Skip to content
OpenAdvisories

Archive

July 2016

Vulnerabilities first published in this month (UTC), newest first.

← June 2016 2016 / July August 2016 →
  1. 15
  2. 221
  3. 346
  4. 412
  5. 58
  6. 66
  7. 77
  8. 812
  9. 9 
  10. 10 
  11. 11100
  12. 1217
  13. 13131
  14. 14 
  15. 1527
  16. 16 
  17. 175
  18. 18 
  19. 1910
  20. 20 
  21. 21192
  22. 2268
  23. 2318
  24. 24 
  25. 2510
  26. 264
  27. 27 
  28. 2810
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

709 results · Feed

  • Unscored —
    CVE-2016-3759

    The Framework APIs in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to read…

    android Ubuntu
  • Unscored —
    CVE-2016-3810

    The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive info…

  • Unscored —
    CVE-2016-3758

    Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2…

    android android-platform-dalvik Debian Ubuntu
  • Unscored —
    CVE-2016-3742

    decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows r…

    android Ubuntu
  • Unscored —
    CVE-2016-3768

    The Qualcomm performance component in Android before 2016-07-05 on Nexus 5, 6, 5X, 6P, and 7 (2013) devices allows atta…

  • Unscored —
    CVE-2016-3818

    libc in Android 4.x before 4.4.4 allows remote attackers to cause a denial of service (device hang or reboot) via a cra…

    android Ubuntu
  • Unscored —
    CVE-2016-3745

    Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x b…

    android Ubuntu
  • Unscored —
    CVE-2016-3792

    CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 (2013) devices mis…

  • Unscored —
    CVE-2016-3807

    The serial peripheral interface driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain…

  • Unscored —
    CVE-2016-3767

    The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a…

  • Unscored —
    CVE-2016-3743

    decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which…

    android Ubuntu
  • Unscored —
    CVE-2016-3760

    Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows local users to gain privi…

    android Ubuntu
  • Unscored —
    CVE-2016-3754

    mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not lim…

    android Ubuntu
  • Unscored —
    CVE-2016-3795

    The MediaTek power driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a…

  • Unscored —
    CVE-2016-3741

    The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows …

    android Ubuntu
  • Unscored —
    CVE-2016-3753

    mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors…

    android Ubuntu
  • Unscored —
    CVE-2016-3761

    NfcService.java in NFC in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 a…

    android Ubuntu
  • Unscored —
    CVE-2016-3811

    The kernel video driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-3746

    Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x befo…

    android Ubuntu
  • Unscored —
    CVE-2016-3774

    The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-3771

    The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-3750

    libs/binder/Parcel.cpp in the Parcels Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.…

    android Ubuntu
  • Unscored —
    CVE-2016-3772

    The MediaTek drivers in Android before 2016-07-05 on Android One devices allow attackers to gain privileges via a craft…

  • Unscored —
    CVE-2016-2067 Public exploit

    drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU driver) for the Linux kernel 3.x, as used in Qualcomm Innova…

  • Unscored —
    CVE-2016-2506

    DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, …

    android Ubuntu
  • Unscored —
    CVE-2016-2503

    The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via…

  • Unscored —
    CVE-2016-2508

    media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, …

    android Ubuntu
  • Unscored —
    CVE-2016-2068

    The MSM QDSP6 audio driver (aka sound driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) An…

  • Unscored —
    CVE-2016-2505

    mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain sec…

    android Ubuntu
  • Unscored —
    CVE-2016-2502

    drivers/usb/gadget/f_serial.c in the Qualcomm USB driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows…

  • Unscored —
    CVE-2016-2507

    Integer overflow in codecs/on2/h264dec/source/h264bsd_storage.c in libstagefright in mediaserver in Android 4.x before …

    android Ubuntu
  • Unscored —
    CVE-2016-2501

    The Qualcomm camera driver in Android before 2016-07-05 on Nexus 5X, 6, 6P, and 7 (2013) devices allows attackers to ga…

  • Unscored —
    CVE-2016-4324

    Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafte…

    libreoffice libreoffice Debian Ubuntu
  • Unscored —
    CVE-2016-4463 Public exploit EPSS 14%

    Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of s…

    xerces-c xerces-c Debian Ubuntu
  • Unscored —
    CVE-2016-0350

    Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reportin…

  • Unscored —
    CVE-2016-0252

    IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users …

  • Unscored —
    CVE-2016-0287

    IBM i Access 7.1 on Windows allows local users to discover registry passwords via unspecified vectors.

  • Unscored —
    CVE-2016-0315

    The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and…

  • Unscored —
    CVE-2016-0313

    Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reportin…

  • Unscored —
    CVE-2016-0271

    The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a …