Skip to content
OpenAdvisories

Archive

10 June 2016

Vulnerabilities first published on this day (UTC), newest first.

← May 2016 2016 / June /10 July 2016 →
  1. 117
  2. 2 
  3. 38
  4. 49
  5. 536
  6. 61
  7. 721
  8. 840
  9. 912
  10. 1022
  11. 11 
  12. 12 
  13. 1374
  14. 146
  15. 15 
  16. 1694
  17. 176
  18. 183
  19. 1937
  20. 207
  21. 21 
  22. 22 
  23. 239
  24. 246
  25. 2514
  26. 2611
  27. 2714
  28. 283
  29. 2918
  30. 3042
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2016-4429

    Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6)…

    glibc eglibc glibc libtirpc Debian Ubuntu
  • Critical 9.8
    CVE-2016-3720

    jackson-dataformat-xml vulnerable to XML external entity (XXE)

    XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.

    com.fasterxml.jackson.dataformat:jackson-dataformat-xml jackson-dataformat-xml jackson-dataformat-xml Debian Ubuntu Maven
  • Unscored —
    CVE-2016-3085

    Apache CloudStack 4.5.x before 4.5.2.1, 4.6.x before 4.6.2.1, 4.7.x before 4.7.1.1, and 4.8.x before 4.8.0.1, when SAML…

  • Unscored —
    CVE-2016-3706

    Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library (aka glibc …

    glibc eglibc glibc Debian Ubuntu
  • Unscored —
    CVE-2016-2786

    The pxp-agent component in Puppet Enterprise 2015.3.x before 2015.3.3 and Puppet Agent 1.3.x before 1.3.6 does not prop…

  • Critical 9.8
    CVE-2016-2785

    Puppet Improper Access Control

    Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to bypass intended auth.conf access restrictions by leveraging incorrect URL decoding.

    puppet RubyGems
  • Unscored —
    CVE-2016-5118 EPSS 50%

    The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbi…

    imagemagick imagemagick imagemagick graphicsmagick Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-5233

    Huawei Mate 8 smartphones with software NXT-AL10 before NXT-AL10C00B182, NXT-CL00 before NXT-CL00C92B182, NXT-DL00 befo…

  • Unscored —
    CVE-2015-8268

    The up.time agent in Idera Uptime Infrastructure Monitor 7.5 and 7.6 on Linux allows remote attackers to read arbitrary…

  • Unscored —
    CVE-2016-0916

    EMC NetWorker 8.2.1.x and 8.2.2.x before 8.2.2.6 and 9.x before 9.0.0.6 mishandles authentication, which allows remote …

  • Unscored —
    CVE-2016-0910

    EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI u…

  • Unscored —
    CVE-2016-1421

    A vulnerability in the web application for Cisco IP Phones could allow an unauthenticated, remote attacker to execute c…

    Cisco Cisco IP Phones Network devices
  • Unscored —
    CVE-2016-1419

    Cisco Access Point devices with software 8.2(102.43) allow remote attackers to cause a denial of service (device reload…

  • Unscored —
    CVE-2016-1420

    The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.…

  • Unscored —
    CVE-2016-4524

    ABB PCM600 before 2.7 improperly stores OPC Server IEC61850 passwords in unspecified temporary circumstances, which all…

  • Unscored —
    CVE-2016-4328

    MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which …

  • Unscored —
    CVE-2016-4495

    KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass intended access restricti…

  • Unscored —
    CVE-2016-4516

    ABB PCM600 before 2.7 improperly stores the main application password after a password change, which allows local users…

  • Unscored —
    CVE-2016-4326

    The Chef Manage (formerly opscode-manage) add-on before 1.12.0 for Chef allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2016-4494

    Cross-site request forgery (CSRF) vulnerability on KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allows …

  • Unscored —
    CVE-2016-4527

    ABB PCM600 before 2.7 improperly stores PCM600 authentication credentials, which allows local users to obtain sensitive…

  • Unscored —
    CVE-2016-4511

    ABB PCM600 before 2.7 uses an improper hash algorithm for the main application password, which makes it easier for loca…