19 April 2016

14 results · Feed

• Unscored —
  CVE-2015-7511

  Libgcrypt before 1.6.5 does not properly perform elliptic-point curve multiplication during decryption, which makes it …

  libgcrypt20 libgcrypt11 Debian Ubuntu
  Apr 19, 2016
• Medium 6.2
  CVE-2015-1776

  Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop

  Apache Hadoop 2.6.x encrypts intermediate data generated by a MapReduce job and stores it along with the encryption key in a credentials file on disk when the Intermediate data encryption feature is enabled, which allows local users to obtain sensitive inform…

  org.apache.hadoop:hadoop-common Maven
  Apr 19, 2016
• Unscored —
  CVE-2015-8776

  The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause…

  glibc eglibc Debian Ubuntu
  Apr 19, 2016
• Unscored —
  CVE-2015-8779

  Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows contex…

  glibc eglibc Debian Ubuntu
  Apr 19, 2016
• Unscored —
  CVE-2015-8778

  Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a de…

  glibc eglibc Debian Ubuntu
  Apr 19, 2016
• Unscored —
  CVE-2014-9765

  Buffer overflow in the main_get_appheader function in xdelta3-main.h in xdelta3 before 3.0.9 allows remote attackers to…

  xdelta3 xdelta3 Debian Ubuntu
  Apr 19, 2016
• Unscored —
  CVE-2014-9761

  Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent att…

  glibc eglibc Debian Ubuntu
  Apr 19, 2016
• Unscored —
  CVE-2016-0741

  slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote atta…

  389-ds-base Debian
  Apr 19, 2016
• Unscored —
  CVE-2016-2390 EPSS 26%

  The FwdState::connectedToPeer method in FwdState.cc in Squid before 3.5.14 and 4.0.x before 4.0.6 does not properly han…

  squid Debian
  Apr 19, 2016
• Unscored —
  CVE-2015-5479

  The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a deni…

  libav Ubuntu
  Apr 19, 2016
• Unscored —
  CVE-2016-4040

  SQL injection vulnerability in the Workflow Screen in dotCMS before 3.3.2 allows remote administrators to execute arbit…

  Apr 19, 2016
• Unscored —
  CVE-2016-3960

  Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host…

  xen xen Debian Ubuntu
  Apr 19, 2016
• Unscored —
  CVE-2016-3186

  Buffer overflow in the readextension function in gif2tiff.c in LibTIFF 4.0.6 allows remote attackers to cause a denial …

  tiff tiff tiff Debian Ubuntu Alpine
  Apr 19, 2016
• Unscored —
  CVE-2016-3688

  SQL injection vulnerability in dotCMS before 3.5 allows remote administrators to execute arbitrary SQL commands via the…

  Apr 19, 2016