CVEs published in August 2016
470 vulnerabilities, 61 critical, 6 exploited.
-
phpMageia Updated php packages fix security vulnerability No score - phpmyadmin phpMyAdmin Remote code execution vulnerability when PHP is running with dbase extension 8.1 High
- phpmyadmin phpMyAdmin Denial of service (DOS) attack with dbase extension 5.9 Medium
- phpmyadmin An issue was discovered in phpMyAdmin. A user can execute a remote code execution attack against... 7.5 High
- phpmyadmin An issue was discovered in phpMyAdmin. An authenticated user can trigger a denial-of-service (DoS... 6.5 Medium
- phpmyadmin phpMyAdmin Authentication Bypass 9.8 Critical
- phpmyadmin phpMyAdmin Reflected File Download attack 6.3 Medium
- phpmyadmin An issue was discovered in phpMyAdmin. An attacker can determine the phpMyAdmin host location... 5.3 Medium
- phpmyadmin An issue was discovered in phpMyAdmin. An attacker could redirect a user to a malicious web page.... 5.4 Medium
- phpmyadmin phpMyAdmin allows to detect if user is logged in 4.3 Medium
- phpmyadmin phpMyAdmin IPv6 and proxy server IP-based authentication rule circumvention 5.9 Medium
- phpmyadmin phpMyAdmin DoS Vulnerability 6.5 Medium
- phpmyadmin phpMyAdmin DoS Vulnerability 5.9 Medium
- phpmyadmin An issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize() function... 9.8 Critical
- phpmyadmin An issue was discovered in phpMyAdmin. In the user interface preference feature, a user can... 8.8 High
- phpmyadmin phpMyAdmin Denial of service (DOS) attack in transformation feature 6.5 Medium
- phpmyadmin An issue was discovered in phpMyAdmin. In the "User group" and "Designer" features, a user can... 7.5 High
- phpmyadmin XSS issues were discovered in phpMyAdmin. This affects navigation pane and database/table hiding... 6.1 Medium
- phpmyadmin An issue was discovered in phpMyAdmin involving the %u username replacement functionality of the... 6.8 Medium
- phpmyadmin phpMyAdmin Local file exposure through symlinks with UploadDir 5.3 Medium
- phpmyadmin phpMyAdmin Local file exposure 6.5 Medium
- phpmyadmin An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used... 8.1 High
- phpmyadmin A full path disclosure vulnerability was discovered in phpMyAdmin where a user can trigger a... 4.3 Medium
- phpmyadmin phpMyAdmin PHP code injection 8.8 High
- phpmyadmin XSS issues were discovered in phpMyAdmin. This affects Zoom search (specially crafted column... 6.1 Medium
- phpmyadmin An issue was discovered in cookie encryption in phpMyAdmin. The decryption of the username... 8.1 High
- netgear readynas surveillance, nuuo nvrmini 2 +1 more Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR... 8.8 High
- netgear readynas surveillance, nuuo nvrmini 2 +1 more cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2... 8.8 High
- nuuo nvrmini 2, nvrsolo +1 more NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root... 9.8 Critical
- netgear readynas surveillance, nuuo nvrmini 2, nvrsolo +2 more NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS... 7.5 High
- netgear readynas surveillance, nuuo nvrmini 2, nvrsolo +2 more cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and... 7.5 High
- netgear readynas surveillance, nuuo crystal, nvrmini 2 +1 more +3 more handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0... 9.8 Critical
- netgear readynas surveillance, nuuo nvrmini 2, nvrsolo +2 more __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through... 9.8 Critical
- dnnsoftware dotnetnuke Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) 5.4 Medium
- debian linux fs/fcntl.c in the "aufs 3.2.x+setfl-debian" patch in the linux-image package 3.2.0-4 (kernel 3.2... 5.5 Medium
- vmware vrealize automation VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via... 9.8 Critical
- vmware identity manager, vrealize automation +1 more VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users... 7.8 High
- vmware photon os VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys... 9.8 Critical
- vmware vrealize log insight Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows... 5.3 Medium
-
cactiDebian cacti - regression update No score - qemu, debian linux +1 more Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest... 6.0 Medium
- cisco content security management appliance, nodejs node.js, openssl +6 more +8 more The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols... 7.5 High
- vbulletin SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2... 9.8 Critical
- mac-telnet project mac-telnet Buffer overflow in the handle_packet function in mactelnet.c in the client in MAC-Telnet 0.4.3... 9.8 Critical
- google android, linux kernel +1 more Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm... 9.8 Critical
- google android, linux kernel +1 more Heap-based buffer overflow in the wcnss_wlan_write function in drivers/net/wireless/wcnss... 7.8 High
- ibm bigfix webreports WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows... 5.9 Medium
- ibm bigfix WebReports in IBM BigFix Platform (formerly Tivoli Endpoint Manager) 9.x before 9.5.2 allows... 5.5 Medium
- opensuse libstorage, libstorage-ng, yast yast-storage +1 more +3 more libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage... 5.1 Medium
- libtiff, opensuse +1 more The _TIFFFax3fillruns function in libtiff before 4.0.6 allows remote attackers to cause a denial... 7.5 High
- Show olderLoading…