in...7.8 High
- ibm dominoHeap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13...7.8 High
- ibm dominoHeap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13...7.8 High
- ibm dominoHeap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13...7.8 High
- ibm dominoHeap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13...7.8 High
- ibm websphere mqrunmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass an intended +dsp...2.5 Low
- ibm websphere mqrunmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass intended queue...2.5 Low
- alertus desktop notification for os xAlertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration...4.4 Medium
- schneider-electric powerlogic pm8ecc firmwareCross-site scripting (XSS) vulnerability in the Schneider Electric PowerLogic PM8ECC module...6.1 Medium
- ibm web content manager, websphere portal +1 moreCross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM...8.8 High
- apple mdnsresponder, airport base station firmware, iphone os +2 more +4 moreThe handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers...9.8 Critical
- apple mdnsresponder, airport base station firmware, iphone os +2 more +4 moreMultiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or...9.8 Critical
java-commonDebianjava-common - security updateNo score- welcart e-commerceThe Collne Welcart e-Commerce plugin before 1.8.3 for WordPress mishandles sessions, which allows...6.5 Medium
- welcart e-commerceCross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for...6.1 Medium
- welcart e-commerceCross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for...6.1 Medium
- welcart e-commerceThe Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to...5.6 Medium
- corega cg-wlr300gnv-w firmware, cg-wlr300gnv firmware +1 moreThe Wi-Fi Protected Setup (WPS) implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices...5.3 Medium
- corega cg-wlbaragm firmwareCorega CG-WLBARAGM devices allow remote attackers to cause a denial of service (reboot) via...7.5 High
- corega cg-wlbargl firmwareCorega CG-WLBARGL devices allow remote authenticated users to execute arbitrary commands via...8.0 High
- cybozu garoonCybozu Garoon 3.7 through 4.2 allows remote attackers to obtain sensitive email-reading...7.5 High
- cybozu garoonCybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions...6.5 Medium
- cybozu garoonCybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended...8.1 High
- cybozu garoonCybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail...6.5 Medium
- Show moreLoading…