CVEs published in September 2016
605 vulnerabilities, 82 critical, 2 exploited.
- oracle linux Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to... 5.5 Medium
- call-cc chicken The "process-execute" and "process-spawn" procedures did not free memory correctly when the... 7.5 High
- call-cc chicken The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers... 9.8 Critical
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 more The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8,... 8.8 High
- emc vipr srm Cross-site scripting (XSS) vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated... 5.4 Medium
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 more Cloud Foundry vulnerable to Cross-Site Request Forgery 9.6 Critical
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 more The OAuth authorization implementation in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before... 5.3 Medium
- c-ares, canonical ubuntu linux, debian linux +1 more +3 more Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows... 9.8 Critical
- hp network automation HPE Network Automation Software 10.10 allows local users to write to arbitrary files via... 7.8 High
- hp network automation The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x... 7.3 High
- siemens scalance m-800 firmware, scalance s615 firmware +1 more The integrated web server on Siemens SCALANCE M-800 and S615 modules with firmware before 4.02... 4.0 Medium
- aternity The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL... 9.8 Critical
- aternity Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before 9.0.1... 6.1 Medium
-
systemdUbuntu systemd vulnerability No score - microsoft azure active directory passport Authentication Bypass in passport-azure-ad 8.1 High
- graphicsmagick, debian linux, opensuse leap +1 more +3 more The TIFFGetField function in coders/tiff.c in GraphicsMagick 1.3.24 allows remote attackers to... 7.5 High
- graphicsmagick, debian linux, opensuse leap +1 more +3 more The Utah RLE reader in GraphicsMagick before 1.3.25 allows remote attackers to cause a denial of... 7.5 High
- graphicsmagick, debian linux, opensuse leap +1 more +3 more Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.3.25... 9.8 Critical
- libgd, php, debian linux +2 more Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka... 9.8 Critical
- openstack compute \(nova\) OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which... 6.5 Medium
- redhat jboss operations network The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured... 9.8 Critical
- sap trex The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS... 5.3 Medium
- sap trex An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary... 9.8 Critical
- apache artemis, redhat jboss enterprise application platform +1 more Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain 7.2 High
- huawei policy center Cross-site scripting (XSS) vulnerability in Huawei Policy Center before V100R003C10SPC020 allows... 5.4 Medium
- qt qtwebkit qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db. 5.3 Medium
-
firefox-esrDebian firefox-esr - regression update No score - irssi buf.pl The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer... 3.3 Low
- gnu gnutls The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x... 7.5 High
- isc bind, hp hp-ux, oracle linux +2 more +4 more buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11... 7.5 High
- openssl, nodejs node.js, novell suse linux enterprise module for web scripting +2 more crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service ... 7.5 High
- openssl statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call,... 9.8 Critical
- adobe digital editions Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute... 9.8 Critical
- ibm aix Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure (aka... 6.5 Medium
- alienvault open source security information and event management, unified security management +1 more Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows... 5.4 Medium
- huawei ar firmware, netengine 16ex firmware +1 more Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200,... 6.5 Medium
- huawei fusioncompute Huawei FusionCompute before V100R005C10CP7002 stores cleartext AES keys in a file, which allows... 6.5 Medium
- huawei anyoffice secureapp Huawei AnyMail before 2.6.0301.0060 allows remote attackers to cause a denial of service ... 6.5 Medium
- sap hana SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to inject arbitrary audit... 7.5 High
- openstack murano, murano-dashboard, python-muranoclient +1 more +3 more OpenStack Murano Code Execution 9.8 Critical
- sap hana db SAP HANA DB 1.00.091.00.1418659308 allows remote attackers to obtain sensitive topology... 4.3 Medium
- huawei s12700 firmware, s5300 firmware, s5700 firmware +5 more +7 more Memory leak in Huawei S9300, S5300, S5700, S6700, S7700, S9700, and S12700 devices allows remote... 7.5 High
- huawei honor6 firmware, mate s firmware, p8 firmware +2 more The video driver in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B362, CRR... 5.5 Medium
- huawei oceanstor ism Cross-site scripting (XSS) vulnerability in the management interface in Huawei OceanStor ISM... 6.1 Medium
- citrix linux virtual delivery agent Citrix Linux Virtual Delivery Agent (aka VDA, formerly Linux Virtual Desktop) before 1.4.0 allows... 7.8 High
- redhat jboss enterprise application platform The domain controller in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2... 8.8 High
- apache ranger Apache Ranger allows remote authenticated administrators to inject arbitrary web script or HTML 4.8 Medium
- redhat jboss enterprise application platform, jboss wildfly application server +1 more Improper Neutralization of CRLF Sequences in Wildfly Undertow 6.1 Medium
- fedoraproject fedora, redhat jboss enterprise application platform, jboss enterprise web server +2 more mod_cluster Denial of Service vulnerability 7.5 High
- ibm tealeaf customer experience The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049... 6.5 Medium
- Show olderLoading…