CVEs published in September 2016
605 vulnerabilities, 82 critical, 2 exploited.
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0,...9.8 Critical
- mozilla firefoxMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow...9.8 Critical
- mozilla firefoxThe mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote...6.5 Medium
libksbaMageiaUpdated libksba packages fix security vulnerabilityNo score- xenXen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor...8.2 High
- huawei ws331a router firmwareThe management interface of Huawei WS331a routers with software before WS331a-10 V100R001C01B112...7.5 High
- huawei ws331a router firmwareMultiple cross-site request forgery (CSRF) vulnerabilities in Huawei WS331a routers with software...6.1 Medium
- fortinet fortiwanCross-site scripting (XSS) vulnerability in Fortinet FortiWan (formerly AscernLink) before 4.2.5...6.1 Medium
- fortinet fortiwanThe linkreport/tmp/admin_global page in Fortinet FortiWan (formerly AscernLink) before 4.2.5...6.5 Medium
- fortinet fortiwanFortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to obtain...6.5 Medium
- fortinet fortiwanThe diagnosis_control.php page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows...6.5 Medium
- fortinet fortiwanFortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users with...8.8 High
- dentsply sirona cdr dicomDentsply Sirona (formerly Schick) CDR Dicom 5 and earlier has default passwords for the sa and...9.8 Critical
- hp loadrunner, performance center +1 moreHPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a...8.6 High
- hp performance centerHPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass...8.3 High
- emc rsa adaptive authentication on-premiseCross-site scripting (XSS) vulnerability in the Case Management application in EMC RSA Adaptive...5.4 Medium
- emc avamar serverAvamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233...6.5 Medium
- emc avamar serverAvamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233...7.8 High
- emc vnx1 oe firmware, vnx2 oe firmware, vnxe oe firmware +2 moreThe SMB service in EMC VNXe (VNXe3200 Operating Environment prior to 3.1.5.8711957 and VNXe3100...9.8 Critical
- emc avamar serverAvamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233...6.7 Medium
- emc avamar serverAvamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233...8.6 High
- emc avamar serverAvamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233...9.1 Critical
- ietf transport layer security, netapp clustered data ontap antivirus connector, data ontap edge +10 more +12 moreThe TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and...8.1 High
- qemu, opensuse leap, redhat openstack +1 more +3 moreMemory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when...6.0 Medium
- irssi, canonical ubuntu linux, debian linux +2 moreThe format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote...7.5 High
- irssi, canonical ubuntu linux, debian linux +2 moreThe unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when...7.5 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 moreThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...5.9 Medium
- libarchive, oracle linux, redhat enterprise linux desktop +7 more +9 moreThe sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non...7.5 High
- libtiff, oracle vm server +1 moreThe _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers...7.8 High
- unadf project unadf, debian linux +1 moreThe extractTree function in unADF allows remote attackers to execute arbitrary code via shell...8.8 High
- unadf project unadf, debian linux +1 moreStack-based buffer overflow in the extractTree function in unADF allows remote attackers to...9.8 Critical
- apache shiroImproper Access Control in Apache Shiro7.5 High
- libarchiveThe trad_enc_decrypt_update function in archive_read_support_format_zip.c in libarchive before 3...5.5 Medium
- aver eh6108h\+ firmwareAVer Information EH6108H+ devices with firmware X9.03.24.00.07l store passwords in a cleartext...7.5 High
- aver eh6108h\+ firmwareThe /setup URI on AVer Information EH6108H+ devices with firmware X9.03.24.00.07l allows remote...9.8 Critical
- aver eh6108h\+ firmwareAVer Information EH6108H+ devices with firmware X9.03.24.00.07l have hardcoded accounts, which...9.8 Critical
- cisco ios, ios xe, ios xr +1 more +3 moreThe server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE...7.5 High
- rockwellautomation rslogix 500 professional edition, rslogix 500 standard edition, rslogix 500 starter edition +2 more +4 moreBuffer overflow in Rockwell Automation RSLogix Micro Starter Lite, RSLogix Micro Developer,...8.6 High
- yokogawa stardom fcn\/fcjYokogawa STARDOM FCN/FCJ controller R1.01 through R4.01 does not require authentication for Logic...7.3 High
- trane tracer scABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file...7.5 High
- cisco webex meetings serverCisco WebEx Meetings Server 2.6 allows remote attackers to cause a denial of service (CPU...7.5 High
- trane tracer scThe web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive...5.3 Medium
- cisco fog directorCisco Fog Director 1.0(0) for IOx allows remote authenticated users to bypass intended access...6.5 Medium
- cisco iosCross-site scripting (XSS) vulnerability in the web framework in Cisco IOx Local Manager in IOS...6.1 Medium
- cisco iosThe Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set...5.9 Medium
- cisco unified computing systemUCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0...7.8 High
- apple iphone osPrinting UIKit in Apple iOS before 10 mishandles environment variables, which allows local users...3.3 Low
- apple iphone osMail in Apple iOS before 10 mishandles certificates, which makes it easier for man-in-the-middle...3.7 Low
- apple iphone osThe Keyboards component in Apple iOS before 10 does not properly use a cache for auto-correct...5.3 Medium
- apple iphone osThe Assets component in Apple iOS before 10 allows man-in-the-middle attackers to block software...5.9 Medium
- Show moreLoading…