17 September 2016

16 results · Feed

• Unscored —
  CVE-2016-7418 EPSS 11%

  The php_wddx_push_element function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before 7.0.11 allows remote attacker…

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7412

  ext/mysqlnd/mysqlnd_wireprotocol.c in PHP before 5.6.26 and 7.x before 7.0.11 does not verify that a BIT field has the …

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7417

  ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validatin…

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7414

  The ZIP signature-verification feature in PHP before 5.6.26 and 7.x before 7.0.11 does not ensure that the uncompressed…

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7411

  ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote a…

  php5 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7415

  Stack-based buffer overflow in the Locale class in common/locid.cpp in International Components for Unicode (ICU) throu…

  icu icu icu Debian Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7416

  ext/intl/msgformat/msgformat_format.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale …

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-7419

  Cross-site scripting (XSS) vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nex…

  Sep 17, 2016
• Unscored —
  CVE-2016-7413

  Use-after-free vulnerability in the wddx_stack_destroy function in ext/wddx/wddx.c in PHP before 5.6.26 and 7.x before …

  php5 php7.0 php Ubuntu Alpine
  Sep 17, 2016
• Unscored —
  CVE-2016-1482

  Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into …

  Sep 17, 2016
• Unscored —
  CVE-2016-6644

  EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documen…

  Sep 17, 2016
• Unscored —
  CVE-2016-6401

  Cisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 devices, al…

  Sep 17, 2016
• Unscored —
  CVE-2016-6938

  Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 1…

  Sep 17, 2016
• Unscored —
  CVE-2016-6407

  Cisco AsyncOS through 9.5.0-444 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of se…

  Sep 17, 2016
• Unscored —
  CVE-2016-6937

  Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acr…

  Sep 17, 2016
• Unscored —
  CVE-2016-5843

  Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in O…

  gst-plugins-bad1 Alpine
  Sep 17, 2016