CVEs published in September 2016
605 vulnerabilities, 82 critical, 2 exploited.
- apple tvos, watchos, xmlsoft libxml2 +5 more +7 moreNokogiri does not forbid namespace nodes in XPointer ranges9.8 Critical
- dexis imaging suiteDEXIS Imaging Suite 10 has a hardcoded password for the sa account, which allows remote attackers...9.8 Critical
- opendental** DISPUTED ** Open Dental 16.1 and earlier has a hardcoded MySQL root password, which allows...9.8 Critical
- moxa active opc serverUnquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local...8.8 High
- iodata hvl-a2.0 firmware, hvl-a3.0 firmware, hvl-a4.0 firmware +7 more +9 moreCross-site request forgery (CSRF) vulnerability on I-O DATA DEVICE HVL-A2.0, HVL-A3.0, HVL-A4.0,...8.8 High
- emc rsa identity management and governance, rsa via lifecycle and governance +1 moreEMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA...4.3 Medium
- cisco application policy infrastructure controllerThe installation procedure on Cisco Application Policy Infrastructure Controller (APIC) devices 1...7.8 High
- cisco iosThe Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when...6.5 Medium
- cisco firesight system softwareCisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons...7.5 High
- cisco iosThe Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when...6.5 Medium
- cisco iosThe Data in Motion (DMo) component in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is...7.5 High
- cisco prime homeCisco Prime Home 5.2.0 allows remote attackers to read arbitrary files via an XML document...7.5 High
- libdwarf project libdwarfInteger overflow in the dwarf_die_deliv.c in libdwarf 20160613 allows remote attackers to cause a...5.5 Medium
- libdwarf project libdwarfThe read_line_table_program function in dwarf_line_table_reader_common.c in libdwarf before...6.5 Medium
opensslUbuntuopenssl regressionNo score- gnu wgetRace condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a...8.1 High
opensslDebianopenssl - regression updateNo score- imagemagickBuffer overflow in the WriteGROUP4Image function in coders/tiff.c in ImageMagick before 6.9.5-8...7.8 High
- imagemagickBuffer overflow in the sixel_decode function in coders/sixel.c in ImageMagick before 6.9.5-8...7.8 High
- imagemagickBuffer overflow in the WritePDBImage function in coders/pdb.c in ImageMagick before 6.9.5-8...7.8 High
- imagemagickBuffer overflow in the WriteMAPImage function in coders/map.c in ImageMagick before 6.9.5-8...7.8 High
- imagemagickThe WriteTIFFImage function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote...5.5 Medium
- cisco iosiox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local...7.8 High
- cisco email security appliance firmwareCisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0...9.8 Critical
- cisco cloud services platform 2100Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote attackers to execute arbitrary code...9.8 Critical
- cisco cloud services platform 2100The web-based GUI in Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote authenticated...7.2 High
- cisco ios, ios xe +1 moreThe Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE,...6.5 Medium
- huawei ac6003 firmware, ac6005 firmware, ac6605 firmware +1 more +3 moreHuawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200...6.5 Medium
- huawei usg2100 firmware, usg2200 firmware, usg5100 firmware +1 more +3 moreBuffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei...7.5 High
- redhat quickstart cloud installerThe kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces use of MD5 passwords on...8.4 High
- redhat quickstart cloud installerRed Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers,...8.4 High
- lenovo biosThe BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s...7.8 High
- wordpressDirectory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class...6.3 Medium
- wordpressCross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes...4.8 Medium
- openssl, nodejs node.js, novell suse linux enterprise module for web scripting +2 moreMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...7.5 High
- mozilla firefoxMozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on...7.4 High
- mozilla firefoxMozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a...8.8 High
- mozilla firefoxMozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which...6.5 Medium
- mozilla firefoxUse-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox...9.8 Critical
- mozilla firefoxUse-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap...9.8 Critical
- mozilla firefoxMozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full...4.3 Medium
- mozilla firefoxHeap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before...8.8 High
- mozilla firefoxUse-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0...9.8 Critical
- mozilla firefoxUse-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList...9.8 Critical
- mozilla firefoxBuffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in...8.8 High
- mozilla firefoxUse-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox...9.8 Critical
- mozilla firefoxThe mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility...8.8 High
- mozilla firefoxThe nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and...8.8 High
- mozilla firefoxThe PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote...6.5 Medium
- mozilla firefoxHeap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in...9.8 Critical
- Show moreLoading…