Skip to content
OpenAdvisories

Archive

June 2016

Vulnerabilities first published in this month (UTC), newest first.

← May 2016 2016 / June July 2016 →
  1. 117
  2. 2 
  3. 38
  4. 49
  5. 536
  6. 61
  7. 721
  8. 840
  9. 912
  10. 1022
  11. 11 
  12. 12 
  13. 1374
  14. 146
  15. 15 
  16. 1694
  17. 176
  18. 183
  19. 1937
  20. 207
  21. 21 
  22. 22 
  23. 239
  24. 246
  25. 2514
  26. 2611
  27. 2714
  28. 283
  29. 2918
  30. 3042
All Critical High Medium Low Exploited only Public exploit

510 results · Feed

  • Unscored —
    CVE-2015-8801

    Race condition in the client in Symantec Endpoint Protection (SEP) 12.1 before RU6 MP5 allows local users to bypass int…

  • Unscored —
    CVE-2016-3646 Public exploit EPSS 18%

    The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDC…

  • Unscored —
    CVE-2016-3650

    Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover credentia…

  • Unscored —
    CVE-2016-3644 Public exploit EPSS 18%

    The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDC…

  • Unscored —
    CVE-2016-3652 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM…

  • Unscored —
    CVE-2016-3648

    Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to bypass the Authent…

  • Unscored —
    CVE-2016-3647

    Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to conduct server-sid…

  • Unscored —
    CVE-2016-3651

    Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover the PHP J…

  • Unscored —
    CVE-2016-3649

    Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated administrators to enumerate…

  • Unscored —
    CVE-2016-3645 Public exploit EPSS 25%

    Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); …

  • Unscored —
    CVE-2016-3653 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in management scripts in Symantec Endpoint Protection Manage…

  • Unscored —
    CVE-2016-2210 Public exploit EPSS 11%

    Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symante…

  • Unscored —
    CVE-2016-2207 Public exploit EPSS 18%

    The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDC…

  • Unscored —
    CVE-2016-2211 EPSS 53%

    The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDC…

  • Unscored —
    CVE-2016-2209 Public exploit EPSS 21%

    Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec…

  • Unscored —
    CVE-2016-5306

    Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechani…

  • Unscored —
    CVE-2016-5304 Public exploit

    Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU…

  • Unscored —
    CVE-2016-5305

    Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM…

  • Unscored —
    CVE-2016-5307

    Directory traversal vulnerability in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote auth…

  • Unscored —
    CVE-2015-8899

    Dnsmasq before 2.76 allows remote servers to cause a denial of service (crash) via a reply with an empty DNS address th…

    dnsmasq dnsmasq Debian Ubuntu
  • Unscored —
    CVE-2016-4472 EPSS 12%

    The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attack…

    expat swish-e matanza coin3 Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-4803

    CRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote attackers to inject a…

  • Unscored —
    CVE-2016-4309 Public exploit EPSS 10%

    Session fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled, allows remote attacker…

  • Unscored —
    CVE-2016-4971 Public exploit EPSS 46%

    GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted …

    wget wget wget Debian Ubuntu Alpine
  • Medium 6.5
    CVE-2016-3189 EPSS 16%

    Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash…

    bzip2 bzip2 bzip2 Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-5301

    The parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash)…

    libtorrent-rasterbar libtorrent-rasterbar Debian Ubuntu
  • Unscored —
    CVE-2016-5360 EPSS 43%

    HAproxy 1.6.x before 1.6.6, when a deny comes from a reqdeny rule, allows remote attackers to cause a denial of service…

    haproxy haproxy Debian Ubuntu
  • Unscored —
    CVE-2016-5020

    F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Res…

  • Unscored —
    CVE-2016-4474

    The image build process for the overcloud images in Red Hat OpenStack Platform 8.0 (Liberty) director and Red Hat Enter…

  • Unscored —
    CVE-2016-4057

    Huawei FusionCompute before V100R005C10SPC700 allows remote authenticated users to cause a denial of service (resource …

  • Unscored —
    CVE-2016-4086

    Huawei HiSuite (In China) before 4.0.4.301 and (Out of China) before 4.0.4.204_ove allows remote attackers to install a…

  • Unscored —
    CVE-2016-5249

    Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges vi…

  • Unscored —
    CVE-2016-5231

    Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL be…

  • Unscored —
    CVE-2016-5248

    The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local users to term…

  • Unscored —
    CVE-2016-5368

    Memory leak in Huawei AR3200 before V200R007C00SPC900 allows remote attackers to cause a denial of service (memory cons…

  • Unscored —
    CVE-2016-5840 Public exploit

    hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote a…

  • Unscored —
    CVE-2016-5230

    Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL be…

  • Unscored —
    CVE-2016-5232

    Buffer overflow in Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17…

  • Unscored —
    CVE-2016-5729

    Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode (SMM) privileg…

  • Unscored —
    CVE-2016-0349

    IBM Business Process Manager 8.5.6 through 8.5.6.2 and 8.5.7 before 8.5.7.CF201606 allows remote authenticated users to…