CVEs published in September 2016
605 vulnerabilities, 82 critical, 2 exploited.
- google androidomx/SimpleSoftOMXComponent.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0...7.8 High
- google androidThe Broadcom Wi-Fi driver in Android before 2016-09-05 on Nexus 5, Nexus 6, Nexus 6P, Nexus 9,...7.8 High
- google androidThe Qualcomm power driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows...7.8 High
- google androidThe Qualcomm IPA driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers...7.8 High
- google androidThe Qualcomm sound driver in Android before 2016-09-05 on Nexus 5X, 6, and 6P devices allows...7.8 High
- google androidThe Synaptics touchscreen driver in Android before 2016-09-05 on Nexus 5X and 9 devices allows...7.8 High
- google androidThe Qualcomm radio interface layer in Android before 2016-09-05 on Nexus 5, Nexus 5X, Nexus 6,...7.8 High
- google androidMultiple stack-based buffer overflows in the AVCC reassembly implementation in Utils.cpp in...7.8 High
- google androidmedia/ExifInterface.java in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x...7.8 High
- google androidLibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09...7.8 High
- google androidThe Qualcomm camera driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows...7.8 High
- google androidBuffer overflow in drivers/soc/qcom/subsystem_restart.c in the Qualcomm subsystem driver in...7.8 High
- google chromeSkPath.cpp in Skia, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before...8.8 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +6 more +8 moreInteger overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers...7.8 High
- phpext/curl/interface.c in PHP 7.x before 7.0.10 does not work around a libcurl integer overflow,...9.8 Critical
- phpZend/zend_alloc.c in PHP 7.x before 7.0.10, when open_basedir is enabled, mishandles huge realloc...8.1 High
- phpext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a...7.5 High
- phpext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a...7.5 High
- phpThe php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10...7.5 High
- phpThe php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10...9.8 Critical
- phpThe exif_process_IFD_in_TIFF function in ext/exif/exif.c in PHP before 5.6.25 and 7.x before 7.0...5.3 Medium
- phpThe imagegammacorrect function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10 does not...9.8 Critical
- phpext/session/session.c in PHP before 5.6.25 and 7.x before 7.0.10 skips invalid session names in a...7.5 High
- phpext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain...9.8 Critical
- uclouvain openjpeg, debian linux +1 moreUse-after-free vulnerability in the opj_j2k_write_mco function in j2k.c in OpenJPEG before 2.1.1...9.8 Critical
libusbcrates.iolibusb is unmaintained; use rusb insteadNo score- mod nss project nssThe NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote...9.8 Critical
- libarchive, oracle linux, redhat enterprise linux desktop +6 more +8 morelibarchive before 3.2.0 does not limit the number of recursive decompressions, which allows...5.5 Medium
- powerdns authoritative server, opensuse leap, opensuse +2 morePowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause...6.8 Medium
- powerdns authoritativePowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a . (dot) inside...7.5 High
- powerdns authoritativePowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial...7.5 High
- libarchivebsdcpio in libarchive before 3.2.0 allows remote attackers to cause a denial of service (invalid...5.5 Medium
- drupalDrupal Views can allow unauthorized users to see Statistics information5.3 Medium
- fortinet fortiswitchFortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D...9.8 Critical
- juniper junosPKId in Juniper Junos OS before 12.1X44-D52, 12.1X46 before 12.1X46-D37, 12.1X47 before 12.1X47...6.5 Medium
- juniper junosJ-Web in Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3...9.8 Critical
- juniper junosJuniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D40, 12.3X48 before 12.3X48-D30, 13.3...5.9 Medium
- juniper junosJuniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured...6.5 Medium
- juniper junosJuniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3X48 before 12...7.5 High
- wireshark, debian linux +1 moreepan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6...5.9 Medium
- wireshark, debian linux +1 moreStack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000...5.9 Medium
- wireshark, debian linux +1 moreepan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not...5.9 Medium
- wireshark, debian linux +1 moreepan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x...5.9 Medium
- wireshark, debian linux +1 moreepan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf...5.9 Medium
- wiresharkepan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6...5.9 Medium
- qemu, debian linux, opensuse leap +2 moreThe vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local...4.4 Medium
- xenUse-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS...6.7 Medium
- hp xp7 command viewHPE XP7 Command View Advanced Edition (CVAE) Suite 6.x through 8.x before 8.4.1-02, when...4.5 Medium
- hp operations managerCross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9...5.4 Medium
- hp integrated lights-out 3 firmwareThe TLS implementation in HPE Integrated Lights-Out 3 (aka iLO3) firmware before 1.88 does not...3.7 Low
- Show moreLoading…