Archive
June 2016
Vulnerabilities first published in this month (UTC), newest first.
510 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 through CR4, and 5.5 …
-
Critical 9.8
Improper Input Validation in JGroups
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the …
-
Unscored —
Integer overflow in the snd_compr_allocate_buffer function in sound/core/compress_offload.c in the ALSA subsystem in th…
-
Unscored —
nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php in Wor…
-
Unscored —
Unspecified vulnerability in Opera Mail before 2016-02-16 on Windows allows user-assisted remote attackers to execute a…
-
Unscored —
WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the abili…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the column_title function in wp-admin/includes/class-wp-media-list-table.ph…
-
Unscored —
WordPress before 4.5.3 allows remote attackers to bypass the sanitize_file_name protection mechanism via unspecified ve…
-
Unscored —
WordPress before 4.5.3 allows remote attackers to bypass intended password-change restrictions by leveraging knowledge …
-
Unscored —
WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute f…
-
Unscored —
The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspec…
-
Unscored —
The oEmbed protocol implementation in WordPress before 4.5.3 allows remote attackers to cause a denial of service via u…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly LISA Release Automation) 5.0.2 b…
-
Unscored —
CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before …
-
Unscored —
The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configu…
-
Unscored —
IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated …
-
Unscored —
IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 before 3.5.0.30 allow…
-
Unscored —
Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote a…
-
Unscored —
Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of…
-
Unscored —
SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote authenticated …
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers…
-
Unscored —
SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote attackers to e…
-
Unscored —
The snd_compress_check_input function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel before…
-
Unscored —
The sched_read_attr function in kernel/sched/core.c in the Linux kernel 3.14-rc before 3.14-rc4 uses an incorrect size,…
-
Unscored —
Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted…
-
Unscored —CVE-2016-1583 Public exploit
The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to g…
-
Unscored —
The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certai…
-
Unscored —
arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to …
-
Unscored —
The icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in…
-
Unscored —
Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CP…
-
Unscored —
The msr_mtrr_valid function in arch/x86/kvm/mtrr.c in the Linux kernel before 4.6.1 supports MSR 0x2f8, which allows gu…
-
Unscored —
The tipc_nl_compat_link_dump function in net/tipc/netlink_compat.c in the Linux kernel through 4.6.3 does not properly …
-
Unscored —
Multiple heap-based buffer overflows in the hiddev_ioctl_usage function in drivers/hid/usbhid/hiddev.c in the Linux ker…
-
Unscored —
The start_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms misha…
-
Unscored —
The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain struct…
-
Unscored —
Race condition in the vop_ioctl function in drivers/misc/mic/vop/vop_vringh.c in the MIC VOP driver in the Linux kernel…
-
Unscored —
runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local users to bypass intended queue-manager command access restr…
-
Unscored —
Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6…
-
Unscored —
Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6…