Archive
April 2016
Vulnerabilities first published in this month (UTC), newest first.
653 results · Feed
-
Unscored —CVE-2016-2115 EPSS 10%
Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERP…
-
Unscored —
The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.…
-
Unscored —
The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not…
-
Unscored —
Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers…
-
Unscored —
The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recogn…
-
Unscored —
The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain cont…
-
Unscored —
Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x an…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe Analytics AppMeasurement for Flash Library before 4.0.1, when debugTr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Management Console in BlackBerry Enterprise Server (BES) 12 before 12.4…
-
Unscored —CVE-2016-2203 Public exploit
The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discov…
-
Unscored —
The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to obtain…
-
Unscored —
Foxit Reader and PhantomPDF before 7.3.4 on Windows improperly report format errors recursively, which allows remote at…
-
Unscored —
Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to cause a …
-
Unscored —
Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute …
-
Unscored —
Use-after-free vulnerability in the XFA forms handling functionality in Foxit Reader and PhantomPDF before 7.3.4 on Win…
-
Unscored —
Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute …
-
Unscored —
The ConvertToPDF plugin in Foxit Reader and PhantomPDF before 7.3.4 on Windows, when the gflags app is enabled, allows …
-
Unscored —
Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application cr…
-
Unscored —
Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remo…
-
Unscored —CVE-2016-1595 Public exploit
LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows re…
-
Unscored —CVE-2016-1596 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenti…
-
Unscored —CVE-2016-1594 Public exploit
Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a reques…
-
Unscored —
Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject ar…
-
Unscored —
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to execute arbitrary SQL …
-
Unscored —
Ecava IntegraXor before 5.0 build 4522 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie…
-
Unscored —
The Bluetooth functionality in Lemur Vehicle Monitors BlueDriver before 2016-04-07 supports unrestricted pairing withou…
-
Unscored —
CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP…
-
Unscored —
SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbi…
-
Unscored —
The HMI web server in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive cleartext info…
-
Unscored —
Ecava IntegraXor before 5.0 build 4522 allows remote attackers to bypass authentication and access unspecified web page…
-
Unscored —
Ecava IntegraXor before 5.0 build 4522 allows remote attackers to obtain sensitive information by reading detailed erro…
-
Unscored —
The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that th…
-
Unscored —
The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers t…
-
Unscored —
Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of se…
-
Unscored —
ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows re…
-
Unscored —
The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service vi…