Skip to content
OpenAdvisories

Archive

April 2016

Vulnerabilities first published in this month (UTC), newest first.

← March 2016 2016 / April May 2016 →
  1. 16
  2. 2 
  3. 3 
  4. 46
  5. 56
  6. 622
  7. 736
  8. 831
  9. 923
  10. 10 
  11. 1140
  12. 1275
  13. 1354
  14. 1421
  15. 1519
  16. 162
  17. 17 
  18. 1855
  19. 1914
  20. 2010
  21. 21118
  22. 2229
  23. 23 
  24. 24 
  25. 2529
  26. 265
  27. 2728
  28. 285
  29. 29 
  30. 3019
All Critical High Medium Low Exploited only Public exploit

653 results · Feed

  • Unscored —
    CVE-2016-0842

    The H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management Control Operation (MM…

    android Ubuntu
  • Unscored —
    CVE-2016-0850

    The PORCHE_PAIRING_CONFLICT feature in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, a…

    android Ubuntu
  • Unscored —
    CVE-2016-0844

    The Qualcomm RF driver in Android 6.x before 2016-04-01 does not properly restrict access to socket ioctl calls, which …

  • Unscored —
    CVE-2016-0848

    Race condition in Download Manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before …

  • Unscored —
    CVE-2016-0847

    The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to …

    android Ubuntu
  • Unscored —
    CVE-2016-0837

    MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1…

    android Ubuntu
  • Unscored —
    CVE-2016-0835

    decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary …

    android Ubuntu
  • Unscored —
    CVE-2016-0843

    The Qualcomm ARM processor performance-event manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.…

    android Ubuntu
  • Unscored —
    CVE-2016-0846 Public exploit

    libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5…

    android Ubuntu
  • Unscored —
    CVE-2016-0840

    Multiple stack-based buffer underflows in decoder/ih264d_parse_cavlc.c in mediaserver in Android 6.x before 2016-04-01 …

    android Ubuntu
  • Unscored —
    CVE-2016-0834

    An unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary…

    android Ubuntu
  • Unscored —
    CVE-2016-0838

    Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 d…

    android Ubuntu
  • Unscored —
    CVE-2016-1503

    dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-…

    dhcpcd5 dhcpcd5 Debian Ubuntu
  • Unscored —
    CVE-2016-2409

    A Texas Instruments (TI) haptic kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via …

  • Unscored —
    CVE-2016-2416

    libs/gui/BufferQueueConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, an…

    android Ubuntu
  • Unscored —
    CVE-2016-2411

    A Qualcomm Power Management kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via a cr…

  • Unscored —
    CVE-2016-2412

    include/core/SkPostConfig.h in Skia, as used in System_server in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x be…

    android Ubuntu
  • Unscored —
    CVE-2016-2425

    mail/compose/ComposeActivity.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and…

  • Unscored —
    CVE-2016-2410

    A Qualcomm video kernel driver in Android 6.x before 2016-04-01 allows attackers to gain privileges via a crafted appli…

  • Unscored —
    CVE-2016-2420

    rootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory exists for the Debugger…

    android Ubuntu
  • Unscored —
    CVE-2016-2423

    server/telecom/CallsManager.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and …

    android Ubuntu
  • Unscored —
    CVE-2016-2418

    media/libmedia/IOMX.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize certain metadata buffer poi…

    android Ubuntu
  • Unscored —
    CVE-2016-2427

    The AES-GCM specification in RFC 5084, as used in Android 5.x and 6.x, recommends 12 octets for the aes-ICVlen paramete…

  • Unscored —
    CVE-2016-2424

    server/content/SyncStorageEngine.java in SyncStorageEngine in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x befor…

  • Unscored —
    CVE-2016-2421

    Setup Wizard in Android 5.1.x before 5.1.1 and 6.x before 2016-04-01 allows physically proximate attackers to bypass th…

    android Ubuntu
  • Unscored —
    CVE-2016-2426

    server/content/ContentService.java in the Framework component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x be…

  • Unscored —
    CVE-2016-2415

    exchange/eas/EasAutoDiscover.java in the Autodiscover implementation in Exchange ActiveSync in Android 5.0.x before 5.0…

  • Unscored —
    CVE-2016-2413

    media/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 doe…

    android Ubuntu
  • Unscored —
    CVE-2016-2419

    media/libmedia/IDrm.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize a certain key-request data …

    android Ubuntu
  • Unscored —
    CVE-2016-2417 Public exploit

    media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x bef…

    android Ubuntu
  • Unscored —
    CVE-2016-2414

    The Minikin library in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly cons…

    android Ubuntu
  • Unscored —
    CVE-2016-2422

    Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not prevent u…

    android Ubuntu
  • Unscored —
    CVE-2016-1340

    Heap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS…

  • Unscored —
    CVE-2016-1339

    Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain p…

  • High 7.5
    CVE-2015-5271

    TripleO Heat templates might allow remote attackers to obtain sensitive information from private containers

    The TripleO Heat templates (tripleo-heat-templates) do not properly order the Identity Service (keystone) before the OpenStack Object Storage (Swift) staticweb middleware in the swiftproxy pipeline when the staticweb middleware is enabled, which might allow r…

    tripleo-heat-templates PyPI
  • Unscored —
    CVE-2015-7676

    Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows …

  • High 8.1
    CVE-2015-5348

    Apache Camel can allow remote attackers to execute arbitrary commands

    Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an H…

    org.apache.camel:camel-servlet org.apache.camel:camel-http-common org.apache.camel:camel-ahc org.apache.camel:camel-jetty Maven
  • Unscored —
    CVE-2016-3144

    Cross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2 for Drupal allows remote auth…

  • Unscored —
    CVE-2016-0889

    An HTTP servlet in vApp Manager in EMC Unisphere for VMAX Virtual Appliance before 8.2.0 allows remote attackers to wri…

  • Unscored —
    CVE-2016-1268

    The administrative web services interface in Juniper ScreenOS before 6.3.0r21 allows remote attackers to cause a denial…