CVEs published in August 2016
470 vulnerabilities, 61 critical, 6 exploited.
- google androidAndroid 6.x before 2016-08-01 allows attackers to cause a denial of service (loss of locked...5.5 Medium
- google androidservice/jni/com_android_server_wifi_WifiNative.cpp in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x...5.5 Medium
- google androidThe SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016...5.5 Medium
- google androidThe secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x...5.5 Medium
- google androidThe camera APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x...5.5 Medium
- google androidThe Shell component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01...7.8 High
- google androidThe framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x...7.8 High
- google androidThe telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and...7.5 High
- google androidcodecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x...5.5 Medium
- google androidThe ih264d decoder in mediaserver in Android 6.x before 2016-08-01 does not initialize certain...5.5 Medium
- google androiddecoder/ih264d_api.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and...5.5 Medium
- google androidcodecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01...5.5 Medium
- google androidservices/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2,...7.8 High
- google androidmm-video-v4l2/vidc/venc/src/omx_video_base.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1...7.8 High
- google androidomx/OMXNodeInstance.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x...7.8 High
- google androidThe secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x...7.8 High
- google android, debian linux +1 moreexif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x...7.8 High
- google androidlibmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and...9.8 Critical
- google androidThe ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers,...9.8 Critical
- google androidInteger overflow in codecs/on2/h264dec/source/h264bsd_dpb.c in libstagefright in mediaserver in...9.8 Critical
- google androidThe Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices...7.8 High
- google androidservices/core/java/com/android/server/pm/PackageManagerService.java in the framework APIs in...7.3 High
- google androidBuffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in the Qualcomm Wi-Fi driver in Android...9.8 Critical
- google androidThe Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices makes incorrect...7.5 High
- redhat openshiftRed Hat Security Advisory: atomic-openshift security and bug fix update6.5 Medium
- redhat dashbuilder, jboss bpm suite, jboss enterprise brms platform +2 moreSQL injection vulnerability in the getStringParameterSQL method in main/java/org/dashbuilder...9.8 Critical
- juniper junosJuniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication...7.8 High
- juniper junosJuniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and...5.9 Medium
- apache activemqImproper Neutralization of Input During Web Page Generation in Apache ActiveMQ5.4 Medium
- openshift originopenshift-node in OpenShift Origin 1.1.6 and earlier improperly stores router credentials as envvars in the pod when the --credentials option is used, which allows local users to obtain sensitive priv…5.1 Medium
- sap hanaThe multi-tenant database container feature in SAP HANA does not properly encrypt communications,...9.8 Critical
- sap hana sps09SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by...5.5 Medium
- sap hanaSAP HANA DB 1.00.73.00.389160 allows remote attackers to cause a denial of service (process...7.5 High
- sap trexAn unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute...9.8 Critical
- sap hana dbThe SQL interface in SAP HANA DB 1.00.091.00.1418659308 provides different error messages for...5.3 Medium
- sap hanaThe SQL interface in SAP HANA before Revision 102 does not limit the number of login attempts for...8.1 High
- sap trexSAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related...9.8 Critical
- sap trexSAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors...9.8 Critical
- sap trexDirectory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read...9.8 Critical
- apache poiApache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability5.5 Medium
- sap hana dbThe Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.091.00.1418659308...5.5 Medium
- fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in Fortinet FortiAnalyzer 5.x before 5.0.12 and 5.2.x...5.4 Medium
- redhat satelliteCross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote...6.1 Medium
- apache openofficeThe Impress tool in Apache OpenOffice 4.1.2 and earlier allows remote attackers to cause a denial...7.8 High
- mozilla firefoxMozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left...5.3 Medium
- mozilla firefoxThe Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary...4.7 Medium
mysql-5.5Debianmysql-5.5 - regression updateNo score- google androidThe kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain...7.8 High
hawk2SUSESecurity update for hawk2No score- wiresharkepan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not...5.9 Medium
- Show moreLoading…