CVEs published in August 2016
470 vulnerabilities, 61 critical, 6 exploited.
- wiresharkepan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the...5.9 Medium
- wiresharkepan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to...5.9 Medium
- wiresharkOff-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before...5.9 Medium
- wiresharkepan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x...5.9 Medium
- wiresharkepan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x...5.9 Medium
- wiresharkepan/dissectors/packet-wsp.c in the WSP dissector in Wireshark 1.12.x before 1.12.13 and 2.x...5.9 Medium
- wiresharkepan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13...5.9 Medium
- zend framework, fedoraproject fedora +1 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc9.8 Critical
- crestron dm-txrx-100-str firmwareMultiple cross-site request forgery (CSRF) vulnerabilities on Crestron Electronics DM-TXRX-100...8.8 High
- crestron dm-txrx-100-str firmwareCrestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 have a hardcoded...9.8 Critical
- crestron dm-txrx-100-str firmwareCrestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 use a hardcoded...9.8 Critical
- crestron dm-txrx-100-str firmwareCrestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote...9.8 Critical
- crestron dm-txrx-100-str firmwareCrestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 allow remote...9.8 Critical
- crestron dm-txrx-100-str firmwareCrestron Electronics DM-TXRX-100-STR devices with firmware before 1.3039.00040 rely on the client...9.8 Critical
- crestron airmedia am-100 firmwareDirectory traversal vulnerability in cgi-bin/rftest.cgi on Crestron AirMedia AM-100 devices with...9.8 Critical
- crestron airmedia am-100 firmwareDirectory traversal vulnerability in cgi-bin/login.cgi on Crestron AirMedia AM-100 devices with...7.5 High
- nofollow links project linksCross-site scripting (XSS) vulnerability in the Nofollow Links plugin before 1.0.11 for WordPress...6.1 Medium
collectdDebiancollectd - regression updateNo score- haxx libcurl, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which...8.1 High
- haxx libcurl, debian linux, opensuse leap +2 morecurl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS...7.5 High
- haxx libcurl, debian linux, opensuse leap +2 morecurl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate...7.5 High
- mozilla firefoxMozilla Firefox before 48.0 does not properly set the LINKABLE and URI_SAFE_FOR_UNTRUSTED_CONTENT...4.3 Medium
- mozilla firefoxMozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions...8.1 High
- mozilla firefox, oracle linux +1 moreMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers...5.5 Medium
- mozilla firefox, oracle linux +1 moreUse-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in...8.8 High
- mozilla firefox, oracle linux +1 moreThe nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45...8.8 High
- mozilla firefox, oracle linux +1 moreMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler...6.1 Medium
- mozilla firefoxInteger overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox...8.8 High
- mozilla firefoxMozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"...6.5 Medium
- mozilla firefox, oracle linux +1 moreUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...8.8 High
- mozilla firefox, oracle linux +1 moreUse-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and...8.8 High
- mozilla firefoxUse-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox...8.8 High
- mozilla firefox, oracle linux +1 moreUse-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before...9.8 Critical
- mozilla firefox, oracle linux +1 moreStack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before...8.8 High
- mozilla firefoxMozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted...4.3 Medium
- mozilla firefoxMozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderbird < 45.4 allow remote attackers to...4.3 Medium
- mozilla firefoxMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 on Linux make cairo...6.5 Medium
- mozilla firefoxHeap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox...8.8 High
- mozilla firefox, oracle linux +1 moreHeap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media...6.3 Medium
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and...8.8 High
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 allow...8.8 High
- mozilla firefoxMozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used...4.3 Medium
- No product listedSecurity update for SUSE Linux Enterprise Server Docker imagesNo score
- xen, citrix xenserver +1 moreXen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in...6.2 Medium
- huawei p8 smartphone firmwareBuffer overflow in the Wi-Fi driver in Huawei P8 smartphones with software before GRA-CL00C92B363...7.8 High
- huawei p8 smartphone firmwareBuffer overflow in the Wi-Fi driver in Huawei P8 smartphones with software before GRA-CL00C92B363...7.3 High
- huawei cloudengine 12800 firmware, cx600 firmware, ne40e firmware +2 more +4 moreHuawei NE40E and CX600 devices with software before V800R007SPH017; PTN 6900-2-M8 devices with...9.8 Critical
- atlassian bambooAtlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted...9.8 Critical
- pulsesecure pulse secure desktop, odyssey access client, pulse secure security +1 more +3 morePulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for...7.8 High
- paloaltonetworks pan-osPalo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6...7.8 High
- Show moreLoading…