CVEs published in August 2016
470 vulnerabilities, 61 critical, 6 exploited.
- theforeman foremanCross-site scripting (XSS) vulnerability in app/assets/javascripts/host_edit_interfaces.js in...5.4 Medium
- theforeman foremanCross-site scripting (XSS) vulnerability in app/helpers/form_helper.rb in Foreman before 1.12.2,...6.1 Medium
- f5 big-ip edge gateway, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreThe default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM,...7.5 High
- theforeman foremanForeman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the...5.3 Medium
- theforeman foremanForeman before 1.11.4 and 1.12.x before 1.12.1 does not properly restrict access to preview...5.3 Medium
- theforeman foremanThe (1) Organization and (2) Locations APIs and UIs in Foreman before 1.11.4 and 1.12.x before 1...8.8 High
- theforeman foremanThe (1) Organization and (2) Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1...5.0 Medium
- fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12...6.1 Medium
- fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x...6.1 Medium
- fortinet fortianalyzer firmware, fortimanager firmware +1 moreCross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet...5.4 Medium
- apache openmeetingsApache OpenMeetings Cross-site Scripting vulnerability6.1 Medium
- apache sentryMultiple incomplete blacklist vulnerabilities in Apache Sentry before 1.7.0 allow remote...8.8 High
- f5 big-ip edge gateway, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreThe Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x...7.5 High
- cracklib project cracklib, debian linux, opensuse leap +2 moreStack-based buffer overflow in the FascistGecosUser function in lib/fascist.c in cracklib allows...7.8 High
- qemu, debian linux, redhat openstack +1 more +3 moreInteger overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick...4.4 Medium
- apple iphone osIOMobileFrameBuffer in Apple iOS before 9.3.4 allows attackers to execute arbitrary code in a...7.8 High
- cisco secure firewall management centerThe web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before...8.8 High
- cisco secure firewall management centerThe web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x...8.8 High
- cisco application policy infrastructure controller enterprise moduleThe Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise...8.8 High
- cisco adaptive security appliance (asa), adaptive security appliance software +1 moreCisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and...7.8 High
- cisco adaptive security appliance (asa), adaptive security appliance software, asa 1000v cloud firewall software +1 more +3 moreBuffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500,...8.8 High
- qemu, debian linux +1 moreThe vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows...6.0 Medium
- qemu, debian linux, redhat virtualization +2 moreThe vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator)...6.0 Medium
- qemu, debian linux +1 moreThe net_tx_pkt_do_sw_fragmentation function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator)...4.4 Medium
- qemu, debian linux +1 moreUse-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU ...4.4 Medium
- linux kernelThe tcp_check_send_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not...5.5 Medium
- gnupg, gnupg libgcrypt, canonical ubuntu linux +1 more +3 moreThe mixing functions in the random number generator in Libgcrypt before 1.5.6, 1.6.x before 1.6.6...5.3 Medium
- imagemagickBuffer overflow in MagickCore/enhance.c in ImageMagick before 7.0.2-7 allows remote attackers to...9.1 Critical
- extplorerDirectory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote...7.8 High
qemuUbuntuqemu, qemu-kvm regressionNo score- westes flex, debian linux +1 moreHeap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow...9.8 Critical
- sap sapcar archive toolSAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain...5.8 Medium
- sap sapcarSAP SAPCAR does not check the return value of file operations when extracting files, which allows...5.5 Medium
- postgresql, debian linux +1 morePostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x...7.1 High
- postgresql, debian linux +1 morePostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x...8.3 High
- sophos mobile control eas proxySophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows...8.6 High
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the...5.3 Medium
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive...5.3 Medium
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive...5.3 Medium
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a...7.5 High
- microsoft internet explorerMicrosoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL...2.5 Low
- microsoft windows 10, windows 8.1, windows rt 8.1 +2 more +4 moreMicrosoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and...4.9 Medium
- microsoft edge, windows 10, windows 8.1 +1 more +3 moreThe PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and...7.0 High
- microsoft officeMicrosoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allow remote attackers to execute...7.8 High
- microsoft office, word, word for mac +1 more +3 moreMicrosoft Office 2010 SP2, Word 2007 SP3, Word 2010 SP2, Word for Mac 2011, Word 2016 for Mac,...7.8 High
- microsoft word, word for mac +1 moreMicrosoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute...7.8 High
- microsoft onenote, onenote for mac +1 moreMicrosoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote...5.5 Medium
- microsoft office, word viewer, word for mac +2 moreMicrosoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word...7.8 High
- microsoft windows 10ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials...9.1 Critical
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1;...7.8 High
- Show moreLoading…