Skip to content
OpenAdvisories

Archive

22 July 2016

Vulnerabilities first published on this day (UTC), newest first.

← June 2016 2016 / July /22 August 2016 →
  1. 15
  2. 221
  3. 346
  4. 412
  5. 58
  6. 66
  7. 77
  8. 812
  9. 9 
  10. 10 
  11. 11100
  12. 1217
  13. 13131
  14. 14 
  15. 1527
  16. 16 
  17. 175
  18. 18 
  19. 1910
  20. 20 
  21. 21192
  22. 2268
  23. 2318
  24. 24 
  25. 2510
  26. 264
  27. 27 
  28. 2810
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

68 results · Feed

  • Unscored —
    CVE-2016-6204

    Cross-site scripting (XSS) vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.…

  • Unscored —
    CVE-2016-5744

    Siemens SIMATIC WinCC 7.0 through SP3 and 7.2 allows remote attackers to read arbitrary WinCC station files via crafted…

  • Unscored —
    CVE-2016-5743 EPSS 10%

    Siemens SIMATIC WinCC before 7.3 Update 10 and 7.4 before Update 1, SIMATIC BATCH before 8.1 SP1 Update 9 as distribute…

  • Unscored —
    CVE-2016-5874

    Siemens SIMATIC NET PC-Software before 13 SP2 allows remote attackers to cause a denial of service (OPC UA service outa…

  • Unscored —
    CVE-2015-8946

    ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot …

    ecryptfs-utils Debian
  • Unscored —
    CVE-2016-6224

    ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using …

    ecryptfs-utils Ubuntu
  • Unscored —
    CVE-2014-9862

    Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, al…

    bsdiff bsdiff Debian Ubuntu
  • Unscored —
    CVE-2016-1863 Public exploit

    The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local use…

  • Unscored —
    CVE-2016-1865

    The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local use…

  • Unscored —
    CVE-2016-4640

    Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain se…

  • Unscored —
    CVE-2016-4653

    The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local use…

  • Unscored —
    CVE-2016-4600

    QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —
    CVE-2016-4589

    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitra…

    qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
  • Unscored —
    CVE-2016-4605

    Calendar in Apple iOS before 9.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference and d…

  • Unscored —
    CVE-2016-4591

    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 mishandles the location variable, which al…

    qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-4630

    ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (me…

  • Unscored —
    CVE-2016-4624

    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitra…

    qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-4602

    QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —
    CVE-2016-4646

    Audio in Apple OS X before 10.11.6 mishandles a size value, which allows remote attackers to obtain sensitive informati…

  • Unscored —
    CVE-2016-4593

    The Siri Contacts component in Apple iOS before 9.3.3 allows physically proximate attackers to read arbitrary Contact c…

  • Unscored —
    CVE-2016-4598

    QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —
    CVE-2016-4632

    ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attac…

  • Unscored —
    CVE-2016-4622 Public exploit EPSS 20%

    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitra…

    qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-4608

    libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows…

    libxslt libxslt Debian Ubuntu
  • Unscored —
    CVE-2016-4631 Public exploit

    ImageIO in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attac…

  • Unscored —
    CVE-2016-4592

    WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to cause a denial …

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2016-4628

    IOAcceleratorFamily in Apple iOS before 9.3.3 and watchOS before 2.2.2 allows local users to obtain sensitive informati…

  • Unscored —
    CVE-2016-4587

    WebKit in Apple iOS before 9.3.3 and tvOS before 9.2.2 allows remote attackers to obtain sensitive information from uni…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2016-4601

    QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —
    CVE-2016-4590

    WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypas…

    qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-4641

    Login Window in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain …

  • Unscored —
    CVE-2016-4586

    WebKit in Apple Safari before 9.1.2 and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a …

    qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
  • Unscored —
    CVE-2016-4604

    Safari in Apple iOS before 9.3.3 allows remote attackers to spoof the displayed URL via an HTTP response specifying red…

  • Unscored —
    CVE-2016-4610

    libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows…

    libxslt libxslt Debian Ubuntu
  • Unscored —
    CVE-2016-4597

    QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —
    CVE-2016-4584

    The WebKit Page Loading implementation in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows rem…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2016-4603

    Web Media in Apple iOS before 9.3.3 allows attackers to bypass the Private Browsing protection mechanism and obtain sen…

  • Unscored —
    CVE-2016-4625 Public exploit

    Use-after-free vulnerability in IOSurface in Apple OS X before 10.11.6 allows local users to gain privileges via unspec…

  • Unscored —
    CVE-2016-4599

    QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (…

  • Unscored —
    CVE-2016-4649

    Audio in Apple OS X before 10.11.6 allows local users to cause a denial of service (NULL pointer dereference) via unspe…