Archive
August 2016
Vulnerabilities first published in this month (UTC), newest first.
409 results · Feed
-
Unscored —
Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the appliance web-application in Fortinet FortiManager 5.x before 5.0.12, 5…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the address added page in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Web-UI in Fortinet FortiManager 5.x before 5.0.12 and 5.2.x before 5.2.…
-
Medium 6.1
Apache OpenMeetings Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in the SWF panel in Apache OpenMeetings before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the swf parameter.
-
Unscored —
Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the view_hosts permission containi…
-
Unscored —
The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.…
-
Unscored —
The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allo…
-
Unscored —
The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x be…
-
Unscored —
The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Ad…
-
Unscored —
IOMobileFrameBuffer in Apple iOS before 9.3.4 allows attackers to execute arbitrary code in a privileged context or cau…
-
High 7.8
Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows lo…
KEV May 24, 2022 -
High 8.8
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Servic…
KEV May 24, 2022 -
Unscored —CVE-2016-5845 Public exploit
SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to c…
-
Unscored —CVE-2016-5847 Public exploit
SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard …
-
Unscored —
fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and conseq…
-
Unscored —
Integer overflow in the _gdContributionsAlloc function in gd_interpolation.c in GD Graphics Library (aka libgd) before …
-
Unscored —
The gdImageCreateFromTgaCtx function in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cau…
-
Unscored —
gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3 allows remote attackers to cause a denial of service (out-…
-
Unscored —
The output function in gd_gif_out.c in the GD Graphics Library (aka libgd) allows remote attackers to cause a denial of…
-
Unscored —
linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local use…
-
Unscored —
Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to acc…
-
Unscored —CVE-2016-5419 EPSS 15%
curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which all…
-
Unscored —
Stack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package before 3.1.23-16.el6_…
-
Unscored —CVE-2016-5420 EPSS 15%
curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which mig…
-
Unscored —
Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly …
-
Unscored —
Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the …
-
Unscored —CVE-2016-3293 EPSS 15%
Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web pa…
-
High 7.5CVE-2016-3296 EPSS 15%
ChakraCore RCE Vulnerability
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."
-
Unscored —CVE-2016-3318 EPSS 22%
Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allow remote attackers to execute arbitrary code via a c…
-
Unscored —
The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007…
-
Unscored —CVE-2016-3317 EPSS 22%
Microsoft Office 2010 SP2, Word 2007 SP3, Word 2010 SP2, Word for Mac 2011, Word 2016 for Mac, and Word Viewer allow re…
-
Unscored —
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;…
-
Unscored —
Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server…
-
Unscored —CVE-2016-3322 EPSS 15%
Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "M…
-
Unscored —
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to…
-
Unscored —
The Netlogon service in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 improperly establish…
-
Unscored —
ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure…
-
Unscored —CVE-2016-3326 EPSS 16%
Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted …
-
Unscored —
The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1;…