CVEs published in September 2016
605 vulnerabilities, 82 critical, 2 exploited.
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 11 and Microsoft Edge mishandle cross-origin requests, which allows...2.4 Low
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary...7.5 High
- microsoft officeThe Visual Basic macros in Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2016 export a...6.5 Medium
- microsoft exchange serverMicrosoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013...4.3 Medium
- microsoft officeThe Click-to-Run (C2R) implementation in Microsoft Office 2013 SP1 and 2016 allows local users to...3.3 Low
- haxx libcurl, fedoraproject fedora +1 moreMultiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and ...9.8 Critical
- adodb project adodb, fedoraproject fedora +1 moreADOdb Library SQL Injection9.8 Critical
- adodbADOdb Cross-site scripting vulnerability in old test script6.1 Medium
- cisco ace 4700 series application control engine appliance, ace 4700 series application control engine appliance a1, ace 4700 series application control engine appliance a3 +6 more +8 moreCisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control...7.5 High
- cisco iosThe PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows...5.3 Medium
- cisco firesight system softwareCisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when...5.3 Medium
- cisco firesight system softwareCross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower...5.4 Medium
- cisco firesight system softwareSession fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System...9.1 Critical
- cisco hosted collaboration mediation fulfillmentDirectory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation...7.5 High
- cisco hosted collaboration mediation fulfillmentDirectory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation...4.3 Medium
- ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0...6.5 Medium
- ibm tivoli storage manager for space managementIBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x...5.5 Medium
- aki-null yorufukurouYoruFukurou (NightOwl) before 2.85 relies on support for emoji skin-tone modifiers even though...6.5 Medium
- ibm rational collaborative lifecycle management, rational team concert +1 moreCross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0...5.4 Medium
- phpThe imagetruecolortopalette function in ext/gd/gd.c in PHP before 5.6.25 and 7.x before 7.0.10...9.8 Critical
- cisco wireless lan controller software, wireless lan controller software 6.0, wireless lan controller software 7.0 +3 more +5 moreCisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0,...5.3 Medium
- cisco spa300 firmware, spa500 firmware +1 moreThe HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a...7.5 High
- mariadb, oracle mysql, percona server +9 more +11 moreOracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5...9.8 Critical
- google androidOMXCodec.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5...5.5 Medium
- google androidTelephony in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0...5.5 Medium
- google androidThe WifiEnterpriseConfig class in net/wifi/WifiEnterpriseConfig.java in Wi-Fi in Android 4.x...5.5 Medium
- google androidAOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before...5.5 Medium
- google androidInteger overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in...5.5 Medium
- google androidThe Qualcomm DMA component in Android before 2016-09-05 on Nexus 6 devices allows attackers to...5.5 Medium
- google androidThe wcdcal_hwdep_ioctl_shared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound...5.5 Medium
- google androidThe Qualcomm SPMI driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows...5.5 Medium
- google androidThe Java Debug Wire Protocol (JDWP) implementation in adb/sockets.cpp in Android 4.x before 4.4.4...7.0 High
- google androidAndroid 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to...6.8 Medium
- google androidinternal/telephony/SMSDispatcher.java in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x...2.1 Low
- google androidproviders/settings/SettingsProvider.java in Android 7.0 before 2016-09-01 does not properly...7.8 High
- google androidsystemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before...6.8 Medium
- google androiddebuggerd/debuggerd.cpp in Debuggerd in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x...7.8 High
- google androidserver/notification/NotificationManagerService.java in the Notification Manager Service in...5.5 Medium
- google androidinternal/telephony/SMSDispatcher.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0...5.5 Medium
- google androidThe decoder_peek_si_internal function in vp9/vp9_dx_iface.c in libvpx in mediaserver in Android 4...5.5 Medium
- google androidMultiple buffer overflows in rtsp/ASessionDescription.cpp in libstagefright in mediaserver in...5.5 Medium
- google androidarm-wt-22k/lib_src/eas_mdls.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1...5.5 Medium
- google androiddecoder/ih264d_api.c in mediaserver in Android 6.x before 2016-09-01 mishandles the case of...5.5 Medium
- google androidUnspecified vulnerability in Android before 2016-09-01 has unknown impact and attack vectors.9.8 Critical
- google androidproviders/settings/SettingsProvider.java in Android 6.x before 2016-09-01 and 7.0 before 2016-09...6.8 Medium
- google androidserver/wm/WindowManagerService.java in Android 6.x before 2016-09-01 does not enforce the...6.8 Medium
- google androidCORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-09-05 on Nexus...7.8 High
- google androidThe NVIDIA kernel in Android before 2016-09-05 on Nexus 9 devices allows attackers to gain...7.8 High
- google androidBuffer overflow in codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x...7.8 High
- google androidMultiple buffer overflows in codecs/mp3dec/SoftMP3.cpp in libstagefright in mediaserver in...7.8 High
- Show moreLoading…