22 September 2016

30 results · Feed

• Unscored —
  CVE-2016-6414

  iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbit…

  Sep 22, 2016
• Unscored —
  CVE-2016-6374

  Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup …

  Sep 22, 2016
• Unscored —
  CVE-2016-6406

  Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on …

  Sep 22, 2016
• Unscored —
  CVE-2016-6373

  The web-based GUI in Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote authenticated administrators to execute…

  Sep 22, 2016
• Unscored —
  CVE-2016-2827

  The mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote attackers to cause a deni…

  firefox Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5257

  Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5256

  Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 49.0 allow remote attackers to cau…

  firefox Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5270

  Heap-based buffer overflow in the nsCaseTransformTextRunFactory::TransformString function in Mozilla Firefox before 49.…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5276

  Use-after-free vulnerability in the mozilla::a11y::DocAccessible::ProcessInvalidationList function in Mozilla Firefox b…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5280

  Use-after-free vulnerability in the mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap function in Mozilla Fire…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5278

  Heap-based buffer overflow in the nsBMPEncoder::AddImageFrame function in Mozilla Firefox before 49.0, Firefox ESR 45.x…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5281

  Use-after-free vulnerability in the DOMSVGLength class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, an…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5284

  Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 rely on unintended expiration dates f…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5274

  Use-after-free vulnerability in the nsFrameManager::CaptureFrameState function in Mozilla Firefox before 49.0, Firefox …

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5275

  Buffer overflow in the mozilla::gfx::FilterSupport::ComputeSourceNeededRegions function in Mozilla Firefox before 49.0 …

  firefox Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5283

  Mozilla Firefox before 49.0 allows remote attackers to bypass the Same Origin Policy via a crafted fragment identifier …

  firefox Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5272

  The nsImageGeometryMixin class in Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird < 45.4 doe…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5277

  Use-after-free vulnerability in the nsRefreshDriver::Tick function in Mozilla Firefox before 49.0, Firefox ESR 45.x bef…

  thunderbird firefox firefox-esr Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5279

  Mozilla Firefox before 49.0 allows user-assisted remote attackers to obtain sensitive full-pathname information during …

  firefox Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5282

  Mozilla Firefox before 49.0 does not properly restrict the scheme in favicon requests, which might allow remote attacke…

  firefox Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5273

  The mozilla::a11y::HyperTextAccessible::GetChildOffset function in the accessibility implementation in Mozilla Firefox …

  firefox Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5271

  The PropertyProvider::GetSpacingInternal function in Mozilla Firefox before 49.0 allows remote attackers to cause a den…

  firefox Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2014-2146

  The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and ear…

  Sep 22, 2016
• Unscored —
  CVE-2016-6265

  Use-after-free vulnerability in the pdf_load_xref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause …

  mupdf mupdf Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-6322

  Red Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers, which allows local users…

  Sep 22, 2016
• Unscored —
  CVE-2016-6340

  The kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces use of MD5 passwords on deployed systems, which m…

  Sep 22, 2016
• Unscored —
  CVE-2016-6824

  Huawei AC6003, AC6005, AC6605, and ACU2 access controllers with software before V200R006C10SPC200 allows remote authent…

  Sep 22, 2016
• Unscored —
  CVE-2016-6669

  Buffer overflow in the Authentication, Authorization and Accounting (AAA) module in Huawei USG2100, USG2200, USG5100, a…

  Sep 22, 2016
• Unscored —
  CVE-2016-6525

  Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to …

  mupdf mupdf Debian Ubuntu
  Sep 22, 2016
• Unscored —
  CVE-2016-5247

  The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93,…

  Sep 22, 2016