25 April 2016

29 results · Feed

• High 7.8
  CVE-2016-1202

  High severity vulnerability that affects electron

  Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line.

  electron npm
  Apr 25, 2016
• Unscored —
  CVE-2016-1185

  The Cybozu kintone mobile application 1.x before 1.0.6 for Android allows attackers to discover an authentication token…

  Apr 25, 2016
• Unscored —
  CVE-2016-2346

  Allround Automations PL/SQL Developer 11 before 11.0.6 relies on unverified HTTP data for updates, which allows man-in-…

  Apr 25, 2016
• Unscored —
  CVE-2016-2331

  The web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 has a …

  Apr 25, 2016
• Unscored —
  CVE-2016-2333

  SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 use the same hardcoded encr…

  Apr 25, 2016
• Unscored —
  CVE-2016-2332

  flu.cgi in the web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 0…

  Apr 25, 2016
• Unscored —
  CVE-2015-8852

  Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP …

  varnish varnish Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4053 EPSS 14%

  Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack layout information via cr…

  squid3 Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4051 EPSS 18%

  Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to c…

  squid squid3 Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4052 EPSS 13%

  Multiple stack-based buffer overflows in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote HTTP servers to caus…

  squid3 Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4054 EPSS 78%

  Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via c…

  squid3 Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4083

  epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 does not ensure that data is ava…

  wireshark wireshark Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4078

  The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element …

  wireshark wireshark Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4077

  epan/reassemble.c in TShark in Wireshark 2.0.x before 2.0.3 relies on incorrect special-case handling of truncated Tvb …

  wireshark wireshark Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4084

  Integer signedness error in epan/dissectors/packet-mswsp.c in the MS-WSP dissector in Wireshark 2.0.x before 2.0.3 allo…

  wireshark wireshark Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4076

  epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 2.0.x before 2.0.3 does not properly initialize me…

  wireshark wireshark Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4006

  epan/proto.c in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not limit the protocol-tree depth, which al…

  wireshark wireshark Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4082

  epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 u…

  wireshark wireshark Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4081

  epan/dissectors/packet-iax2.c in the IAX2 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses an i…

  wireshark wireshark Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4085

  Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.…

  wireshark wireshark Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4079

  epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not …

  wireshark wireshark Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-4080

  epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 misparses…

  wireshark wireshark Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2015-5370 EPSS 19%

  Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC lay…

  samba samba Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-2115 EPSS 10%

  Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERP…

  samba samba Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-2110

  The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.…

  samba samba samba Debian Ubuntu Azure Linux
  Apr 25, 2016
• Unscored —
  CVE-2016-2112

  The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not…

  samba samba Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-2113

  Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers…

  samba samba Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-2114

  The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recogn…

  samba samba Debian Ubuntu
  Apr 25, 2016
• Unscored —
  CVE-2016-2111

  The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain cont…

  samba samba Debian Ubuntu
  Apr 25, 2016