CVEs published in September 2016
605 vulnerabilities, 82 critical, 2 exploited.
- jose-php project jose-phpThe RSA 1.5 algorithm implementation in the JOSE_JWE class in JWE.php in jose-php before 2.2.1...5.3 Medium
- jose-php project jose-phpjose-php before 2.2.1 does not use constant-time operations for HMAC comparison, which makes it...3.7 Low
- cisco webex wrf player t29Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to...7.8 High
- cisco webex wrf player t29Cisco WebEx Meetings Player T29.10, when WRF file support is enabled, allows remote attackers to...5.5 Medium
- misp-project mispMalware Information Sharing Platform (MISP) before 2.3.90 allows remote attackers to conduct PHP...9.8 Critical
- misp-project mispMultiple cross-site scripting (XSS) vulnerabilities in the template-creation feature in Malware...6.1 Medium
- misp-project mispapp/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3...9.8 Critical
- ibm mq appliance firmwareMQCLI on IBM MQ Appliance M2000 and M2001 devices allows local users to execute arbitrary shell...8.8 High
- vbulletinThe media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2...8.6 High
- akabei soft2 happy wardrobeAKABEi SOFT2 games allow remote attackers to execute arbitrary OS commands via crafted saved data...7.8 High
- let\'s php\! simple chatCross-site scripting (XSS) vulnerability in Let's PHP! simple chat before 2016-08-15 allows...6.1 Medium
- clip-bucket clipbucketCross-site scripting (XSS) vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers...6.1 Medium
- gnu mailmanCross-site request forgery (CSRF) vulnerability in the admin web interface in GNU Mailman before...8.8 High
- gnu mailmanCross-site request forgery (CSRF) vulnerability in the user options page in GNU Mailman 2.1.x...8.8 High
- cisco wireless lan controller, wireless lan controller 6.0, wireless lan controller 7.0 +3 more +5 moreThe Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller...6.5 Medium
- google chrome, opensuse leap +1 moreMultiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and...8.8 High
- cisco small business 220 series smart plus switchesCisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community,...9.8 Critical
- cisco small business 220 series smart plus switchesThe web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1...7.5 High
- cisco small business 220 series smart plus switchesCross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small...6.1 Medium
- cisco small business 220 series smart plus switchesCross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco...8.8 High
- latchset jwcryptojwcrypto lacks the Random Filling protection mechanism5.3 Medium
- adobe coldfusionThe Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update...8.6 High
- google chrome, opensuse leap +1 moreThe download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before...3.1 Low
- google chrome, opensuse leap +1 moreCross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in...6.1 Medium
- google chrome, opensuse leap +1 moreCross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in...6.1 Medium
- google chrome, opensuse leap +1 moreThe bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X...4.3 Medium
- google chrome, opensuse leap +1 moreThe AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google...6.5 Medium
- google chrome, opensuse leap +1 moreThe EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as...8.8 High
- google chrome, opensuse leap +1 moreThe AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google...6.5 Medium
- google chrome, opensuse leap +1 moreMultiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on...8.8 High
- google chrome, opensuse leap +1 moreMultiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in...8.8 High
- google chrome, fedoraproject fedora, opensuse leap +2 moreHeap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in...8.8 High
- google chrome, opensuse leap +1 moreextensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89...8.8 High
- google chrome, opensuse leap +1 moreGoogle Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not...6.5 Medium
- google chrome, opensuse leap +1 moreMultiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on...8.8 High
- google chrome, opensuse leap +1 moreThe Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on...8.8 High
- google chrome, opensuse leap +1 moreInteger overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in...8.8 High
- google chrome, opensuse leap +1 morePDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux...8.8 High
- google chrome, opensuse leap +1 moreWebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome...8.8 High
- google chrome, opensuse leap +1 moreThe extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0...8.8 High
- google chromeCross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89...6.1 Medium
- google chromeBlink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92...6.1 Medium
- netapp oncommand system managerNetApp OnCommand System Manager 8.3.x before 8.3.2P5 allows remote authenticated users to cause a...6.5 Medium
- ibm connectionsCross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5...5.4 Medium
- ibm connectionsCross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5...5.4 Medium
- ibm connectionsCross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5...5.4 Medium
- ibm connectionsCross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through...3.5 Low
- ibm connectionsCross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5...5.4 Medium
- ibm connectionsCross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5...5.4 Medium
- ibm connectionsCross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5...5.4 Medium
- Show moreLoading…