CVEs published in October 2016
809 vulnerabilities, 161 critical, 5 exploited.
- openssl, debian linux, fujitsu m10-1 firmware +42 more +44 moreA denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in...7.5 High
- ibm websphere application serverThe Administrative Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x...4.3 Medium
- ibm security guardium database activity monitorIBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and...7.8 High
- ibm rational collaborative lifecycle management, rational quality manager +1 moreIBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before...8.8 High
- ibm security guardiumIBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before...7.8 High
- ibm security guardiumCross-site scripting (XSS) vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9...6.1 Medium
- ibm security guardiumIBM Security Guardium 10.x through 10.1 before p100 allows remote authenticated users to obtain...4.3 Medium
- ibm security guardium database activity monitorIBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and...8.8 High
- ibm security guardium database activity monitorIBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and...3.7 Low
- ibm security guardium database activity monitorIBM Security Guardium Database Activity Monitor 9.x through 9.5 before p700 and 10.x through 10.0...8.8 High
- adobe acrobat, acrobat reader dc, reader +1 more +3 moreAdobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006...9.8 Critical
- adobe acrobat, acrobat reader dc, reader +1 more +3 moreAdobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006...9.8 Critical
- adobe acrobat, acrobat reader dc, reader +1 more +3 moreAdobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006...9.8 Critical
- ibm security guardium database activity monitorIBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and...8.8 High
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 more389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...7.5 High
- huge-it catalogSQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla7.2 High
- huge-it slideshowXSS & SQLi in HugeIT slideshow v1.0.47.2 High
- huge-it slideshowXSS & SQLi in HugeIT slideshow v1.0.47.2 High
- huge-it portfolio gallery managerHuge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS7.2 High
- huge-it portfolio gallery managerHuge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS7.2 High
- qemuThe virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local...4.4 Medium
- imagemagick, debian linux +1 moreThe AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows...8.8 High
- openslpBuffer overflow in the SLPFoldWhiteSpace function in common/slp_compare.c in OpenSLP 2.0 allows...9.8 Critical
- isc bindISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a...7.5 High
- google chromeGoogle Chrome prior to 54.0 for iOS had insufficient validation of URLs for windows open by DOM,...4.3 Medium
- google chromeBookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840...6.1 Medium
- google chromeGoogle Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android...6.3 Medium
- google chromePDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for...8.8 High
- google chromeA heap use after free in PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and...8.8 High
dbus-1SUSE,dbus-1-x11SUSE +1 moreSecurity update for dbus-1No score- wolfssl, debian linux, mariadb +1 more +3 moreThe C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL)...5.5 Medium
- oracle mysql, debian linux, mariadb +2 moreUnspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and...4.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreRace condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to...7.0 High
- libdwarf project libdwarfThe dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause...7.5 High
- libdwarf project libdwarfThe get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial...7.5 High
- libdwarf project libdwarfThe dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows...7.5 High
- libdwarf project libdwarfThe dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers...7.5 High
- libdwarf project libdwarfdwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of...6.5 Medium
- libdwarf project libdwarfThe get_abbrev_array_info function in libdwarf-20151114 allows remote attackers to cause a denial...6.5 Medium
- libdwarf project libdwarfdwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV).6.5 Medium
asteriskMageiaUpdated asterisk packages fixes security vulnerabilityNo score- ffmpegThe read_gab2_sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers...5.5 Medium
- ffmpegThe avi_read_seek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers...5.5 Medium
- ffmpegThe ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote...5.5 Medium
- ffmpegThe avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to...5.5 Medium
- ffmpegThe cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to...7.8 High
- torproject torTor before 0.2.8.9 and 0.2.9.x before 0.2.9.4-alpha had internal functions that were entitled to...7.5 High
- gnu guile, fedoraproject fedora +1 moreThe REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via...9.8 Critical
- gnu guile, fedoraproject fedora +1 moreThe mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time...5.3 Medium
- quagga, debian linux +1 moreIt was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based...9.8 Critical
- Show moreLoading…