CVEs published in September 2016
605 vulnerabilities, 82 critical, 2 exploited.
- hp integrated lights-out 3 firmware, integrated lights-out 4 firmware, integrated lights-out 4 mrca firmware +2 moreMultiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 (aka iLO 3) firmware before 1...9.8 Critical
- file roller project roller, canonical ubuntu linux +1 moreThe _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows...7.5 High
- qemu, debian linux +1 moreThe pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows...4.4 Medium
- qemu, debian linux +1 morehw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a...4.4 Medium
- inspircd, debian linux +1 moreThe m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL...5.9 Medium
- xenBuffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests...4.1 Medium
- xenThe get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS...8.2 High
- huawei honor 6 firmwareThe WiFi driver in Huawei Honor 6 smartphones with software H60-L01 before H60-L01C00B850, H60...7.0 High
- freeipa, fedoraproject fedora, oracle linux +2 moreThe cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which...6.5 Medium
- huawei umaHuawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to...9.8 Critical
- huawei umaHuawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to...9.8 Critical
- huawei umaHuawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote...6.5 Medium
- huawei umaHuawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to...7.5 High
- huawei rh1288 v3 server firmware, rh2288 v3 server firmware, rh2288h v3 server firmware +4 more +6 moreThe Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software...5.5 Medium
- huawei rh1288 v3 server firmware, rh2288 v3 server firmware, rh2288h v3 server firmware +4 more +6 moreThe Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software...7.5 High
- huawei e9000 chassisXML external entity (XXE) vulnerability in the Hyper Management Module (HMM) in Huawei E9000 rack...6.6 Medium
- f5 big-ip analytics, big-ip edge gateway, big-ip access policy manager +11 more +13 moreThe RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through...7.5 High
- huawei fusionaccessCRLF injection vulnerability in Huawei FusionAccess before V100R006C00 allows remote attackers to...6.1 Medium
- huawei ch121 v3 server firmware, ch140 v3 server firmware, ch220 v3 server firmware +6 more +8 moreHuawei X6800 and XH620 V3 servers with software before V100R003C00SPC606, RH1288 V3 servers with...7.5 High
- huawei rh1288 v3 server firmware, rh2288 v3 server firmware, rh2288h v3 server firmware +3 more +5 moreHuawei XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610, RH1288 V3...9.8 Critical
- huawei firmware s12700, huawei s7700 firmware, s9300 firmware +1 more +3 moreHuawei S7700, S9300, S9700, and S12700 devices with software before V200R008C00SPC500 use random...5.3 Medium
- rubyonrails railsActiveRecord in Ruby on Rails allows database-query bypass7.5 High
- huawei honor 4c firmwareThe Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564...7.0 High
- huawei honor 4c firmwareThe Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564...7.0 High
- huawei honor 4c firmwareThe Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564...7.0 High
- huawei honor 4c firmwareThe Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564...7.0 High
- huawei honor 4c firmwareThe Camera driver in Huawei Honor 4C smartphones with software CHM-UL00C00 before CHM-UL00C00B564...7.0 High
- redhat jboss operations networkThe web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly...8.8 High
- f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +19 more +21 moreF5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x...9.8 Critical
- redhat jboss bpm suiteThe dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not properly handle CSRF tokens generated...8.8 High
- redhat jboss bpm suiteMultiple cross-site scripting (XSS) vulnerabilities in the admin pages in dashbuilder in Red Hat...6.1 Medium
- redhat resteasyDenial of service in JBoss resteasy7.5 High
- redhat resteasyExposure of Sensitive Information to an Unauthorized Actor in RESTEasy6.5 Medium
- redhat jboss bpm suiteRed Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for...5.3 Medium
- haxx libcurl, opensuse leap +1 morecurl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at...7.5 High
hawkSUSESecurity update for hawkNo scorerust-cryptocrates.iorust-crypto is unmaintained; switch to a modern alternativeNo score- opera browser, apple safari, google chrome +3 more +5 moreThe HTTP/2 protocol does not consider the role of the TCP congestion window in providing...5.3 Medium
- apple safari, google chrome, microsoft edge +3 more +5 moreThe HTTPS protocol does not consider the role of the TCP congestion window in providing...5.3 Medium
- charybdis project charybdis, debian linux +1 moreThe m_authenticate function in modules/m_sasl.c in Charybdis before 3.5.3 allows remote attackers...8.1 High
- siemens en100 ethernet module firmwareA vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module :...8.8 High
- siemens en100 ethernet module firmwareA vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module :...7.5 High
- siemens en100 ethernet module firmwareA vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module :...9.8 Critical
- libtom libtomcrypt, trustedfirmware op-tee +1 morelibtomcrypt - security update7.5 High
- jcraft jschImproper Limitation of a Pathname to a Restricted Directory in JCraft JSch5.9 Medium
- libtiffThe TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_read.c in libtiff before 4.0.7 allows...9.1 Critical
- libtiff, oracle vm server +1 moreHeap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0...7.8 High
- libtiff, oracle vm server +1 moreMultiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba...7.8 High
- libtiff, opensuse +1 moreThe rgb2ycbcr tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of...7.5 High
- cisco media origination system suiteMedia Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP)...8.1 High
- Show moreLoading…