CVEs published in August 2016
470 vulnerabilities, 61 critical, 6 exploited.
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1;...7.8 High
- microsoft windows, windows 7, windows 8.1 +7 more +9 moreThe kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1;...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1;...7.8 High
- microsoft live meeting, lync, office +5 more +7 moreThe Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft live meeting, lync, office +5 more +7 moreThe Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft live meeting, lync, office +9 more +11 moreThe Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1;...7.8 High
- microsoft windows 8.1, windows rt 8.1, windows server 2012 +2 moreThe Netlogon service in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,...5.3 Medium
- microsoft edgeChakraCore RCE Vulnerability7.5 High
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary...7.5 High
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted...7.5 High
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a...7.5 High
- microsoft internet explorerMicrosoft Internet Explorer 11 allows remote attackers to execute arbitrary code via a crafted...7.5 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreKerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1;...7.5 High
- adobe experience managerThe Backup functionality in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows attackers to...5.3 Medium
- adobe experience managerCross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2...6.1 Medium
- adobe experience managerAdobe Experience Manager 6.0, 6.1, and 6.2 allow attackers to obtain sensitive audit log event...5.3 Medium
- adobe experience managerCross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows...6.1 Medium
- moped project moped, fedoraproject fedora +1 moreMoped Rubygem Data Injection Vulnerability7.5 High
- busyboxThe recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers...7.5 High
python-djangoDebianpython-django - security updateNo scoremongodbDebianmongodb - regression updateNo score- ibm filenet workplaceOpen redirect vulnerability in IBM FileNet Workplace 4.0.2 before 4.0.2.14 allows remote...6.8 Medium
- vmware esxi, vcenter server +1 moreCRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote...6.1 Medium
- vmware esxi, fusion, tools +2 more +4 moreUntrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0...7.8 High
- ibm tivoli storage flashcopy manager for sql server, tivoli storage manager for databases data protection for microsoft sql server +1 moreIBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server (aka IBM...6.2 Medium
- ibm filenet workplaceCross-site scripting (XSS) vulnerability in IBM FileNet Workplace 4.0.2 allows remote...5.4 Medium
- ibm connections portletsOpen redirect vulnerability in the Connections Portlets component 5.x before 5.0.2 for IBM...6.5 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x...3.7 Low
- ibm websphere portalCross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6...5.4 Medium
- ibm engineering lifecycle optimization - publishingUnrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine ...5.4 Medium
- ibm engineering lifecycle optimization - publishingCross-site scripting (XSS) vulnerability in the Document Builder in IBM Rational Publishing...5.4 Medium
- ibm qradar security information and event managerIBM Security QRadar SIEM 7.1.x and 7.2.x before 7.2.7 allows remote authenticated users to...8.8 High
- ibm sterling connect\IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4...3.3 Low
- ibm general parallel file systemIBM General Parallel File System (GPFS) 3.5 before 3.5.0.29 efix 6 and 4.1.1 before 4.1.1.4 efix...6.5 Medium
- ibm aix, vios +1 moreThe mustendd driver in IBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x, when the jumbo_frames...3.7 Low
- ibm information server framework, infosphere information governance catalog, infosphere information server business glossary +2 moreCross-site scripting (XSS) vulnerability in IBM Information Server Framework 8.5, Information...5.4 Medium
- ibm aix, vios +1 moreIBM AIX 5.3, 6.1, 7.1, and 7.2 and VIOS 2.2.x do not default to the latest TLS version, which...3.7 Low
- artifex mupdf, debian linux +1 moreHeap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF...9.8 Critical
- mongodb, fedoraproject fedora +1 moreThe client in MongoDB uses world-readable permissions on .dbshell history files, which might...5.5 Medium
- siemens sinema serverSiemens SINEMA Server uses weak permissions for the application folder, which allows local users...7.8 High
- moxa softcmsSQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute...9.8 Critical
- fontconfig project fontconfig, canonical ubuntu linux, debian linux +1 more +3 morefontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary...7.8 High
- hp release controlHPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated...7.7 High
- cisco iosCisco IOS 15.5(3)S3, 15.6(1)S2, 15.6(2)S1, and 15.6(2)T1 does not properly dequeue invalid NTP...7.5 High
- cisco prime infrastructureCisco Prime Infrastructure 2.2(2) does not properly restrict use of IFRAME elements, which makes...4.3 Medium
- cisco telepresence video communication serverThe administrative web interface in Cisco TelePresence Video Communication Server Expressway X8.5...8.8 High
- cisco unified communications manager im and presence serviceCisco Unified Communications Manager IM and Presence Service 9.1(1) SU6, 9.1(1) SU6a, 9.1(1) SU7,...7.5 High
- cisco rv180 vpn router firmware, rv180w vpn router firmware +1 moreCisco RV180 and RV180W devices allow remote authenticated users to execute arbitrary commands as...8.8 High
- cisco rv180 vpn router firmware, rv180w wireless-n multifunction vpn router firmware +1 moreDirectory traversal vulnerability in the web interface on Cisco RV180 and RV180W devices allows...7.5 High
- Show moreLoading…