CVEs published in July 2016
755 vulnerabilities, 88 critical, 0 exploited.
- linux kernel, google android, oracle vm server +2 more net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of... 4.8 Medium
- openssl, oracle linux +1 more The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time... 7.5 High
- collectd, debian linux, fedoraproject fedora +2 more Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and... 9.1 Critical
- qemu, canonical ubuntu linux, debian linux +9 more +11 more The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to... 5.5 Medium
- redislabs redis, debian linux +1 more linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history,... 3.3 Low
- libarchive, suse linux enterprise desktop, linux enterprise server +1 more +3 more Memory leak in the __archive_read_get_extract function in archive_read_extract2.c in libarchive... 5.5 Medium
- libarchive, novell suse linux enterprise desktop, suse linux enterprise server +1 more +3 more The archive_string_append function in archive_string.c in libarchive before 3.2.0 allows remote... 7.5 High
- dbd-mysql project dbd-mysql, debian linux +1 more Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows... 9.8 Critical
- dbd-mysql project dbd-mysql, debian linux +1 more Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of... 9.8 Critical
- apache archiva Apache Archiva vulnerable to Cross-site Scripting 4.8 Medium
- apache archiva Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier... 8.8 High
- saltstack salt Salt uses weak permissions on the cache data 3.3 Low
- rockwellautomation factorytalk energrymetrix Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 does not invalidate credentials upon... 7.3 High
- rockwellautomation factorytalk energrymetrix SQL injection vulnerability in Rockwell Automation FactoryTalk EnergyMetrix before 2.20.00 allows... 9.8 Critical
- cisco videoscape session resource manager Cisco Videoscape Session Resource Manager (VSRM) allows remote attackers to cause a denial of... 6.5 Medium
- cisco nx-os Cisco Nexus 1000v Application Virtual Switch (AVS) devices before 5.2(1)SV3(1.5i) allow remote... 6.5 Medium
- cisco firesight system software Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to... 7.5 High
- cisco prime service catalog Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Prime... 6.1 Medium
- cisco wireless lan controller software Cisco Wireless LAN Controller (WLC) devices 7.4(121.0) and 8.0(0.30220.385) allow remote... 6.5 Medium
- cisco unified computing system performance manager The web framework in Cisco Unified Computing System (UCS) Performance Manager 2.0.0 and earlier... 8.8 High
-
cakephpDebian cakephp - security update No score - gnome gdk-pixbuf, canonical ubuntu linux, opensuse leap +1 more +3 more The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a... 7.5 High
- qemu, canonical ubuntu linux, debian linux +2 more The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP... 6.7 Medium
- xen, citrix xenserver +1 more The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS... 8.8 High
- artifex mupdf, opensuse leap, opensuse +2 more Use-after-free vulnerability in the pdf_load_xref function in pdf/pdf-xref.c in MuPDF allows... 5.5 Medium
- libupnp project libupnp, debian linux +1 more Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files... 7.5 High
- sudo project sudo The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write... 7.0 High
- cronic project cronic, debian linux, opensuse leap +1 more +3 more cronic before 3 allows local users to write to arbitrary files via a symlink attack on a (1)... 6.2 Medium
- marvell software development kit, f5 traffix signaling delivery controller +1 more The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON... 7.5 High
- broadcom ehealth CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote authenticated users to cause a denial of... 8.8 High
- ca ehealth CA eHealth 6.2.x allows remote authenticated users to cause a denial of service or possibly... 8.8 High
- uclibc, uclibc-ng project uclibc-ng +1 more Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows... 7.5 High
- uclibc-ng project uclibc-ng The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote... 7.5 High
- uclibc-ng project uclibc-ng The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS... 7.5 High
- php Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5... 8.8 High
- php Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi... 9.8 Critical
- php ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly... 9.8 Critical
- php The locale_accept_from_http function in ext/intl/locale/locale_methods.c in PHP before 5.5.38, 5... 9.8 Critical
- icu-project international components for unicode The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for... 9.8 Critical
- php The exif_process_user_comment function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before 5.6... 6.5 Medium
- php The exif_process_IFD_in_MAKERNOTE function in ext/exif/exif.c in PHP before 5.5.38, 5.6.x before... 9.8 Critical
- php ext/session/session.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 does not... 9.8 Critical
- php Integer overflow in the virtual_file_ex function in TSRM/tsrm_virtual_cwd.c in PHP before 5.5.38,... 7.8 High
- perl, canonical ubuntu linux, debian linux +2 more +4 more The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a... 7.8 High
- perl, apache spamassassin, debian linux +2 more +4 more (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin... 7.8 High
- python, debian linux, fedoraproject fedora +2 more The CGIHandler class in Python before 2.7.12 does not protect against the HTTP_PROXY variable... 6.1 Medium
- google chrome Use-after-free vulnerability in extensions/renderer/user_script_injector.cc in the Extensions... 8.8 High
- google chrome, sfntly +1 more Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly... 8.8 High
- google chrome The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google... 8.8 High
- google chrome ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not... 6.5 Medium
- Show olderLoading…