8 April 2016

31 results · Feed

• Unscored —
  CVE-2015-8841

  Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to e…

  Apr 8, 2016
• Unscored —
  CVE-2015-8108

  The management interface in LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d…

  Apr 8, 2016
• Unscored —
  CVE-2015-8833

  Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pi…

  pidgin-otr Debian
  Apr 8, 2016
• Unscored —
  CVE-2015-5158

  Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest …

  qemu Debian
  Apr 8, 2016
• Unscored —
  CVE-2016-1568

  Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS user…

  qemu qemu Debian Ubuntu
  Apr 8, 2016
• Unscored —
  CVE-2016-1885 Public exploit

  Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1…

  Apr 8, 2016
• Unscored —
  CVE-2016-3985

  The Terminal Services Remote Desktop Protocol (RDP) client session restrictions feature in Pulse Connect Secure (aka PC…

  Apr 8, 2016
• Unscored —
  CVE-2016-3987 Public exploit EPSS 21%

  The HTTP server in Trend Micro Password Manager allows remote web servers to execute arbitrary commands via the url par…

  Apr 8, 2016
• Unscored —
  CVE-2016-3986 Public exploit

  Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via …

  Apr 8, 2016
• Unscored —
  CVE-2016-2857

  The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service …

  qemu qemu Debian Ubuntu
  Apr 8, 2016
• Unscored —
  CVE-2015-5229

  The calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not properly initialize me…

  Apr 8, 2016
• Unscored —
  CVE-2015-5969

  The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before …

  Apr 8, 2016
• Unscored —
  CVE-2016-1375

  Cross-site scripting (XSS) vulnerability in Cisco IP Interoperability and Collaboration System 4.10(1) allows remote at…

  Apr 8, 2016
• Unscored —
  CVE-2016-1180

  Cross-site scripting (XSS) vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x a…

  Apr 8, 2016
• Unscored —
  CVE-2016-3984 Public exploit

  The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before 1.1.0.161, Agent (MA) 5.x before 5.0…

  Apr 8, 2016
• Unscored —
  CVE-2016-3983

  McAfee Advanced Threat Defense (ATD) before 3.4.8.178 might allow remote attackers to bypass malware detection by lever…

  Apr 8, 2016
• Unscored —
  CVE-2016-3963 Public exploit

  Siemens SCALANCE S613 allows remote attackers to cause a denial of service (web-server outage) via traffic to TCP port …

  Apr 8, 2016
• Low 3.1
  CVE-2016-2513

  Django User Enumeration Vulnerability

  The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.

  python-django django python-django Debian Ubuntu PyPI
  Apr 8, 2016
• Unscored —
  CVE-2016-2381

  Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate …

  perl perl Debian Ubuntu
  Apr 8, 2016
• High 7.4
  CVE-2016-2512

  Django XSS Vulnerability

  The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cross-site scripting (XSS) attacks via a URL containing basic …

  python-django django python-django Debian Ubuntu PyPI
  Apr 8, 2016
• Unscored —
  CVE-2015-6541 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in the Mail interface in Zimbra Collaboration Server (ZCS) b…

  Apr 8, 2016
• Unscored —
  CVE-2016-3980

  The Java Startup Framework (aka jstart) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of ser…

  Apr 8, 2016
• Unscored —
  CVE-2016-3979

  Internet Communication Manager (aka ICMAN or ICM) in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a den…

  Apr 8, 2016
• Unscored —
  CVE-2016-3154

  The encoder_contexte_ajax function in ecrire/inc/filtres.php in SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x …

  spip spip Debian Ubuntu
  Apr 8, 2016
• Unscored —
  CVE-2016-3188

  The _prepopulate_request_walk function in the Prepopulate module 7.x-2.x before 7.x-2.1 for Drupal allows remote attack…

  Apr 8, 2016
• Unscored —
  CVE-2016-3978 Scanner template

  The Web User Interface (WebUI) in FortiOS 5.0.x before 5.0.13, 5.2.x before 5.2.3, and 5.4.x before 5.4.0 allows remote…

  Apr 8, 2016
• Unscored —
  CVE-2016-3187

  The Prepopulate module 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to modify the REQUEST superglobal arra…

  Apr 8, 2016
• Unscored —
  CVE-2016-3153

  SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP co…

  spip spip Debian Ubuntu
  Apr 8, 2016
• Unscored —
  CVE-2016-2315 EPSS 17%

  revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary …

  git git Debian Ubuntu
  Apr 8, 2016
• Unscored —
  CVE-2016-2324 EPSS 18%

  Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) m…

  git git Debian Ubuntu
  Apr 8, 2016
• Unscored —
  CVE-2015-8840

  The XML Data Archiving Service (XML DAS) in SAP NetWeaver AS Java does not check authorization, which allows remote aut…

  Apr 8, 2016