CVEs published in September 2016
605 vulnerabilities, 82 critical, 2 exploited.
- apple iphone osApple iOS before 10, when Handoff for Messages is used, does not ensure that a Messages signin...2.9 Low
- apple watchos, iphone os +1 moreThe GeoServices component in Apple iOS before 10 and watchOS before 3 does not properly restrict...5.5 Medium
- apple xcodeotool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service ...7.8 High
- apple xcodeotool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service ...7.8 High
- apple iphone osThe Sandbox Profiles component in Apple iOS before 10 does not properly restrict access to...3.3 Low
- cisco ios xrCisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of...5.3 Medium
- emc vipr srmCross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote attackers to...6.1 Medium
- emc vipr srmCross-site request forgery (CSRF) vulnerability in EMC ViPR SRM before 3.7.2 allows remote...6.1 Medium
- emc vipr srmCross-site scripting (XSS) vulnerability in EMC ViPR SRM before 3.7.2 allows remote authenticated...7.6 High
- cloudfoundry php-buildpack, pivotal cloud foundry elastic runtime +1 moreCloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before...7.5 High
- pivotal operations managerPivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or...9.8 Critical
- pivotal software rabbitmqThe metrics-collection component in RabbitMQ for Pivotal Cloud Foundry (PCF) 1.6.x before 1.6.4...7.5 High
- pivotal cloud foundry elastic runtimeMultiple open redirect vulnerabilities in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6...7.4 High
- pivotal software cloud foundry elastic runtimeCross-site scripting (XSS) vulnerability in Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17...6.1 Medium
- pivotal software cloud foundry elastic runtimeCross-site scripting (XSS) vulnerability in Apps Manager in Pivotal Cloud Foundry (PCF) Elastic...6.1 Medium
- dell bsafeThe client in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.9 and 4.1.x before 4.1.5...7.5 High
- emc vipr srmEMC ViPR SRM before 3.7.2 does not restrict the number of password-authentication attempts, which...9.8 Critical
- pivotal software operations managerPivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or...9.8 Critical
- pivotal software cloud foundry elastic runtimePivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254...7.3 High
- pivotal software operations managerPivotal Cloud Foundry (PCF) Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie...9.8 Critical
- apache jackrabbit, debian linux +1 moreApache Jackrabbit Authentication Hijacking Vulnerability8.8 High
- apache zookeeperBuffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when...8.1 High
- php, suse linux enterprise module for web scripting, linux enterprise software development kit +2 more/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code....9.8 Critical
- nextcloud server, owncloud +1 moreCross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud...5.4 Medium
- emc documentum d2EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read...5.3 Medium
- cisco webex meetings serverCisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by...8.1 High
- adobe acrobat, acrobat reader dc, reader +1 more +3 moreUse-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat...9.8 Critical
- adobe acrobat, acrobat reader dc, reader +1 more +3 moreAdobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006...9.8 Critical
- cisco web security applianceCisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers...7.5 High
- cisco carrier routing systemCisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1...5.3 Medium
- otrs faqMultiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and...9.4 Critical
- phpThe php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11...7.5 High
- phpext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray...9.8 Critical
- phpext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not...7.5 High
- icu-project international components for unicodeStack-based buffer overflow in the Locale class in common/locid.cpp in International Components...9.8 Critical
- phpThe ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure...9.8 Critical
- phpUse-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before...9.8 Critical
- phpext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify...8.1 High
- phpext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures,...9.8 Critical
lcms2MageiaUpdated lcms2 packages fix security vulnerabilityNo score- dropbear ssh project sshThe dbclient in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via...8.8 High
- dropbear ssh project sshThe dropbearconvert command in Dropbear SSH before 2016.74 allows attackers to execute arbitrary...9.8 Critical
- dropbear ssh project sshFormat string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute...9.8 Critical
- mediawikiMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows remote...6.5 Medium
- mediawikiMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 does not generate head...7.5 High
- mediawikiCross-site scripting (XSS) vulnerability in the Parser::replaceInternalLinks2 method in MediaWiki...6.1 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the CSS user subpage preview feature in MediaWiki...6.1 Medium
- mediawikiMediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when ...7.5 High
- mediawikiApiParse in MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1 allows...7.5 High
- openvpnOpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain...5.9 Medium
- Show moreLoading…