Browse CVEs

MEDIUM 5.5 CVE-2016-3815 The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, … Android after 6.0.1 Fix from $1,6002016-07-11 MEDIUM 5.5 CVE-2016-3814 The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, … Android after 6.0.1 Fix from $1,6002016-07-11 MEDIUM 5.5 CVE-2016-3813 The Qualcomm USB driver in Android before 2016-07-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via a crafted… Android after 6.0.1 Fix from $1,6002016-07-11 MEDIUM 5.5 CVE-2016-3812 The MediaTek video codec driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted ap… Android after 6.0.1 Fix from $1,6002016-07-11 MEDIUM 5.5 CVE-2016-3810 The MediaTek Wi-Fi driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted applicat… Android after 6.0.1 Fix from $1,6002016-07-11 MEDIUM 5.5 CVE-2016-3809 The networking component in Android before 2016-07-05 on Android One, Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus Player, an… Android after 6.0.1 Fix from $1,6002016-07-11 HIGH 7.7 CVE-2016-3765 decoder/impeg2d_bitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or c… Android Mitigation only Fix from $1,9502016-07-11 HIGH 7.5 CVE-2016-3753 mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors, aka internal bug 27210135. Android Mitigation only Fix from $1,9502016-07-11 HIGH 7.8 CVE-2016-0287 IBM i Access 7.1 on Windows allows local users to discover registry passwords via unspecified vectors. I Access Mitigation only Fix from $1,9502016-07-08 MEDIUM 5.1 CVE-2016-0252 IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via … Control Center Mitigation only Fix from $1,6002016-07-08 HIGH 7.5 CVE-2016-2923 IBM WebSphere Application Server (WAS) 8.5 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 does not include the HTTPOnly flag in a Set-Cooki… Websphere Application Server Mitigation only Fix from $1,9502016-07-07 MEDIUM 5.3 CVE-2016-0389 Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to ob… Websphere Application Server Mitigation only Fix from $1,6002016-07-07 MEDIUM 5.3 CVE-2016-5097 phpMyAdmin before 4.6.2 places tokens in query strings and does not arrange for them to be stripped before external navigation, which allows remote a… Opensuse after 4.6.1 Fix from $1,6002016-07-05 MEDIUM 6.7 CVE-2016-5848 Siemens SICAM PAS before 8.07 does not properly restrict password data in the database, which makes it easier for local users to calculate passwords … Sicam Pas\/pqs after 8.07 Fix from $1,6002016-07-04 MEDIUM 6.3 CVE-2016-0899 EMC RSA Archer GRC 5.5.x before 5.5.3.4 allows remote authenticated users to read the web.config.bak file, and obtain sensitive credential informatio… Rsa Archer Egrc Mitigation only Fix from $1,6002016-07-04 HIGH 8.1 CVE-2016-1337 Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and credential information by making requests during the early part of… Epc3928 Firmware No fix yet Fix from $1,9502016-07-03 HIGH 7.5 CVE-2016-5739 The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Co… Leap Patch available Fix from $1,9502016-07-03 MEDIUM 5.3 CVE-2016-5730 phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to obtain sensitive information via vectors … phpMyAdmin Patch available Fix from $1,6002016-07-03 MEDIUM 5.9 CVE-2016-2079 VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote attacker… Nsx Edge Patch available Fix from $1,6002016-07-03 HIGH 7.5 CVE-2016-3956EPSS 7% The CLI in npm before 2.15.1 and 3.x before 3.8.3, as used in Node.js 0.10 before 0.10.44, 0.12 before 0.12.13, 4 before 4.4.2, and 5 before 5.10.0, … Node.js 2.15.1 / 3.8.3+ Fix from $1,9502016-07-02 MEDIUM 5.3 CVE-2016-2961 The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote att… Integration Bus Mitigation only Fix from $1,6002016-07-02 MEDIUM 5.9 CVE-2016-0365 IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled,… Urbancode Deploy Mitigation only Fix from $1,6002016-07-01 MEDIUM 5.3 CVE-2016-5306 Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for … Endpoint Protection Manager after 12.1.6 Fix from $1,6002016-06-30 HIGH 8.0 CVE-2016-3651 Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover the PHP JSESSIONID value via unspecifie… Endpoint Protection Manager after 12.1.6 Fix from $1,9502016-06-30 HIGH 8.8 CVE-2016-3650 Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to discover credentials via a brute-force attack. Endpoint Protection Manager after 12.1.6 Fix from $1,9502016-06-30 HIGH 8.8 CVE-2016-3648 Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to bypass the Authentication Lock protection mechan… Endpoint Protection Manager after 12.1.6 Fix from $1,9502016-06-30 HIGH 8.8 CVE-2016-4474 The image build process for the overcloud images in Red Hat OpenStack Platform 8.0 (Liberty) director and Red Hat Enterprise Linux OpenStack Platform… Openstack Mitigation only Fix from $1,9502016-06-30 HIGH 7.5 CVE-2016-5835 WordPress before 4.5.3 allows remote attackers to obtain sensitive revision-history information by leveraging the ability to read a post, related to … WordPress after 4.5.2 Fix from $1,9502016-06-29 MEDIUM 6.5 CVE-2016-0298 Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arb… Security Guardium after 10.0 Fix from $1,6002016-06-29 HIGH 7.7 CVE-2016-0267 IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensitive clea… Urbancode Deploy Mitigation only Fix from $1,9502016-06-29