Browse CVEs

MEDIUM 5.9 CVE-2016-5435 Memory leak in Huawei IPS Module, NGFW Module, NIP6300, NIP6600, and Secospace USG6300, USG6500, USG6600, USG9500, and AntiDDoS8000 V500R001C00 befor… Huawei Firmware Mitigation only Fix from $1,6002016-06-24 MEDIUM 6.5 CVE-2016-1428 Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service (device restart) via… Ios Xe Mitigation only Fix from $1,6002016-06-23 HIGH 7.5 CVE-2015-6289 Cisco IOS 15.5(3)M on Integrated Services Router (ISR) 800, 819, and 829 devices allows remote attackers to cause a denial of service (memory consump… iOS Mitigation only Fix from $1,9502016-06-23 MEDIUM 6.5 CVE-2016-1432 Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a denial of service (NULL pointer… Ios Xe Mitigation only Fix from $1,6002016-06-18 HIGH 7.5 CVE-2016-5300EPSS 7% The XML parser in Expat does not use sufficient entropy for hash initialization, which allows context-dependent attackers to cause a denial of servic… Ubuntu Linux 2.2.0+ Fix from $1,9502016-06-16 HIGH 7.5 CVE-2014-9747 The t42_parse_encoding function in type42/t42parse.c in FreeType before 2.5.4 does not properly update the current position for immediates-only mode,… Debian Linux after 2.5.3 Fix from $1,9502016-06-07 HIGH 7.5 CVE-2016-4423 The attemptAuthentication function in Component/Security/Http/Firewall/UsernamePasswordFormAuthenticationListener.php in Symfony before 2.3.41, 2.7.x… Symfony after 2.3.40 Fix from $1,9502016-06-01 MEDIUM 6.5 CVE-2016-1379 Cisco Adaptive Security Appliance (ASA) Software 9.0 through 9.5.1 mishandles IPsec error processing, which allows remote authenticated users to caus… Adaptive Security Appliance Software Mitigation only Fix from $1,6002016-05-28 MEDIUM 6.5 CVE-2016-1385 The XML parser in Cisco Adaptive Security Appliance (ASA) Software through 9.5.2 allows remote authenticated users to cause a denial of service (inst… Adaptive Security Appliance Software Mitigation only Fix from $1,6002016-05-26 HIGH 7.5 CVE-2016-4021 The read_binary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a denial of service (infinite loop and CPU co… Fedora after 0.29 Fix from $1,9502016-05-26 HIGH 7.5 CVE-2016-1383 Memory leak in Cisco AsyncOS through 8.8 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of service (memory consump… Web Security Appliance \(wsa\) Mitigation only Fix from $1,9502016-05-25 HIGH 7.5 CVE-2016-1381 Memory leak in Cisco AsyncOS 8.5 through 9.0 before 9.0.1-162 on Web Security Appliance (WSA) devices allows remote attackers to cause a denial of se… Web Security Appliance Mitigation only Fix from $1,9502016-05-25 HIGH 7.5 CVE-2015-8877 The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in PHP before 5.6.12, uses incons… PHP after 5.6.11 Fix from $1,9502016-05-22 CRITICAL 9.1 CVE-2016-2208EPSS 19% The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a deni… Anti Virus Engine after 20151.1.0.32 Fix from $2,3002016-05-19 HIGH 7.5 CVE-2016-1399 The packet-processing microcode in Cisco IOS 15.2(2)EA, 15.2(2)EA1, 15.2(2)EA2, and 15.2(4)EA on Industrial Ethernet 4000 devices and 15.2(2)EB and 1… iOS Mitigation only Fix from $1,9502016-05-14 HIGH 7.5 CVE-2015-5727 The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (memory consumption) vi… Debian Linux Mitigation only Fix from $1,9502016-05-13 HIGH 7.5 CVE-2016-2094 The HTTPS NIO Connector allows remote attackers to cause a denial of service (thread consumption) by opening a socket and not sending an SSL handshak… Enterprise Application Platform Mitigation only Fix from $1,9502016-05-06 HIGH 7.5 CVE-2016-1369 The Adaptive Security Appliance (ASA) 5585-X FirePOWER Security Services Processor (SSP) module for Cisco ASA with FirePOWER Services 5.3.1 through 6… Asa With Firepower Services Mitigation only Fix from $1,9502016-05-05 HIGH 7.5 CVE-2016-1368 Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Pr… Firesight System Software Mitigation only Fix from $1,9502016-05-05 MEDIUM 5.9 CVE-2016-4008EPSS 26% The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.8, when used without the ASN1_DECODE_FLAG_STRICT_DER flag, allows rem… Ubuntu Linux after 4.7 Fix from $1,6002016-05-05 HIGH 7.5 CVE-2016-2109EPSS 29% The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remo… OpenSSL after 1.0.1s Fix from $1,9502016-05-05 MEDIUM 5.9 CVE-2016-4419 epan/dissectors/packet-spice.c in the SPICE dissector in Wireshark 2.x before 2.0.2 mishandles capability data, which allows remote attackers to caus… Wireshark Mitigation only Fix from $1,6002016-05-01 MEDIUM 5.5 CVE-2016-3156 The IPv4 implementation in the Linux kernel before 4.5.2 mishandles destruction of device objects, which allows guest OS users to cause a denial of s… Ubuntu Linux after 4.5.1 Fix from $1,6002016-04-27 MEDIUM 6.2 CVE-2016-2847 fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (me… Linux Kernel after 4.4.8 Fix from $1,6002016-04-27 MEDIUM 5.5 CVE-2016-2550 The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging inco… Linux Kernel after 4.4.8 Fix from $1,6002016-04-27 MEDIUM 6.2 CVE-2015-1339 Memory leak in the cuse_channel_release function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to cause a denial of service (me… Linux Kernel after 4.3.6 Fix from $1,6002016-04-27 HIGH 7.5 CVE-2016-1367 The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) Software 9.4.1 allows remote attackers to cause a denial of service (devic… Adaptive Security Appliance Software Mitigation only Fix from $1,9502016-04-21 CRITICAL 9.8 CVE-2016-1363EPSS 6% Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through… Wireless Lan Controller Software 7.4.140.0 / 8.0.115.0+ Fix from $2,3002016-04-21 HIGH 7.5 CVE-2016-1362 Cisco AireOS 4.1 through 7.4.120.0, 7.5.x, and 7.6.100.0 on Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of servic… Aireos Mitigation only Fix from $1,9502016-04-21 HIGH 7.5 CVE-2016-0741 slapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3.4.7 allows remote attackers to cause a denial of ser… Enterprise Linux Patch available Fix from $1,9502016-04-19